[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2020/09/07 20:04:45 fuzzer started 2020/09/07 20:04:45 dialing manager at 10.128.0.26:45095 2020/09/07 20:04:46 syscalls: 3333 2020/09/07 20:04:46 code coverage: enabled 2020/09/07 20:04:46 comparison tracing: enabled 2020/09/07 20:04:46 extra coverage: enabled 2020/09/07 20:04:46 setuid sandbox: enabled 2020/09/07 20:04:46 namespace sandbox: enabled 2020/09/07 20:04:46 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/07 20:04:46 fault injection: enabled 2020/09/07 20:04:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/07 20:04:46 net packet injection: enabled 2020/09/07 20:04:46 net device setup: enabled 2020/09/07 20:04:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/07 20:04:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/07 20:04:46 USB emulation: enabled 2020/09/07 20:04:46 hci packet injection: enabled 20:07:42 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) 20:07:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ff, 0x0) r0 = socket$inet6(0xa, 0x0, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0xffffffffffffff39) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) 20:07:42 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x101181) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x8000000) 20:07:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000600)) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x34}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0xe0}, 0xe) 20:07:43 executing program 4: r0 = socket(0x18, 0x0, 0x1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x111, 0x4, 0x0, 0x300) 20:07:43 executing program 5: semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) syzkaller login: [ 237.098272][ T6853] IPVS: ftp: loaded support on port[0] = 21 [ 237.213166][ T6855] IPVS: ftp: loaded support on port[0] = 21 [ 237.330379][ T6853] chnl_net:caif_netlink_parms(): no params data found [ 237.468686][ T6857] IPVS: ftp: loaded support on port[0] = 21 [ 237.666494][ T6855] chnl_net:caif_netlink_parms(): no params data found [ 237.702585][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.710750][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.726980][ T6853] device bridge_slave_0 entered promiscuous mode [ 237.773901][ T6859] IPVS: ftp: loaded support on port[0] = 21 [ 237.785428][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.799243][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.809225][ T6853] device bridge_slave_1 entered promiscuous mode [ 237.941435][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.963698][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.049476][ T6861] IPVS: ftp: loaded support on port[0] = 21 [ 238.087387][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.096181][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.107414][ T6855] device bridge_slave_0 entered promiscuous mode [ 238.136749][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.146794][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.155823][ T6855] device bridge_slave_1 entered promiscuous mode [ 238.156625][ T6863] IPVS: ftp: loaded support on port[0] = 21 [ 238.199721][ T6853] team0: Port device team_slave_0 added [ 238.230192][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.286996][ T6853] team0: Port device team_slave_1 added [ 238.295954][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.410794][ T6855] team0: Port device team_slave_0 added [ 238.435079][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 238.445404][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.453656][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.486539][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.537350][ T6855] team0: Port device team_slave_1 added [ 238.563586][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.571222][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.599134][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.659904][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.674941][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.703933][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.718119][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.725869][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.753155][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.776325][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 238.895449][ T6853] device hsr_slave_0 entered promiscuous mode [ 238.904115][ T6853] device hsr_slave_1 entered promiscuous mode [ 238.927327][ T6855] device hsr_slave_0 entered promiscuous mode [ 238.934901][ T6855] device hsr_slave_1 entered promiscuous mode [ 238.942890][ T6855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.952189][ T6855] Cannot create hsr debugfs directory [ 239.051771][ T2469] Bluetooth: hci0: command 0x0409 tx timeout [ 239.056550][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.072478][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.082217][ T6857] device bridge_slave_0 entered promiscuous mode [ 239.090166][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.097993][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.107796][ T6859] device bridge_slave_0 entered promiscuous mode [ 239.172985][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.180533][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.191506][ T6857] device bridge_slave_1 entered promiscuous mode [ 239.198981][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.208856][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.216661][ T3132] Bluetooth: hci1: command 0x0409 tx timeout [ 239.223459][ T6859] device bridge_slave_1 entered promiscuous mode [ 239.250464][ T6861] chnl_net:caif_netlink_parms(): no params data found [ 239.337471][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.351722][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.367623][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.442591][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.462789][ T2469] Bluetooth: hci2: command 0x0409 tx timeout [ 239.562816][ T6857] team0: Port device team_slave_0 added [ 239.575898][ T6859] team0: Port device team_slave_0 added [ 239.611120][ T6857] team0: Port device team_slave_1 added [ 239.635359][ T6859] team0: Port device team_slave_1 added [ 239.691482][ T2469] Bluetooth: hci3: command 0x0409 tx timeout [ 239.708168][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.717165][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.726098][ T6861] device bridge_slave_0 entered promiscuous mode [ 239.735174][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.743351][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.770998][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.783772][ T6863] chnl_net:caif_netlink_parms(): no params data found [ 239.821726][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.829162][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.838082][ T6861] device bridge_slave_1 entered promiscuous mode [ 239.847404][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.855530][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.883511][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.907885][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.915274][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.943817][ T3132] Bluetooth: hci4: command 0x0409 tx timeout [ 239.946632][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.964898][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.972038][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.999089][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.011268][ T3132] Bluetooth: hci5: command 0x0409 tx timeout [ 240.114720][ T6861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.129894][ T6857] device hsr_slave_0 entered promiscuous mode [ 240.137872][ T6857] device hsr_slave_1 entered promiscuous mode [ 240.145418][ T6857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.153929][ T6857] Cannot create hsr debugfs directory [ 240.186834][ T6861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.230154][ T6859] device hsr_slave_0 entered promiscuous mode [ 240.237286][ T6859] device hsr_slave_1 entered promiscuous mode [ 240.246186][ T6859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.255586][ T6859] Cannot create hsr debugfs directory [ 240.269158][ T6861] team0: Port device team_slave_0 added [ 240.296417][ T6861] team0: Port device team_slave_1 added [ 240.348737][ T6855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.413110][ T6855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.453481][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.463521][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.474436][ T6863] device bridge_slave_0 entered promiscuous mode [ 240.484192][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.497625][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.530461][ T6861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.542868][ T6855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.560231][ T6855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.579055][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.599255][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.608757][ T6863] device bridge_slave_1 entered promiscuous mode [ 240.625491][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.633492][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.663073][ T6861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.725710][ T6861] device hsr_slave_0 entered promiscuous mode [ 240.736681][ T6861] device hsr_slave_1 entered promiscuous mode [ 240.745432][ T6861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.754409][ T6861] Cannot create hsr debugfs directory [ 240.774671][ T6863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.795400][ T6853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.809276][ T6853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.831273][ T6863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.898178][ T6853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.908761][ T6853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.029719][ T6863] team0: Port device team_slave_0 added [ 241.040636][ T6863] team0: Port device team_slave_1 added [ 241.130959][ T3132] Bluetooth: hci0: command 0x041b tx timeout [ 241.186329][ T6859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.197640][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.205785][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.234071][ T6863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.248729][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.257250][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.285179][ T6863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.296391][ T2469] Bluetooth: hci1: command 0x041b tx timeout [ 241.316229][ T6859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.329499][ T6859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.372087][ T6859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.429815][ T6857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.440481][ T6857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 241.454824][ T6857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.471706][ T6863] device hsr_slave_0 entered promiscuous mode [ 241.481878][ T6863] device hsr_slave_1 entered promiscuous mode [ 241.488798][ T6863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.497789][ T6863] Cannot create hsr debugfs directory [ 241.506565][ T6857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.530948][ T2648] Bluetooth: hci2: command 0x041b tx timeout [ 241.654152][ T6861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.699397][ T6861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.731726][ T6861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.773190][ T17] Bluetooth: hci3: command 0x041b tx timeout [ 241.802282][ T6861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.889261][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.990715][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.002234][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.016406][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.023904][ T2469] Bluetooth: hci4: command 0x041b tx timeout [ 242.037604][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.059642][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.067194][ T6863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.084075][ T6863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.104487][ T2469] Bluetooth: hci5: command 0x041b tx timeout [ 242.121102][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.130276][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.140761][ T2648] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.148522][ T2648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.160213][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.174279][ T6863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.190120][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.228208][ T6863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.238737][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.250405][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.258656][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.267876][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.277433][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.284755][ T3132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.294140][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.303173][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.326245][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.347677][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.362818][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.374269][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.384979][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.394524][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.402028][ T3132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.461429][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.469603][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.485458][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.496935][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.504493][ T3132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.519011][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.527426][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.540037][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.549185][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.558984][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.568258][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.577901][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.588373][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.597309][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.634692][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.645028][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.654397][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.661960][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.670186][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.680624][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.689775][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.697188][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.715585][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.738605][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.773558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.788418][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.797151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.806202][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.815613][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.825409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.848478][ T6855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.862274][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.887789][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.899559][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.909509][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.918775][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.928155][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.938043][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.947658][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.956317][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.993727][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.007624][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.018623][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.025990][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.038537][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.048198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.058070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.067355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.117414][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.124891][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.134682][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.144543][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.153459][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.172030][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.180772][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.211780][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.220523][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.235848][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.245243][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.253851][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.262325][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.272347][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.282228][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.289463][ T3132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.297928][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.307741][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.319324][ T3132] Bluetooth: hci0: command 0x040f tx timeout [ 243.333981][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.359511][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.369518][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.379296][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.381588][ T2469] Bluetooth: hci1: command 0x040f tx timeout [ 243.389559][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.403566][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.412986][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.422753][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.432301][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.441591][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.448905][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.457420][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.466400][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.476039][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.485086][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.495455][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.528809][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.548720][ T6857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.561842][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.602140][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.616535][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.625944][ T2469] Bluetooth: hci2: command 0x040f tx timeout [ 243.626389][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.640583][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.648668][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.658134][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.667897][ T2648] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.675364][ T2648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.705359][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.740084][ T6853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.747762][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.756285][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.765322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.773096][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.781402][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.818690][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.838376][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.861145][ T8156] Bluetooth: hci3: command 0x040f tx timeout [ 243.868556][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.878976][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.890684][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.900509][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.909940][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.953684][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.963404][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.974394][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.984710][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.994171][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.003904][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.012565][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.039650][ T6855] device veth0_vlan entered promiscuous mode [ 244.075088][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.084340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.091052][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 244.094536][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.107871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.118225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.126585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.145978][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.171098][ T2648] Bluetooth: hci5: command 0x040f tx timeout [ 244.185996][ T6861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.199537][ T6861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.213487][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.226054][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.235473][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.244805][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.254692][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.264002][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.273281][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.282802][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.311459][ T6859] device veth0_vlan entered promiscuous mode [ 244.336487][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.345226][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.355775][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.364114][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.374376][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.383713][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.390918][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.398772][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.407934][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.418141][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.425539][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.462031][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.470649][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.485119][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.494884][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.504727][ T6855] device veth1_vlan entered promiscuous mode [ 244.514742][ T6857] device veth0_vlan entered promiscuous mode [ 244.527360][ T6859] device veth1_vlan entered promiscuous mode [ 244.545811][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.557381][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.566695][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.576177][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.585142][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.593905][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.647326][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.658034][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.670095][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.679687][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.690598][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.699843][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.707986][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.716042][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.725244][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.747466][ T6861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.765646][ T6857] device veth1_vlan entered promiscuous mode [ 244.784815][ T6853] device veth0_vlan entered promiscuous mode [ 244.794585][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.807643][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.817375][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.825951][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.841231][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.850163][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.904389][ T6863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.918359][ T6863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.927878][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.937381][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.946598][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.955564][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.964555][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.974034][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.983011][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.999539][ T6859] device veth0_macvtap entered promiscuous mode [ 245.014467][ T6853] device veth1_vlan entered promiscuous mode [ 245.036001][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.046212][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.065686][ T6859] device veth1_macvtap entered promiscuous mode [ 245.085165][ T6855] device veth0_macvtap entered promiscuous mode [ 245.117223][ T6857] device veth0_macvtap entered promiscuous mode [ 245.147908][ T6855] device veth1_macvtap entered promiscuous mode [ 245.164407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.174137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.184371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.202505][ T6857] device veth1_macvtap entered promiscuous mode [ 245.262333][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.270464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.280547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.289060][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.297355][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.306571][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.315651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.324886][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.357328][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.365765][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.377358][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 