[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. 2020/10/14 01:58:27 fuzzer started 2020/10/14 01:58:28 dialing manager at 10.128.0.26:46531 2020/10/14 01:58:28 syscalls: 3479 2020/10/14 01:58:28 code coverage: enabled 2020/10/14 01:58:28 comparison tracing: enabled 2020/10/14 01:58:28 extra coverage: enabled 2020/10/14 01:58:28 setuid sandbox: enabled 2020/10/14 01:58:28 namespace sandbox: enabled 2020/10/14 01:58:28 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/14 01:58:28 fault injection: enabled 2020/10/14 01:58:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/14 01:58:28 net packet injection: enabled 2020/10/14 01:58:28 net device setup: enabled 2020/10/14 01:58:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/14 01:58:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/14 01:58:28 USB emulation: enabled 2020/10/14 01:58:28 hci packet injection: enabled 2020/10/14 01:58:28 wifi device emulation: enabled 01:59:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) 01:59:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@hci={0x1f, 0x8, 0x2}, 0x80) 01:59:18 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0x40045613, &(0x7f00000001c0)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "70f07400"}, 0x0, 0x0, @userptr}) 01:59:19 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0605345, &(0x7f00000000c0)={{}, 'port1\x00'}) 01:59:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=@srh, 0x8) 01:59:19 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x65, 0x4, 0x0, 0x4) syzkaller login: [ 99.323365][ T6859] IPVS: ftp: loaded support on port[0] = 21 [ 99.514705][ T6861] IPVS: ftp: loaded support on port[0] = 21 [ 99.543091][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 99.632762][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.640155][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.649543][ T6859] device bridge_slave_0 entered promiscuous mode [ 99.701806][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.708897][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.731405][ T6859] device bridge_slave_1 entered promiscuous mode [ 99.762382][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.782507][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.807618][ T6863] IPVS: ftp: loaded support on port[0] = 21 [ 99.810113][ T6859] team0: Port device team_slave_0 added [ 99.825314][ T6859] team0: Port device team_slave_1 added [ 99.846816][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.854868][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.882462][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.908043][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.917064][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.965730][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.021730][ T6865] IPVS: ftp: loaded support on port[0] = 21 [ 100.062527][ T6859] device hsr_slave_0 entered promiscuous mode [ 100.074330][ T6859] device hsr_slave_1 entered promiscuous mode [ 100.335778][ T6867] IPVS: ftp: loaded support on port[0] = 21 [ 100.338639][ T6869] IPVS: ftp: loaded support on port[0] = 21 [ 100.387026][ T6861] chnl_net:caif_netlink_parms(): no params data found [ 100.712231][ T6863] chnl_net:caif_netlink_parms(): no params data found [ 100.727309][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.734784][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.744016][ T6861] device bridge_slave_0 entered promiscuous mode [ 100.753277][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.760983][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.768605][ T6861] device bridge_slave_1 entered promiscuous mode [ 100.776430][ T6865] chnl_net:caif_netlink_parms(): no params data found [ 100.797458][ T6859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.847325][ T6859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.888735][ T6861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.916501][ T6859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.963838][ T6861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.981523][ T6859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.132943][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.140034][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.155568][ T6863] device bridge_slave_0 entered promiscuous mode [ 101.164163][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.171471][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.179215][ T6863] device bridge_slave_1 entered promiscuous mode [ 101.188858][ T6861] team0: Port device team_slave_0 added [ 101.195167][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.203289][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.211512][ T6865] device bridge_slave_0 entered promiscuous mode [ 101.221577][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.228618][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.236410][ T6865] device bridge_slave_1 entered promiscuous mode [ 101.243988][ T6869] chnl_net:caif_netlink_parms(): no params data found [ 101.276368][ T6861] team0: Port device team_slave_1 added [ 101.288908][ T6867] chnl_net:caif_netlink_parms(): no params data found [ 101.321073][ T6863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.331457][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 101.339788][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.362742][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.369717][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.397114][ T6861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.432175][ T6863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.447640][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.460394][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.467906][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.490347][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 101.498732][ T6861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.595885][ T6863] team0: Port device team_slave_0 added [ 101.609561][ T6861] device hsr_slave_0 entered promiscuous mode [ 101.616715][ T6861] device hsr_slave_1 entered promiscuous mode [ 101.624135][ T6861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.631928][ T6861] Cannot create hsr debugfs directory [ 101.648382][ T6865] team0: Port device team_slave_0 added [ 101.666151][ T6863] team0: Port device team_slave_1 added [ 101.693270][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.708338][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.717287][ T6869] device bridge_slave_0 entered promiscuous mode [ 101.730430][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 101.732114][ T6865] team0: Port device team_slave_1 added [ 101.744033][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.752124][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.778765][ T6863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.807474][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.815282][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.825689][ T6869] device bridge_slave_1 entered promiscuous mode [ 101.858223][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.865858][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.892514][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.908370][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.917104][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.943852][ T6863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.971423][ T3939] Bluetooth: hci3: command 0x0409 tx timeout [ 101.977918][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.989728][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.016316][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.057092][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.087577][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.095562][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.104343][ T6867] device bridge_slave_0 entered promiscuous mode [ 102.115112][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.126103][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.133785][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 102.142061][ T6867] device bridge_slave_1 entered promiscuous mode [ 102.154809][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.196449][ T6863] device hsr_slave_0 entered promiscuous mode [ 102.203942][ T6863] device hsr_slave_1 entered promiscuous mode [ 102.211016][ T6863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.218583][ T6863] Cannot create hsr debugfs directory [ 102.244049][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.253508][ T6865] device hsr_slave_0 entered promiscuous mode [ 102.262955][ T6865] device hsr_slave_1 entered promiscuous mode [ 102.269484][ T6865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.278026][ T6865] Cannot create hsr debugfs directory [ 102.288178][ T6869] team0: Port device team_slave_0 added [ 102.294516][ T3939] Bluetooth: hci5: command 0x0409 tx timeout [ 102.318064][ T6869] team0: Port device team_slave_1 added [ 102.331307][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.347793][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.436788][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.444433][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.472599][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.512130][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.521521][ T6867] team0: Port device team_slave_0 added [ 