245.385816][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.399748][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.407822][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.422457][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.435265][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.446173][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.456289][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.465932][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.481835][ T2469] Bluetooth: hci1: command 0x0419 tx timeout [ 245.496562][ T6861] device veth0_vlan entered promiscuous mode [ 245.508553][ T6859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.521653][ T6859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.530395][ T6859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.541111][ T6859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.558267][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.570625][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.585071][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.594151][ T6853] device veth0_macvtap entered promiscuous mode [ 245.607951][ T6853] device veth1_macvtap entered promiscuous mode [ 245.619398][ T6863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.649349][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.659085][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.672130][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.682001][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.690493][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.700377][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.701827][ T2469] Bluetooth: hci2: command 0x0419 tx timeout [ 245.716462][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.725002][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.745192][ T6855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.755078][ T6855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.764839][ T6855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.777460][ T6855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.798375][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.809933][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.820567][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.833591][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.845900][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.868074][ T6861] device veth1_vlan entered promiscuous mode [ 245.891614][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.900200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.910338][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.934074][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.939825][ T3132] Bluetooth: hci3: command 0x0419 tx timeout [ 245.949744][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.964317][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.975281][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.987223][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.020797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.029436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.053053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.071394][ T6857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.080163][ T6857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.095883][ T6857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.105129][ T6857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.121404][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.133708][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.144254][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.155765][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.166272][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.177860][ T2469] Bluetooth: hci4: command 0x0419 tx timeout [ 246.183911][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.197931][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.251861][ T2469] Bluetooth: hci5: command 0x0419 tx timeout [ 246.253224][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.268378][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.326570][ T8172] mmap: syz-executor.1 (8172) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 246.332712][ T6861] device veth0_macvtap entered promiscuous mode [ 246.375162][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.392146][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.419675][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.452278][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.487615][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.532466][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.550134][ C0] hrtimer: interrupt took 30043 ns [ 246.571535][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.609661][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.636328][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.706457][ T6861] device veth1_macvtap entered promiscuous mode [ 246.743606][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.771865][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.780175][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 20:07:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)='g', 0x1, 0x40, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 246.830448][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:07:53 executing program 1: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)={0x18, r0, 0x303, 0x0, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}}, 0x0) 20:07:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002bc0)='/dev/sg#\x00', 0x1000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x541b, &(0x7f0000003180)) 20:07:53 executing program 2: r0 = socket(0x22, 0x2, 0x1) getpeername$llc(r0, 0x0, 0x0) 20:07:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x100000f, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x10000000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) [ 247.149765][ T8179] device bridge1 entered promiscuous mode [ 247.212093][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.232509][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.242031][ T8179] syz-executor.3 (8179) used greatest stack depth: 23488 bytes left 20:07:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x8) [ 247.268938][ T6853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.282528][ T6853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.305490][ T6853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.331398][ T6853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.427680][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.490884][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.500757][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.531307][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.550880][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.570863][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.580741][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.592718][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.606676][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.641110][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.662753][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.680693][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.691981][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.701941][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.712585][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.723030][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.734505][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.745912][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.758651][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.770483][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.794299][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.805039][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.814516][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.823132][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.840635][ T6861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.854321][ T6861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.866035][ T6861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.875346][ T6861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.888730][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.903801][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.954543][ T6863] device veth0_vlan entered promiscuous mode [ 248.030853][ T6863] device veth1_vlan entered promiscuous mode 20:07:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) 20:07:54 executing program 2: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 20:07:54 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @local}], 0x10) 20:07:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000600)) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x34}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0xe0}, 0xe) [ 248.274930][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.306091][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 20:07:55 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000280)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x43}, 0x1c) [ 248.343915][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.398021][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.418302][ T6863] device veth0_macvtap entered promiscuous mode [ 248.447235][ T6863] device veth1_macvtap entered promiscuous mode [ 248.488600][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.501326][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.519476][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.538798][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.549511][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.561147][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.572641][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.583657][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.594350][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.605368][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.618970][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.630497][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.640602][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.650545][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.673397][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.693965][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.720522][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.741241][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.771034][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.781603][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.792582][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.802960][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.818007][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.830627][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.841712][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.855015][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.869956][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.881903][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.905413][ T6863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.915333][ T6863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.927303][ T6863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.938539][ T6863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 20:07:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2011815, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1008c20, &(0x7f0000000140)={[{@data_writeback='data=writeback'}]}) 20:07:55 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r1, 0x1, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 20:07:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000003740)=ANY=[@ANYBLOB='+%'], 0x138) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}, 0x20000000) 20:07:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_capability(r0, &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) 20:07:55 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000002b40), 0x9}, 0x2000, 0x85f6, 0x0, 0x6, 0x97a2, 0x7}, 0x0, 0xa, r1, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x2, 0x80, 0x6, 0x0, 0x7, 0x4501, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xe13, 0x5}, 0x0, 0x1, 0x100, 0x9, 0x5ca, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000380)=0x1) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x6, 0xff, 0x7, 0x5, 0x0, 0x0, 0x20000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x9000, 0x1e, 0x2e66, 0x1, 0x0, 0x2, 0xff}, 0x0, 0x2, r5, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40082404, 0x0) [ 249.176951][ T8242] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 20:07:55 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@x25={0x9, @remote={[], 0x0}}, 0x80) 20:07:56 executing program 3: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x12) 20:07:56 executing program 4: r0 = socket(0x2b, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x6, 0x17, 0x401000, 0x4) [ 249.286684][ T8250] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 20:07:56 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r1, 0x1, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 20:07:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0x2, 0x0, &(0x7f0000000240)) 20:07:56 executing program 0: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, 0x0) socket(0x0, 0x0, 0xffffff6e) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendfile(r2, r1, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 20:07:56 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 249.557732][ T8260] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 249.753290][ T8249] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 249.796670][ T8249] EXT4-fs (sda1): re-mounted. Opts: data=writeback,,errors=continue [ 249.829211][ T8274] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 249.856602][ T8274] EXT4-fs (sda1): re-mounted. Opts: data=writeback,,errors=continue 20:07:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={0x0, 0xd0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680)='ethtool\x00') 20:07:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000180)={0x0, 0x7a000000, &(0x7f0000000280)={&(0x7f0000000040)={0x58, r1, 0x1, 0x6c000000, 0x0, {0x25}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) 20:07:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) 20:07:56 executing program 1: r0 = socket(0x28, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80) 20:07:56 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, 0x0, &(0x7f0000000240)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x108) 20:07:56 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x1b, 0x2f, 0xbb, 0x8, 0x16d8, 0x6006, 0x1a4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x9, 0xab, 0x2b}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x100, &(0x7f00000006c0)=@string={0x100, 0x3, "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"}}]}) 20:07:56 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) [ 250.367064][ T2588] usb (null): failed to copy DMA map 20:07:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x83, 0x0, &(0x7f0000002140)) [ 250.551007][ T2588] usb 1-1: new high-speed USB device number 2 using dummy_hcd 20:07:57 executing program 2: r0 = getpid() process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/217, 0xd9}], 0x1, &(0x7f0000000900)=[{&(0x7f0000000540)=""/154, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 250.800999][ T2588] usb 1-1: Using ep0 maxpacket: 8 20:07:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xffffff9e, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x9d4) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f}, 0x10) r2 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x430002, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7af78b93, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x72, &(0x7f00000005c0)=""/114, 0x40f00, 0x5, [], 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x1, 0xffff}, 0x10, 0xffffffffffffffff}, 0x78) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r4, r3, 0x2, 0xf0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="230000002000ffae00060c00000ff0e302000000ff092ba68708546fabcab60dee4beb", 0x23}], 0x1}, 0x0) [ 250.921241][ T2588] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.971619][ T2588] usb 1-1: string descriptor 0 read error: -22 [ 250.978008][ T2588] usb 1-1: New USB device found, idVendor=16d8, idProduct=6006, bcdDevice=1a.4b [ 251.016485][ T2588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.084519][ T2588] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 251.458442][ T8281] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.586826][ T8319] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. 20:07:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891d, &(0x7f0000000100)={'team0\x00', 0x0}) [ 252.444364][ T8281] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.928813][ T8281] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.248005][ T2648] usb 1-1: USB disconnect, device number 2 [ 253.384355][ T8281] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.556326][ T8281] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.585012][ T8281] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.608943][ T8281] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.636267][ T8281] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.682046][ T8313] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.796681][ T8313] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.906760][ T8313] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.987489][ T8313] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.080218][ T8313] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.116213][ T8313] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.154908][ T8313] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.228579][ T8313] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 20:08:06 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(0x0, 0x0) open(0x0, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000840), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000740)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='udf\x00', 0x0, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:08:06 executing program 2: r0 = socket(0xa, 0x806, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$caif(r0, 0x0, 0x0) 20:08:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x5, 0x0) getpeername(r0, 0x0, 0x0) r1 = syz_io_uring_complete(0x0) recvmsg$can_j1939(r0, &(0x7f0000000b00)={&(0x7f0000000200)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/213, 0xd5}, {0x0}], 0x8}, 0x101) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}, {0x0, 0x0, 0x4e0c}], 0x0, &(0x7f0000000140)=ANY=[]) getdents(r3, &(0x7f0000000180)=""/118, 0x76) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x10000000) socket$alg(0x26, 0x5, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001480)='/proc/capi/capi20ncci\x00', 0x60041, 0x0) syz_io_uring_complete(0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0xffffffff, 0x0}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/null\x00', 0x440040, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)=""/128, 0x80}, {&(0x7f0000000e40)=""/27, 0x1b}, {&(0x7f0000000e80)=""/86, 0x56}], 0x3, &(0x7f0000001080)=""/85, 0x55}, 0x10001) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000c00)={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x4, 0x2, 0x4}, @jmp={0x5, 0x1, 0x9, 0x7, 0x2, 0x80, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x8000, 0xdd, &(0x7f0000000080)=""/221, 0x41000, 0x8, [], r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x2}, 0xfffffffffffffcff, 0x10, &(0x7f0000000b80)={0x0, 0x1, 0x0, 0x1}, 0x10, r5}, 0x78) 20:08:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/219) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x4c53, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x13, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYBLOB="bc01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004003f00fcc7f7ffffff8e8c0008f1000000ffff01", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="480202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004", @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f6400000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f46000000000000000000050003000e00000008000400050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff01000008", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="2c020280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071", @ANYRES32=r2, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400c9b9", @ANYRES32=0x0, @ANYBLOB="7c0102803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006000000040004000800", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000180000008000600", @ANYRES32=0x0, @ANYBLOB], 0xccc}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) 20:08:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x76, 0x141201) ioctl$USBDEVFS_CONTROL(r0, 0xc0105502, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:08:06 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB], 0xb) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0xa, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x4e24, @loopback=0xac14140e}, 0x10) 20:08:06 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x2}}) 20:08:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@delchain={0x4a0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x460, 0x2, [@TCA_TCINDEX_POLICE={0x4}, @TCA_TCINDEX_ACT={0x458, 0x7, [@m_police={0x454, 0x0, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x428, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}]]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x4a0}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc040565f, &(0x7f00000006c0)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c50df9f5"}, 0x0, 0x0, @fd}) [ 259.844354][ T2459] block nbd4: Attempted send on invalid socket [ 259.851341][ T2459] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.897034][ T2459] block nbd4: Attempted send on invalid socket [ 259.903450][ T2459] blk_update_request: I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.928915][ T8397] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 260.075877][ T2459] block nbd4: Attempted send on invalid socket [ 260.082300][ T2459] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.098087][ T8397] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 260.228329][ T8397] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found 20:08:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x8000005, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 20:08:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x44}, 0xffffff92) [ 260.335267][ T8397] UDF-fs: Scanning with blocksize 512 failed 20:08:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000001480)={'dummy0\x00', @ifru_hwaddr}) [ 260.451686][ T2459] block nbd4: Attempted send on invalid socket [ 260.457982][ T2459] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.475155][ T2459] block nbd4: Attempted send on invalid socket [ 260.481976][ T2459] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.498628][ T8397] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 260.510589][ T2459] block nbd4: Attempted send on invalid socket [ 260.517956][ T2459] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.538966][ T8397] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 20:08:07 executing program 1: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) [ 260.590395][ T8397] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 260.599494][ T8397] UDF-fs: Scanning with blocksize 1024 failed [ 260.608064][ T2459] block nbd4: Attempted send on invalid socket [ 260.614382][ T2459] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.629909][ T2459] block nbd4: Attempted send on invalid socket [ 260.638304][ T2459] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.655409][ T8397] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 260.669447][ T2459] block nbd4: Attempted send on invalid socket [ 260.675759][ T2459] blk_update_request: I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.693013][ T8397] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 260.703709][ T8397] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 260.713308][ T8397] UDF-fs: Scanning with blocksize 2048 failed [ 260.720393][ T2459] block nbd4: Attempted send on invalid socket [ 260.726701][ T2459] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.744073][ T8397] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 260.755021][ T8397] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 260.766610][ T8397] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 260.775269][ T8397] UDF-fs: Scanning with blocksize 4096 failed [ 260.782803][ T8397] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 260.794574][ T8420] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 260.819957][ T8429] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 260.844057][ T8420] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 260.874654][ T8420] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 260.901974][ T8420] UDF-fs: Scanning with blocksize 512 failed [ 260.931200][ T8420] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 260.963012][ T8420] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 261.006489][ T8420] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 261.017859][ T8420] UDF-fs: Scanning with blocksize 1024 failed [ 261.034363][ T8420] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 261.045886][ T8420] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 261.057909][ T8420] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 261.066788][ T8420] UDF-fs: Scanning with blocksize 2048 failed [ 261.075816][ T8420] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 261.087915][ T8420] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 261.098487][ T8420] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 261.115831][ T8420] UDF-fs: Scanning with blocksize 4096 failed [ 261.123219][ T8420] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) 20:08:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000000c0)={0x0, 0x8}) 20:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x70, 0x13, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 20:08:07 executing program 3: r0 = getpid() ptrace$pokeuser(0x6, r0, 0x0, 0x0) 20:08:07 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x270, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x5f}, 0x48) 20:08:07 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:08:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000002c7, 0x3f000000) 20:08:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_buf(r0, 0x84, 0x0, 0x0, 0x0) 20:08:08 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x1, @local}, 0x3e, {0x2, 0x0, @broadcast}}) 20:08:08 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) getsockname$l2tp(r0, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x0, 0x10) 20:08:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002bc0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x541b, 0x0) 20:08:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x0, 0x10, 0x0, 0x1ab}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0xd22, &(0x7f0000000340)={0x0, 0x4d38, 0x0, 0x3, 0xca}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x100000000000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x10, r1, 0x8000000) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) syz_io_uring_submit(r0, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r3, 0x0, &(0x7f0000000400)='./file0\x00', 0x82, 0x420001, 0x23456}, 0x1ff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) [ 261.489699][ T8470] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 20:08:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x0, 0x3b]}) 20:08:08 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 20:08:08 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x726944d6}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xa000000, 0x15, 0x128}) socketpair(0x1d, 0x6, 0x1, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1401, 0x400, 0x70bd28, 0x4, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa000000, 0x15}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x6ff6, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x20, 0x0) 20:08:08 executing program 2: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fccd08748f0efb41a83d64c87af1fef2bf8f43"}) [ 261.685980][ T8480] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 20:08:08 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002140)={0x6, 0x70, 0xf7, 0x0, 0x40, 0x7, 0x0, 0x8, 0x60, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x4}, 0xc00, 0xa35, 0x3, 0x2, 0x1, 0x4, 0x7}, 0x0, 0x4, r0, 0x2) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x40110, r1, 0x8000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000002280)='freezer.state\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000004d40)={0x2020, 0x0, 0x0}, 0x2020) syz_open_dev$tty20(0xc, 0x4, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000021c0)={0x90, 0xfffffffffffffff5, r3}, 0x90) 20:08:08 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xc3ca}], 0x1, &(0x7f0000000040)) 20:08:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket(0x29, 0x2, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0xffffff35}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "ed53106ce552510ee44cceed4e7542e82aa3cefe8588f1335961a21c4ce9f8665b926df0a5b431da7b0a3350a730a451b3e3a0637eb556c70103e7cfc54e88fce6942a42a6d2c1f0771ae8f438ab161a6c7d7e7738098957221c8e3b1d4aa15c32df65c01d59f7e85cd8234a60f95d4e71688896dcc348b48817aecc39d0a056032567057c0066d319db9d745758f36d2c6cef277464771497b8a7992f7ebe33596900ecd5ccd3fd1973994ac5603638d54647e9a6758a0a3a3a97f40ffa3fd0a0ae500d631b0377737532841452062bf94c9a8d0921f158df135bedeab75540feae5151d1153dceb976bf8da8abdf1e9d8ac754e2ce7a61875bf6353b72b1b9", "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"}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000002100)={'bridge0\x00', @ifru_flags=0x400}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001100)={r3, 0x7ff}) 20:08:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x64, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 20:08:09 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/197, 0xc5}], 0x1}, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='?', 0x1}], 0x1}, 0x0) 20:08:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) getsockopt$inet6_tcp_buf(r0, 0x107, 0xa, 0x0, &(0x7f00000000c0)) 20:08:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socketpair(0x0, 0x5, 0x0, &(0x7f00000000c0)) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) [ 262.450650][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.511803][ T8527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:08:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x2, 0x82031, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), 0x0, {0x800}, &(0x7f0000000240)=""/211, 0xd3, &(0x7f0000000340)=""/93, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 20:08:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x23, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x40) 20:08:09 executing program 3: syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 262.899390][ T8549] fuse: Bad value for 'fd' [ 263.042639][ T8549] fuse: Bad value for 'fd' 20:08:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0xc020660b, 0x0) 20:08:10 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000003c0)="053304f844ced31c2687bce8b63010a042532bf31244d8e816ddf5a104701d3644c061f1492dd024d2c8a2d83468cff8d3c8426383e20f", 0x37}, {&(0x7f0000000400)="c793be9303a621d4cf0d3ce7ee9feb77610ab10ded4aabc16a820d58f05637481a9f8a1f470bd329e10b4b8c958d8a93ee6ab5c653913e03743b882552ef1f6d275e83cae3f204ff88161af5b4a387ce36ca8ff28b709b3e85d0066246fef2e65ecfd001f0ce2735ca81cf5b9f0a8f2f6561891b74e65275b76f088ca874f3276251ebcd8d21867061e336ccb4961cdab4147f080542ad97a8109e6ba0168a6e05ab9c6f28c58a4b353c88714a66d6a09a1a284cc4ca9d2bf614c533502d1c4455be", 0xc2}, {&(0x7f0000000500)="e282910f355a18141852690369a1741940af5d4ffdafd1c25f86792b9dcd6163ffe931a250c4c19e9ac71a735ebf0555e69ed9ca4d3185add9832834cb0d031dd0c7ae12b3e4d452ca502140baf5f889809c4ca7a10213c76615b6150fbb3f07855164b138a5c92cf99997637be5897a195714182cf22ef5e3aed14dfbc527080c2881134047c2b0c8ce2939d0f0b3a47b1b5c091f98ef6a92dc140b138d9604a93a0056c196ca1936db59c92e758f70efda5634a2", 0xb5}, {&(0x7f00000005c0)="7e3ef432cb4e9fdc69d15f0d09173707f3eb71565b80cec67a827d721ec61eba0264f26334c597fedec1fa6784413ffb5d3a69bdb23a78ece723db061f508475811a7a40bd278af07d6f0478a14f06563d6a9f2e917ad0b0234e52909f264fff63e5df46479614e689ecbbfcd682639f1f3f7d62e34d36f1d94d0b643b8f1ef553128aed5943aa033b85b5a0fc9efe70fedc3fa6879dbed2fc3e26aec6f01493d90ac40afa682dfebc84959075741f3a4f23fe6c461f5b815ab04477f5118de009ef3b9cd4981bcd3b7b495d46fc1701be868605b5cbbdfad14e8c05f64f8c44739061e7ccd397d5", 0xe8}, {&(0x7f00000006c0)="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", 0x23a}], 0x5}, 0x4c0c1) 20:08:10 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x32) getpeername(r0, 0x0, &(0x7f00000004c0)) 20:08:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000003280)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="100200001200ade96a02c3813982b185", 0xa}], 0x300}], 0x1, 0x0) 20:08:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sync() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 263.948172][ T8574] netlink: 496 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.996105][ T8574] netlink: 496 bytes leftover after parsing attributes in process `syz-executor.0'. 20:08:10 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0db6764d"}}) 20:08:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) sendmsg(0xffffffffffffffff, &(0x7f0000005e00)={&(0x7f00000055c0)=@xdp={0x2c, 0x9}, 0x80, &(0x7f0000005940)=[{&(0x7f0000005640)="59efea84aa4502b375145af36656509b1b4383fe789afeb558dba99ffd9239b1d1e2a4c929b43299a447a77999610439f92c575b3e8bce451d5fffc936f094d6cfa8b4cabae7ab698626771dfaf5638edea4ad21ad70c11acf2c2119aeeba737166d56b7faed83c6d9c29413527ca6366c4e1b9f77b3a5c593f10f267209e1e33facb8510c975d3c9386f1de94876dbf4e4c9cf99cd03b35e3225d0290c135401deb586b816ca7a414cac48153967e1bfecff5fc6258a6835609", 0xba}, {&(0x7f0000005700)="47f4425faa23638fc6d03cef60cbe24bd5a2725b6b480951ac76f108c447db43420c435e19ee8c6376ba2c595830aa4288e649c2986972a87925f3c807124ae2adcee6cc3b2e2cf58c3fe04f3252ea4a5c2740a71ce15defc59816f7a6f9f840379414d85606bf2c44ba14ec26955227ec6bc5cddfc6afa8654acbd50714d232359a7d4cabc5c1725e0287be0e150daa705e6ac947b89ba4773a77e78b5902d9209b40a4400f656b5f4e909bfc4bc55184d15288a06d7d8d41caeb0f5e71e44214445ed6d3fc5122f9af4803132f469095c5168c9820d80592b91527905bfc282813435d0b45df6cc4909f43f564b9975cfc08", 0xf3}, {&(0x7f0000005800)="9787ccf9d65c002e20592d391657f413d16b7614c210b46412bbbf949ae161481840639cb84e584f08c209badc7e9d01164154b599ed4c32f3c5e27cb1e668b5b277dfb30e18ba3dc04616f2354262ead1ccb7e45b0648b4e99db9f55850b217829bd48af270e644c5e21763c9752745e3f108ec042321514713e406b114a38a8c12d6ad635592f584833591f35833c2b453072c51b6842c9e2535792c24aeb07eca680e86a4e8c1f3a7e92bb75ab4cb63e0", 0xb2}, {&(0x7f00000058c0)}], 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="10000000000000000701000006000000b8000000000000008400000002000000496b117a523bc8909b848abf34be30979067faf4c86bfc958a202864ca0230ee02cc8d5c46aacdcb4a0207bc863d380c6a7e538bc1a66b2d78fbf559c8ce0f4cf41c456852dba50b0a495db8f6d30bfdff2ad2d33b11bb2878bc22568539bff7ec3e020000000000000000ce0196c435c34f0383fb000200008bb077478a0a40e0c49ae851efa299de77fddabd1087d6948f36dc78dd0851fa28e2ca95a186778dcb5b32f87197529fbd246c172a00000100000000000017010000020000004ef6a3310bd55695e15e3b7961c4b68433593ebce3666b6de1b42f6d6772b8e769b3c6c09b3c5e0ba4742681000000000000008e2004e61fb00316cb52d55b0418f5e0c807fc95be90db88e51808cbc33f364befc9c64f67c62dddb64b8c550ae6246001000000000000005c36d472eb4501e740fa5ec27706d10ecd80b4a7cdb6db1ac1f946834eff9fc1b67693732212d3013d0db16cc9414c6cf880d5767a95fcba43fdbcb523b2989ffa191f03c4147ce043a8cd4ca3fe9e52389816fa41791ed393c3851af9c6b7a83745af301927ce4134a4e6b03fb90ce94999cfba0ba7641ce59cb0b871014ceaeaa8dbbdae58000000000000000a010000050000005083717f7101674629bff96082eacc1bc64a1d7afa37cbbe295a08161b9de31fea69a99ca0a6c300014199499d90d9767371d1423269e3a8f0666ef22eeac296000038000000000000000101000003000000b2c37a60b601596697ea8ed1dd889a95223540fc79a38ddcffe8ea6bcaa1e1ec0a9a74770000000078000000000000000e01000002000000d5bb635f8923f3d4bbee75ddbd328fbd13bd999f6f4da1b7d3c6527fb4f7fe8a9d4880f0a4f816c3bee75d4d38b5d1b5e2fec4974fe00d271fe28c0f4ff50c8d5839ad72cc5d2bb0af6bbe09454c403d576ccb636854688619c64480da59d0fc9285781a0000000070000000000000000201000004000000094de6eec752da6bdc4c2b7e68142a56bd95463ad09ec1272f7676c27b3570e41357fb627e083b584b357e1ec0dabe52201f32201053eb4ed9942d91c5738607f569bcb61dc955a3d9b5eaeebd35ff5cfdc920b6cf765e282ef2a85d3a0000004000000000000000110100000008000000000000e9745f2f6aeba538d5dedae12a86655504d99aa187cfe0062e350ebc8b8cb913bc869678272822917db926830c06e3305c6bf07ee029328d88f79a3553eda0df51157a015a4e2a905937dd6467"], 0x3d8}, 0x24000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$sock(r1, &(0x7f0000000580)={&(0x7f0000000280)=@ax25={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f00000007c0)="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", 0xfff}, {&(0x7f0000000380)="fc2f0251898c9c064a62866053fdb08f4b90b3f2c143586e339c821cace11890a749ed17ca6751412d2fd22f3398bca03aba0ae9c4da6ad94c", 0x39}, {&(0x7f0000000400)="a0965a4d8b0ea093b08817a7b6dbef7eac1f799767ed794b32d63549912940508db301c3ad5b0b197340e160308786633227b7f96da45475f13e8cc397118199aba6742d4ffc1ad3d0a2b1dfadf4d0d47a999d63eacfb74c586389d21c01bf3b5100b4e4e7aeb145ac66f01f5313349e98f0afe6c4d9d2e84d0aee67a0c1125876401a0deab238ed69b98fddd1a956c74f5a0a613f8fd947ca1ad870ed8b5aa327100cd796eb547b0f32aeb13efc0ff15b5b8bb33a0eb17a9a494fcaf2b8053309cc764750ed44da150bc5691d38074b77356b7ea77b9aa850d4b99cea97fb35e28f6e039df025c24087d644f7", 0xed}], 0x3, &(0x7f0000000540)}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, &(0x7f0000000100)=""/34, 0x0, 0x0, 0x0, r1, 0x8a255d95fc37158b}, 0x38) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x0, 0xf, 0x7f, 0xed, 0x0, 0x1, 0x40, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xa0, 0x3}, 0x2108, 0x7f, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 20:08:10 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) 20:08:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10) 20:08:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 20:08:10 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) pselect6(0x40, &(0x7f0000000380)={0x4, 0x7, 0x6}, &(0x7f00000003c0)={0x0, 0x101, 0x200, 0x1bef, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x9]}, 0x8}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:08:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x400, 0x3, 0x23}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b8a0008ec00f79bdf0ffffff8f8820eeb20000008037460f01f840f4c744240009000000c744240200100000c7442406000000000f011c24d9f3f23e63010f71f0a0c4c22db673d8", 0x49}], 0x1, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) 20:08:11 executing program 4: r0 = socket(0xa, 0x800000003, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}}, 0x2004c005) 20:08:11 executing program 5: mbind(&(0x7f0000b34000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x0) 20:08:11 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) 20:08:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8946, &(0x7f00000001c0)={'syzkaller1\x00', @ifru_data=&(0x7f0000000000)="03000000c2cd12c79ea4a34f56000000000000fa3e1515dd157540cd9400"}) 20:08:11 executing program 1: r0 = socket(0x18, 0x0, 0x1) accept4$packet(r0, 0x0, 0x0, 0x0) 20:08:11 executing program 0: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000a, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) getpriority(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x401}, 0x10) close(r0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) getpgid(0x0) 20:08:11 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x4c}}, 0x0) 20:08:11 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045006, &(0x7f00000000c0)) 20:08:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0xffffff80, 0x178, 0x178, 0x2000, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vlan0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 264.719951][ T8631] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 20:08:11 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 264.764838][ T8631] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 20:08:11 executing program 3: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0xc4, [0x0, 0xfffff000], 0x8001}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x87}, &(0x7f0000000080)=0x8) write$fb(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)=ANY=[@ANYBLOB="450000000000af67e5063055b67a7aed8e6ce1dee0059c98dafac24365437054023d59ba3a1fc74e7998c506641ae84e7c772082153c616c3e6dcaaff9fddd3d9a400d27d4a83dc3a8d0cc"]) 20:08:11 executing program 0: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000a, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) getpriority(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x401}, 0x10) close(r0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) getpgid(0x0) 20:08:11 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x2000000, &(0x7f0000000240)='mime_typeeth1-usercgroup+$vmnet1eth1@#$\x00') connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) socket$can_bcm(0x1d, 0x2, 0x2) r3 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000002c0)={{0x2, 0x0, 0x3, 0x2, 0x7e}, 0x3, 0x7fffffff, 0x100000000}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000280)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}, {{&(0x7f0000001500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) bind$llc(r4, &(0x7f0000000040), 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 20:08:11 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0xc0684608, 0x0) 20:08:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0xf01, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 20:08:11 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8946, &(0x7f0000000000)={'virt_wifi0\x00', 0x400007}) 20:08:11 executing program 0: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000100)) [ 265.057406][ T8647] sctp: [Deprecated]: syz-executor.3 (pid 8647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.057406][ T8647] Use struct sctp_sack_info instead 20:08:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 20:08:12 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x5542, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x3400) 20:08:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0, 0x0) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) [ 265.279386][ T8647] sctp: [Deprecated]: syz-executor.3 (pid 8647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.279386][ T8647] Use struct sctp_sack_info instead 20:08:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae6a, 0x0) r2 = io_uring_setup(0x682b, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[r1]}, 0x1) [ 265.435599][ T29] audit: type=1800 audit(1599509292.159:2): pid=8708 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15828 res=0 errno=0 20:08:12 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000002500)='fdinfo/4\x00') [ 265.523017][ T29] audit: type=1800 audit(1599509292.209:3): pid=8708 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15828 res=0 errno=0 20:08:12 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5412, &(0x7f0000000100)={0xff7f, 0x0, 0x0, 0x0, 0x0, "e06eeeb6cbfa09cd"}) 20:08:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xc048ae65, 0xfffffffffffffffc) 20:08:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0xffffffffffffffb3, 0x2, 'veth1_to_team\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x4040) openat$cuse(0xffffffffffffff9c, &(0x7f0000002340)='/dev/cuse\x00', 0x2, 0x0) 20:08:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r0, 0x1, 0x3f, 0x0, &(0x7f0000000080)) 20:08:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fchown(r0, 0x0, 0x0) 20:08:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 20:08:12 executing program 5: ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000025c0)={0x3, 'ip_vti0\x00'}) r0 = socket$kcm(0x2, 0x2, 0x73) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000026c0)) 20:08:12 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x101001, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) 20:08:12 executing program 0: capset(&(0x7f0000000700)={0x19980330}, &(0x7f0000000740)) clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 266.238142][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:08:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000240)={{0x0, 0x0, 0x80}}) 20:08:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x800000003, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x1ec}}, 0x0) 20:08:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000480)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 266.297223][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.329437][ T8852] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 20:08:13 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000100)) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x8}], 0x2, 0x0) [ 266.402586][ T8857] HTB: quantum of class 80018000 is big. Consider r2q change. 20:08:13 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x5100, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x5100, 0x0) 20:08:13 executing program 3: r0 = socket(0x22, 0x2, 0x3) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000001040)) [ 266.468754][ T8864] HTB: quantum of class 80018004 is big. Consider r2q change. [ 266.506276][ T8857] HTB: quantum of class 80018004 is big. Consider r2q change. [ 266.538778][ T8869] FAT-fs (loop4): bogus number of reserved sectors [ 266.553506][ T8857] HTB: quantum of class 80028000 is big. Consider r2q change. [ 266.563608][ T8869] FAT-fs (loop4): Can't find a valid FAT filesystem [ 266.573290][ T8871] HTB: quantum of class 80028004 is big. Consider r2q change. 20:08:13 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000400)='./file0\x00', 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x10001) sendfile(r1, r2, 0x0, 0x7fffffff) perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r1, 0x60) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40008c4}, 0x40050) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) [ 266.587319][ T8857] HTB: quantum of class 80028004 is big. Consider r2q change. [ 266.663259][ T8869] FAT-fs (loop4): bogus number of reserved sectors [ 266.703326][ T8869] FAT-fs (loop4): Can't find a valid FAT filesystem 20:08:13 executing program 2: ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r0 = socket(0x0, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x8, 0x0, &(0x7f0000000100)) r1 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x541b, 0x0) sendto$l2tp(r1, &(0x7f0000000140)="b2f2dfc05ba4b93b42931d0d65bb91b83ee8f0630342051a465005d9b8e202af", 0x20, 0x800, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000029c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a00)=0x14) [ 266.741990][ T29] audit: type=1800 audit(1599509293.469:4): pid=8883 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15836 res=0 errno=0 [ 266.784641][ T29] audit: type=1804 audit(1599509293.469:5): pid=8883 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir104294455/syzkaller.a6wFPw/17/file0/file0" dev="sda1" ino=15836 res=1 errno=0 [ 266.876858][ T29] audit: type=1804 audit(1599509293.599:6): pid=8885 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir104294455/syzkaller.a6wFPw/17/file0/file0" dev="sda1" ino=15836 res=1 errno=0 20:08:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000000280)={0x28000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0], 0x1}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x406, 0x2, 0x1, 0x2, 0x8, 0x0, 0x81}, r2, 0xd, r1, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0xd1, 0x80, 0x3f, 0x0, 0x6, 0x400, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x24, 0x4, @perf_config_ext={0x4, 0x5}, 0x0, 0x9, 0x3ff8, 0x1, 0xae, 0x20, 0xfff8}, r0, 0x3, r1, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') keyctl$search(0xa, 0x0, &(0x7f0000000040)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) ioctl$TIOCGSID(r4, 0xb701, 0x0) r5 = getpid() clone3(&(0x7f0000000280)={0x28000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r5], 0x1}, 0x58) syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/user\x00') 20:08:13 executing program 0: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x191) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x74) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') 20:08:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0d05605, &(0x7f0000000100)={0x2, 0x0, 0x280, 0x0, 0x31384142, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '_\a\x004'}, 0x0, 0x0, @userptr}) 20:08:13 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f00000096c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@local]}}}], 0x28}}], 0x2, 0x0) 20:08:13 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$can_raw(r0, &(0x7f0000000280), 0x10) 20:08:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mmap$dsp(&(0x7f0000fce000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5937, &(0x7f0000000100), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000d5a000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 20:08:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r0, 0x25}, 0x10) 20:08:14 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x5188a4b349f04a73) write$P9_RMKNOD(r0, &(0x7f0000000180)={0x14}, 0x14) 20:08:14 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) chown(0x0, 0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)) setuid(0x0) [ 267.610768][ T29] audit: type=1804 audit(1599509294.329:7): pid=8889 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir104294455/syzkaller.a6wFPw/17/file0/file0" dev="sda1" ino=15836 res=1 errno=0 20:08:14 executing program 5: getitimer(0x0, &(0x7f00000001c0)) socket(0x10, 0x80002, 0x0) r0 = clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x1000, &(0x7f0000000240), 0x0, 0x0, {}, &(0x7f0000000300)=""/69, 0x45, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000540)={0x1000900, 0x0, 0x0, &(0x7f0000000100), {0x36}, &(0x7f0000000140)=""/37, 0x25, &(0x7f0000000180)=""/176, &(0x7f0000000500)=[0x0, r0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid\x00') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x38) clock_gettime(0x4, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@empty, @dev, @loopback}) accept$inet6(r1, &(0x7f0000000000), &(0x7f0000000280)=0x1c) 20:08:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r0, 0x25}, 0x10) [ 267.747807][ T29] audit: type=1804 audit(1599509294.389:8): pid=8889 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir104294455/syzkaller.a6wFPw/17/file0/file0" dev="sda1" ino=15836 res=1 errno=0 20:08:14 executing program 1: r0 = socket(0x1e, 0x2, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x10f, 0x87, 0x0, 0x0) 20:08:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x1000000000000000, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)="0272f8e661d82e2f7a19243ccd5cef7165de1e59931f71baa88f", 0x1a}, {0x0}, {&(0x7f0000002900)="c9", 0x1}], 0x4}], 0x7fffefe6, 0x0) [ 267.953917][ T29] audit: type=1804 audit(1599509294.399:9): pid=8889 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir104294455/syzkaller.a6wFPw/17/file0/file0" dev="sda1" ino=15836 res=1 errno=0 20:08:14 executing program 3: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x4000) 20:08:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x18, 0x1, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 20:08:14 executing program 1: socket(0x23, 0x805, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 20:08:15 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 20:08:15 executing program 4: socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x3}]}) 20:08:15 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000180)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 20:08:15 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev, {[@noop, @end, @generic={0x0, 0xf, "75b33a27de1c817e63cf8de378"}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}) 20:08:15 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000500)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4015013, r1, 0x0) 20:08:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) [ 268.596067][ T29] audit: type=1800 audit(1599509295.319:10): pid=8963 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15813 res=0 errno=0 20:08:15 executing program 3: socket(0x0, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x6, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffffffffffff6f39, 0x0, 0x0, 0x6, 0x6, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) syz_open_dev$hiddev(0x0, 0x2, 0x123000) r0 = socket(0x0, 0x5, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002a40)={0x4d0, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x4}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{}, {}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x5}]}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x4d0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') 20:08:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ad7fcad5"}}) 20:08:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 20:08:15 executing program 2: r0 = socket(0xa, 0x3, 0x6) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xcee}, 0x20) 20:08:15 executing program 1: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f00000016c0)={0x2, 0x4e24, @broadcast}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$can_j1939(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="8f", 0x1}}, 0x0) 20:08:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="0ce1e1e3dbe64a265259e7ed55bcbd921d00000000000100", 0x18) 20:08:15 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 20:08:15 executing program 5: clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) 20:08:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x3, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x0) 20:08:15 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3e70, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x8000000) read$FUSE(r0, 0x0, 0x0) 20:08:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="e00000001a003303000000000000000063636d2863616d656c6c"], 0xe0}}, 0x0) 20:08:16 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast2, 0x2}, 0x1c) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) 20:08:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x400310) 20:08:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9, 0x11, r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x26242, 0x0) write$apparmor_exec(r1, 0x0, 0xe) 20:08:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) lstat(0x0, 0x0) 20:08:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000040)=""/82) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0), 0x1) 20:08:16 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') inotify_init() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x7ffc, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3f, 0xe4ac, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0xff}, 0x0, 0xe0c, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{}, 0x5, &(0x7f0000000280)=[0xb2d1, 0x7fff, 0xb, 0x200, 0xa53], 0x6, 0x1, [0x9b45, 0x0, 0x10002, 0xbd40000000000000]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 20:08:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80000, 0x0) move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$CHAR_RAW_ROGET(r1, 0x125e, &(0x7f00000000c0)) clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000002180), &(0x7f00000021c0), {}, 0x0, 0x0, &(0x7f0000002200)=""/67, 0x0}, 0x58) 20:08:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0xc208ae62, 0x0) 20:08:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x349841, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x14) sendfile(r1, r1, &(0x7f0000000000), 0x0) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x3200c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x5b) sendmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES32], 0x4d8}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@rc={0x1f, @any, 0x5}, 0x9d, &(0x7f00000012c0)=[{&(0x7f0000000040)="4d03e417c44eb9976cc6e92d3c6e9a40c4753445cd4156b2703070c44775aead6e1d21a99e8a357f5f912869b774545b51b785ae705fffa3ad3383b8beea143a5d9a32d269d5c4415489047e6f41c81c2ab30a9309c381826787811eb550791099f042ec75d7c2925e06d05c7ec7999a089cb9f84b6e1b7d3aac2ac745"}, {&(0x7f0000001240)}], 0x2, &(0x7f0000001300)=[{0x48, 0x119, 0x7, "c0230453b1dbb14938993069531cda62013fbbbae7c262cd7496e26fc1316977180624987eac3ad8e2fed8ee6c22456876b78ab32a50"}], 0x48}}], 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) keyctl$set_timeout(0xf, 0x0, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="4d28a31bd9eed88b003ffdc5345f563eb0036f40a4df9965686c1f0000008dbb78f2a122e909431e64adc859b6ec8f2343a25275b2cc3bf90c7d916f532f609102b27f2b2fcc7cc84db7ea93cf27e5d5365de90565f145bcb6fd02f358df6f409492312b57a3657b8c086fd1b7c0d5eb74c8e21cc3d601430c2af6b64f6e06c82960ebd6ad1e2732cba649e1852e755a290600f7069988cf40ac685f70bca11889ad39c7d5c5beb9227dbf8c943489144f061264c0684b6a94a41fa092fd72"], 0xbf) unshare(0x60000000) 20:08:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000240)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000001700)=0x1) socket(0x0, 0x0, 0x6) 20:08:17 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000040)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private}}}], 0x20}, 0x0) 20:08:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}}, 0x0) 20:08:17 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045005, &(0x7f0000000040)) 20:08:17 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="d800000018008109e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc0009009b0006000b0000000500050007008178a8001600140006400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1f9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e0ffdcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 270.593054][ T9071] rdma_rxe: rxe creation allowed on top of a real device only [ 270.628224][ T9073] IPv6: NLM_F_CREATE should be specified when creating new route 20:08:17 executing program 4: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[{0x18, 0x110, 0xc, "01"}], 0x18}, 0x0) [ 270.691070][ T9073] IPv6: Can't replace route, no match found [ 270.790186][ T9073] IPv6: Can't replace route, no match found 20:08:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x2, 0x1}, 0x2c) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:08:17 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='pipefs\x00', 0x0, 0x0) [ 271.068735][ T9075] IPVS: ftp: loaded support on port[0] = 21 [ 271.396392][ T9092] IPVS: ftp: loaded support on port[0] = 21 20:08:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x13, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}}, 0x0) 20:08:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) set_mempolicy(0x2, &(0x7f0000000080)=0xbb3, 0x59) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 20:08:18 executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x82740}, 0x18) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 271.527601][ T9120] UBIFS error (pid: 9120): cannot open "ubifs", error -22 [ 271.617473][ T2588] usb (null): failed to copy DMA map [ 271.791052][ T2588] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 272.326694][ T2588] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 272.345184][ T2588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.371004][ T2588] usb 4-1: Product: syz [ 272.385515][ T2588] usb 4-1: Manufacturer: syz [ 272.402173][ T2588] usb 4-1: SerialNumber: syz [ 272.424826][ T2588] usbip-host 4-1: 4-1 is not in match_busid table... skip! 20:08:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r0, 0x8921, &(0x7f00000002c0)={'syz_tun\x00'}) 20:08:21 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, r1, 0x0) r2 = getpid() r3 = getpid() clone3(&(0x7f0000000900)={0x400a0100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0xb}, &(0x7f0000000200)=""/220, 0xdc, &(0x7f0000000300)=""/173, &(0x7f00000003c0)=[0xffffffffffffffff, r0, r2, r3, 0x0, 0x0], 0x6}, 0x58) clone3(&(0x7f0000000d00)={0x40000, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00), {0x1b}, &(0x7f0000000a40)=""/126, 0x7e, &(0x7f0000000ac0)=""/252, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, r0, 0x0, r0, 0x0, 0x0, r4], 0x9}, 0x58) 20:08:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x404, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000004c0)={0x0, 0x0, 0x0, {0x0, @pix_mp={0x0, 0xfffffffd, 0x0, 0x0, 0x0, [{}, {0x0, 0xef7}, {}, {}, {0x4}], 0x0, 0x38}}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) socket$netlink(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$TIPC_NL_MON_PEER_GET(r1, 0x0, 0x40040) 20:08:21 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) r0 = socket(0x1000000010, 0x80002, 0x0) bind$rds(r0, &(0x7f0000000040)={0x10, 0x0, @empty}, 0x10) 20:08:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 20:08:21 executing program 3: clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x58) r0 = getpid() perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000002c0)={0x0, [[0x8001], [0xffffff81], [0x5]], [], [{0x0, 0x7fffffff}, {0x0, 0x9}, {0x0, 0x101}]}) perf_event_open(0x0, r1, 0x0, r2, 0x0) getpid() [ 274.513034][ T2648] usb 4-1: USB disconnect, device number 2 [ 274.735933][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 20:08:21 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 20:08:21 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000980)="b9ff0300600d698cff9e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 20:08:21 executing program 0: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0xa, 0x0, &(0x7f0000000300)) [ 274.963577][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.064530][ T9171] IPVS: ftp: loaded support on port[0] = 21 [ 275.085951][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 20:08:21 executing program 4: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f00000016c0)={0x2, 0x4e24, @broadcast}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) recvmsg$can_bcm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/143, 0x8f}], 0x300}, 0x0) sendmsg$rds(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f00000015c0)=""/155, 0x9b}], 0x5}, 0x0) 20:08:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x20000001) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r1) 20:08:21 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 20:08:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x406, 0x2, 0x1, 0x2, 0x8, 0x0, 0x81}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x46200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000100)) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000180)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 275.816303][ T9220] IPVS: ftp: loaded support on port[0] = 21 [ 277.608394][ T118] tipc: TX() has been purged, node left! 20:08:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x3, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)={'raw\x00'}, &(0x7f0000000780)=0x54) syz_genetlink_get_family_id$ipvs(0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40) 20:08:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x11, 0x0, 0x0) 20:08:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0080000000000000f3b0b93742c379983fe48e8739ad15be144a70a053dfff070000bd3c236bfa1c251b4a45bfe308004dc5e314658f7c945fa4adbb2c9249dda876840f3f971dd75e672624fe1584a53a000001000000000000"], 0x0) r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) accept4$inet(r0, 0x0, &(0x7f0000000040), 0x347fdca0987d39bb) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x3d) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000000200052203, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="24e7bc40ca3b0abb1e940961040c84d14690b6fd058ccd64b25b1427558166166f5deb44379dc8d098ffc418d4f70abab0dc1b5a7daad65b0e4fae73ba55e1268cc6e68c1203981ac3681ff987297397226b77513a44201a649236d15215bca4aa8323f3d41138ef106d4a97d2590ed41f47b773dda58d2bdad9e837d18f51ba0c383ed6b4bfc81402a6d3be4d874e59d9c50461b7387636326974e7a7bdbb62"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 20:08:42 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0xc0) 20:08:42 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4020032, 0xffffffffffffffff, 0x8000000) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x88, 0x80001) write$cgroup_freezer_state(r0, &(0x7f0000000040)='THAWED\x00', 0xfffffdef) 20:08:42 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x11, r2}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x402, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) 20:08:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@shortname_winnt='shortname=winnt'}]}) 20:08:42 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x2103, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 20:08:42 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') [ 296.198990][ T9277] FAT-fs (loop0): bogus number of reserved sectors [ 296.207009][ T9277] FAT-fs (loop0): Can't find a valid FAT filesystem 20:08:43 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet6(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f0000000300)="d4", 0x1}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="480000000000000029000000390000001d06017f00000000ff020000000000000000000000000001fc000000000000000000000000000001fe8000000000000000000000004000bb1400000000000000290000000b0000000000ffff0000000014"], 0x78}, 0x0) [ 296.271156][ T2588] [ 296.272674][ T9277] FAT-fs (loop0): bogus number of reserved sectors [ 296.273517][ T2588] ====================================================== [ 296.273521][ T2588] WARNING: possible circular locking dependency detected [ 296.273530][ T2588] 5.9.0-rc3-next-20200903-syzkaller #0 Not tainted [ 296.273534][ T2588] ------------------------------------------------------ [ 296.273541][ T2588] kworker/1:2/2588 is trying to acquire lock: 20:08:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000000)) [ 296.273546][ T2588] ffff888089891210 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3} [ 296.280241][ T9277] FAT-fs (loop0): Can't find a valid FAT filesystem [ 296.287170][ T2588] , at: __sock_release+0x86/0x280 [ 296.287175][ T2588] [ 296.287175][ T2588] but task is already holding lock: [ 296.287179][ T2588] ffffc90008a37da8 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 296.351194][ T2588] [ 296.351194][ T2588] which lock already depends on the new lock. [ 296.351194][ T2588] [ 296.361600][ T2588] [ 296.361600][ T2588] the existing dependency chain (in reverse order) is: [ 296.370616][ T2588] [ 296.370616][ T2588] -> #3 ((delayed_fput_work).work){+.+.}-{0:0}: [ 296.379064][ T2588] process_one_work+0x8bb/0x1670 [ 296.384534][ T2588] worker_thread+0x64c/0x1120 [ 296.389774][ T2588] kthread+0x3b5/0x4a0 [ 296.394377][ T2588] ret_from_fork+0x1f/0x30 [ 296.399309][ T2588] [ 296.399309][ T2588] -> #2 ((wq_completion)events){+.+.}-{0:0}: [ 296.407497][ T2588] flush_workqueue+0x110/0x13e0 [ 296.412949][ T2588] tipc_exit_net+0x47/0x2a0 [ 296.418055][ T2588] ops_exit_list+0xb0/0x160 [ 296.423106][ T2588] cleanup_net+0x4ea/0xb10 [ 296.428054][ T2588] process_one_work+0x94c/0x1670 [ 296.433526][ T2588] worker_thread+0x64c/0x1120 [ 296.438744][ T2588] kthread+0x3b5/0x4a0 [ 296.443347][ T2588] ret_from_fork+0x1f/0x30 [ 296.448300][ T2588] [ 296.448300][ T2588] -> #1 (pernet_ops_rwsem){++++}-{3:3}: [ 296.456120][ T2588] down_write+0x8d/0x150 [ 296.460898][ T2588] unregister_netdevice_notifier+0x1e/0x170 [ 296.467393][ T2588] bcm_release+0x94/0x750 [ 296.472256][ T2588] __sock_release+0xcd/0x280 [ 296.477378][ T2588] sock_close+0x18/0x20 [ 296.482064][ T2588] __fput+0x285/0x920 [ 296.486577][ T2588] task_work_run+0xdd/0x190 [ 296.491616][ T2588] exit_to_user_mode_prepare+0x1e1/0x200 [ 296.497812][ T2588] syscall_exit_to_user_mode+0x7e/0x2e0 [ 296.503893][ T2588] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 296.510301][ T2588] [ 296.510301][ T2588] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 296.519019][ T2588] __lock_acquire+0x29bb/0x5570 [ 296.520363][ T9279] IPVS: ftp: loaded support on port[0] = 21 [ 296.524392][ T2588] lock_acquire+0x1f3/0xae0 [ 296.524403][ T2588] down_write+0x8d/0x150 [ 296.524413][ T2588] __sock_release+0x86/0x280 [ 296.524423][ T2588] sock_close+0x18/0x20 [ 296.524434][ T2588] __fput+0x285/0x920 [ 296.524445][ T2588] delayed_fput+0x56/0x70 [ 296.524459][ T2588] process_one_work+0x94c/0x1670 [ 296.524482][ T2588] worker_thread+0x64c/0x1120 [ 296.569879][ T2588] kthread+0x3b5/0x4a0 [ 296.574476][ T2588] ret_from_fork+0x1f/0x30 [ 296.579407][ T2588] [ 296.579407][ T2588] other info that might help us debug this: [ 296.579407][ T2588] [ 296.589634][ T2588] Chain exists of: [ 296.589634][ T2588] &sb->s_type->i_mutex_key#12 --> (wq_completion)events --> (delayed_fput_work).work [ 296.589634][ T2588] [ 296.605023][ T2588] Possible unsafe locking scenario: [ 296.605023][ T2588] [ 296.612478][ T2588] CPU0 CPU1 [ 296.617847][ T2588] ---- ---- [ 296.623212][ T2588] lock((delayed_fput_work).work); [ 296.628414][ T2588] lock((wq_completion)events); [ 296.636885][ T2588] lock((delayed_fput_work).work); [ 296.644608][ T2588] lock(&sb->s_type->i_mutex_key#12); [ 296.650085][ T2588] [ 296.650085][ T2588] *** DEADLOCK *** [ 296.650085][ T2588] [ 296.658241][ T2588] 2 locks held by kworker/1:2/2588: [ 296.663433][ T2588] #0: ffff8880aa063d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 296.673792][ T2588] #1: ffffc90008a37da8 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 296.684426][ T2588] [ 296.684426][ T2588] stack backtrace: [ 296.690331][ T2588] CPU: 1 PID: 2588 Comm: kworker/1:2 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 296.699872][ T2588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.709949][ T2588] Workqueue: events delayed_fput [ 296.714893][ T2588] Call Trace: [ 296.718192][ T2588] dump_stack+0x198/0x1fd [ 296.722535][ T2588] check_noncircular+0x324/0x3e0 [ 296.727485][ T2588] ? print_circular_bug+0x3a0/0x3a0 [ 296.732702][ T2588] ? find_held_lock+0x2d/0x110 [ 296.737482][ T2588] ? lock_repin_lock+0x460/0x460 [ 296.742433][ T2588] ? mark_lock+0xbc/0x1710 [ 296.746870][ T2588] __lock_acquire+0x29bb/0x5570 [ 296.751741][ T2588] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 296.757738][ T2588] ? is_dynamic_key+0x1a0/0x1a0 [ 296.762611][ T2588] lock_acquire+0x1f3/0xae0 [ 296.767125][ T2588] ? __sock_release+0x86/0x280 [ 296.771910][ T2588] ? lock_release+0x8f0/0x8f0 [ 296.776623][ T2588] ? debug_object_deactivate+0x264/0x300 [ 296.782268][ T2588] ? lock_is_held_type+0xbb/0xf0 [ 296.787224][ T2588] down_write+0x8d/0x150 [ 296.791478][ T2588] ? __sock_release+0x86/0x280 [ 296.796255][ T2588] ? down_write_killable+0x170/0x170 [ 296.801561][ T2588] ? locks_remove_file+0x319/0x580 [ 296.806692][ T2588] ? fcntl_setlk+0xf60/0xf60 [ 296.811297][ T2588] __sock_release+0x86/0x280 [ 296.815928][ T2588] sock_close+0x18/0x20 [ 296.820100][ T2588] __fput+0x285/0x920 [ 296.824096][ T2588] ? __sock_release+0x280/0x280 [ 296.828963][ T2588] delayed_fput+0x56/0x70 [ 296.833313][ T2588] process_one_work+0x94c/0x1670 [ 296.838300][ T2588] ? lock_release+0x8f0/0x8f0 [ 296.842995][ T2588] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 296.848385][ T2588] ? rwlock_bug.part.0+0x90/0x90 [ 296.853333][ T2588] ? lockdep_hardirqs_off+0x96/0xd0 [ 296.858553][ T2588] worker_thread+0x64c/0x1120 [ 296.863255][ T2588] ? process_one_work+0x1670/0x1670 [ 296.868475][ T2588] kthread+0x3b5/0x4a0 [ 296.872560][ T2588] ? __kthread_bind_mask+0xc0/0xc0 [ 296.877709][ T2588] ret_from_fork+0x1f/0x30 20:08:43 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) [ 297.231165][ T29] audit: type=1326 audit(1599509323.939:11): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9283 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 [ 297.297313][ T29] audit: type=1326 audit(1599509323.939:12): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9283 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 297.380102][ T29] audit: type=1326 audit(1599509323.939:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9283 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 297.452394][ T29] audit: type=1326 audit(1599509323.939:14): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9283 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45d5b9 code=0x7fc00000 [ 297.514783][ T29] audit: type=1326 audit(1599509324.089:15): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9283 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 20:08:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x3, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)={'raw\x00'}, &(0x7f0000000780)=0x54) syz_genetlink_get_family_id$ipvs(0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40) 20:08:44 executing program 1: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000002f80)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000007400)=[{{&(0x7f0000001500)={0xa, 0x0, 0x0, @ipv4={[], [], @private=0xa010101}}, 0x1c, &(0x7f00000025c0)=[{&(0x7f0000001540)="fb", 0x1}], 0x1}}], 0x1, 0x48050) 20:08:44 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) readv(r0, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/240, 0xf0}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x2) mmap$dsp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000001, 0x13, r0, 0x0) 20:08:44 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x200, 0x0) 20:08:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:44 executing program 3: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) 20:08:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0x6, &(0x7f00000000c0), 0x8) [ 297.754644][ T152] tipc: TX() has been purged, node left! 20:08:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:44 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)={0x48, 0x15, 0x1, 0x0, 0x0, {0xa}, [@INET_DIAG_REQ_BYTECODE={0x21, 0x1, "2ed85be457f13a87be18b1b0f9140f4873f7573c99a40e04fb59774e40"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "6b527d5e49da3fc3ea"}]}, 0x48}}, 0x0) 20:08:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x8000000, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4, 0x3}]}}]}, 0x38}}, 0x0) 20:08:44 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) getrandom(0x0, 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'xfrm0\x00'}}}}}, 0x30}}, 0x0) accept(r2, &(0x7f00000000c0)=@llc, &(0x7f00000001c0)=0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'geneve1\x00', {}, 0x81}) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000180)=0x1, 0x4) 20:08:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) [ 297.997615][ T9365] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 298.013613][ T9370] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 298.250140][ T9351] IPVS: ftp: loaded support on port[0] = 21 20:08:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x3, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)={'raw\x00'}, &(0x7f0000000780)=0x54) syz_genetlink_get_family_id$ipvs(0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40) 20:08:45 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x0}, 0x10, 0x0}, 0x0) 20:08:45 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:45 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x6, &(0x7f0000000000)={@empty}, 0x14) 20:08:45 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1269, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:08:45 executing program 2: r0 = syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', 0x0, 0x0, 0x0, &(0x7f00000043c0), 0x0, 0x0) execveat(r0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0) [ 299.137920][ T399] tipc: TX() has been purged, node left! 20:08:45 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:46 executing program 1: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32=r1], 0x34}}, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x80, 0x8, 0x0, 0x8, 0x0, 0x0, 0xc0582, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000011c0)}, 0x38c, 0xb8, 0x4, 0x0, 0xc938, 0x2, 0x9}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r3, 0x89a0, &(0x7f0000000240)={0x5, @in={0x2, 0x4e21, @private=0xa010101}, @nfc={0x27, 0x0, 0x0, 0x5}, @tipc=@id={0x1e, 0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xfffffffffffffffd, 0x4}) 20:08:46 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0x2b, 0x0, 0x0) 20:08:46 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 20:08:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x2, 0x0, 0x400, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0xd, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) process_vm_readv(0x0, &(0x7f00000011c0)=[{&(0x7f00000026c0)=""/4094, 0xffe}], 0x1, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/206, 0xce}, {0x0}], 0x2, 0x0) 20:08:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000029000100"/20, @ANYRES32=r2, @ANYBLOB="00a3"], 0x24}}, 0x0) [ 299.754063][ T9430] IPVS: ftp: loaded support on port[0] = 21 20:08:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x3, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)={'raw\x00'}, &(0x7f0000000780)=0x54) syz_genetlink_get_family_id$ipvs(0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40) 20:08:47 executing program 1: fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) 20:08:47 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:47 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1269, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:08:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x404}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x54}}, 0x0) 20:08:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x2, 0x0, 0x400, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0xd, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) process_vm_readv(0x0, &(0x7f00000011c0)=[{&(0x7f00000026c0)=""/4094, 0xffe}], 0x1, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/206, 0xce}, {0x0}], 0x2, 0x0) 20:08:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x2, 0x0, 0x400, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0xd, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) process_vm_readv(0x0, &(0x7f00000011c0)=[{&(0x7f00000026c0)=""/4094, 0xffe}], 0x1, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/206, 0xce}, {0x0}], 0x2, 0x0) [ 301.252107][ T399] tipc: TX() has been purged, node left! 20:08:48 executing program 3: r0 = socket(0x15, 0x5, 0x0) bind$l2tp(r0, 0x0, 0x0) 20:08:48 executing program 0: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:48 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1269, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:08:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffd56) r2 = io_uring_setup(0x41bf, &(0x7f0000000100)={0x0, 0xb8ef, 0x4, 0x3, 0x8d, 0x0, r1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40088c0) 20:08:48 executing program 0: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) [ 302.353777][ T9502] IPVS: ftp: loaded support on port[0] = 21 20:08:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x3, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)={'raw\x00'}, &(0x7f0000000780)=0x54) syz_genetlink_get_family_id$ipvs(0x0) 20:08:50 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1269, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:08:50 executing program 0: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20) 20:08:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x2, 0x0, 0x400, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0xd, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) process_vm_readv(0x0, &(0x7f00000011c0)=[{&(0x7f00000026c0)=""/4094, 0xffe}], 0x1, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/206, 0xce}, {0x0}], 0x2, 0x0) 20:08:50 executing program 1: shmat(0x0, &(0x7f0000003000/0x4000)=nil, 0x7000) syz_io_uring_setup(0x7bc1, &(0x7f0000000080)={0x0, 0xea95}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 303.296451][ T399] tipc: TX() has been purged, node left! 20:08:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x84, 0x8, 0x0, &(0x7f0000000040)) 20:08:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x14) 20:08:50 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:50 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1269, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:08:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x7ff, &(0x7f0000000240)) 20:08:50 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) [ 303.956920][ T9579] IPVS: ftp: loaded support on port[0] = 21 20:08:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x3, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)={'raw\x00'}, &(0x7f0000000780)=0x54) syz_genetlink_get_family_id$ipvs(0x0) 20:08:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x1e, 0x0, 0x0) 20:08:51 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x15000a20) 20:08:51 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1269, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:08:51 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x2, 0x0, 0x400, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0xd, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) process_vm_readv(0x0, &(0x7f00000011c0)=[{&(0x7f00000026c0)=""/4094, 0xffe}], 0x1, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/206, 0xce}, {0x0}], 0x2, 0x0) 20:08:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) [ 305.052037][ T399] tipc: TX() has been purged, node left! 20:08:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) 20:08:51 executing program 0: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:08:52 executing program 3: socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) 20:08:52 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1269, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:08:52 executing program 0: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) [ 305.798928][ T9662] IPVS: ftp: loaded support on port[0] = 21 [ 306.187931][ T9680] IPVS: ftp: loaded support on port[0] = 21