102.533777][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.540833][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.567441][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.590273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.600072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.613832][ T6867] team0: Port device team_slave_1 added [ 102.657233][ T6869] device hsr_slave_0 entered promiscuous mode [ 102.664775][ T6869] device hsr_slave_1 entered promiscuous mode [ 102.673607][ T6869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.682142][ T6869] Cannot create hsr debugfs directory [ 102.719027][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.728633][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.738206][ T3939] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.745546][ T3939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.754479][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.764477][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.773623][ T3939] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.780730][ T3939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.788215][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.825243][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.836373][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.864956][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.886341][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.895050][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.906646][ T6861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.926041][ T6861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.946491][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.953701][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.981380][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.009506][ T6861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.060724][ T6861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.084037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.094854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.160416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.168519][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.181496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.189734][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.198994][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.224680][ T6867] device hsr_slave_0 entered promiscuous mode [ 103.236332][ T6867] device hsr_slave_1 entered promiscuous mode [ 103.245034][ T6867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.253911][ T6867] Cannot create hsr debugfs directory [ 103.271457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.279704][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.306265][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.362438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.369868][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.410314][ T35] Bluetooth: hci0: command 0x041b tx timeout [ 103.438842][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.446697][ T6863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.469057][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.483743][ T6863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.519808][ T6863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.540710][ T6865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.563815][ T6863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.570725][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 103.599065][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.620322][ T6865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.643558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.652908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.680174][ T6865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.696530][ T6865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.726950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.736491][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.747057][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.754179][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.762289][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.771174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.779483][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.786564][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.831555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.839405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.865872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.879119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.888054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.899536][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 103.902560][ T6869] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.936945][ T6869] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.950005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.966142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.977860][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.997081][ T6859] device veth0_vlan entered promiscuous mode [ 104.011491][ T6869] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.035507][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.044854][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.051479][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 104.055776][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.068215][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.077999][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.086926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.113288][ T6869] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.144956][ T6859] device veth1_vlan entered promiscuous mode [ 104.158442][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.166739][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.175985][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.185796][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.194720][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.204253][ T6867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.230153][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 104.241876][ T6867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.258605][ T6867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.271385][ T6861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.289812][ T6867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.362605][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.371377][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 104.387623][ T6865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.403475][ T6859] device veth0_macvtap entered promiscuous mode [ 104.419878][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.428477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.437367][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.446721][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.458049][ T6859] device veth1_macvtap entered promiscuous mode [ 104.489258][ T6861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.505625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.516567][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.526479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.541505][ T6865] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.563169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.572041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.579626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.588673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.597345][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.604473][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.616613][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.626263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.640166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.667895][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.679748][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.696095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.708041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.728071][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.740824][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.762172][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.772208][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.781464][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.791239][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.800042][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.807081][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.815964][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.824724][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.833726][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.840862][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.852343][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.877502][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.889408][ T6859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.903252][ T6859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.916053][ T6859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.926689][ T6859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.939201][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.950300][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.957914][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.977198][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.990918][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.010610][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.019120][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.029301][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.036435][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.045349][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.054696][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.063814][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.070935][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.079797][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.127682][ T6861] device veth0_vlan entered promiscuous mode [ 105.153421][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.163981][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.173831][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.180952][ T8105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.189750][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.198859][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.207899][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.251308][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.258977][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.272297][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.284225][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.295032][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.327997][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.351134][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.359402][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.369180][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.379516][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.391724][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.399463][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.431637][ T6861] device veth1_vlan entered promiscuous mode [ 105.465288][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.490362][ T17] Bluetooth: hci0: command 0x040f tx timeout [ 105.496590][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.522210][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.542675][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.560760][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.569254][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.582294][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.591802][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.601182][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.611340][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.620338][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.629265][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.637987][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.647048][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.657935][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.666037][ T35] Bluetooth: hci1: command 0x040f tx timeout [ 105.707388][ T6865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.723207][ T6865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.747966][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.757122][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.765968][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.778281][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.787617][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.796943][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.805973][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.815120][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.824964][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.856080][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.864870][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.873323][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.887212][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.947340][ T6863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.956617][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.970566][ T12] Bluetooth: hci2: command 0x040f tx timeout [ 105.980750][ T6869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.992150][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.011196][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.018844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.028075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.037586][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.045555][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.053862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.063068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.071588][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.078623][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.089003][ T6861] device veth0_macvtap entered promiscuous mode [ 106.122391][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.130735][ T12] Bluetooth: hci3: command 0x040f tx timeout [ 106.138435][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.146296][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.159718][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.168669][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.175770][ T8001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.188333][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.195968][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.227500][ T6865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.238135][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.246940][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.261784][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.266799][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.278956][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.294096][ T12] Bluetooth: hci4: command 0x040f tx timeout [ 106.301778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.315581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.325308][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.337185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.346022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.358730][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.373694][ T6861] device veth1_macvtap entered promiscuous mode [ 106.395520][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.410615][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.426556][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.437367][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.456943][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 01:59:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) [ 106.484461][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.504562][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.513528][ T8105] Bluetooth: hci5: command 0x040f tx timeout [ 106.545958][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.573242][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.593151][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0 01:59:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) [ 106.641380][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.660110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.677597][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.689292][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.715011][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.728678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.744388][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.763088][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 01:59:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) [ 106.794668][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.807001][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.840348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.848825][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:59:27 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3de8ed43"}, 0x0, 0x0, @fd, 0xa59}) [ 106.906624][ T6863] device veth0_vlan entered promiscuous mode 01:59:27 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x2, 0x70, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000001a80)={0x40000000000000d5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 106.978091][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.990996][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.021485][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.033004][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.049323][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 01:59:27 executing program 0: clock_adjtime(0x0, &(0x7f00000003c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f}) [ 107.066268][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.079198][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.099186][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.110717][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 01:59:27 executing program 0: clock_adjtime(0x0, &(0x7f00000003c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f}) [ 107.118569][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.130276][ T6861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.138966][ T6861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.185146][ T6861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.218615][ T6861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.264475][ T6865] device veth0_vlan entered promiscuous mode [ 107.277867][ T6863] device veth1_vlan entered promiscuous mode [ 107.316630][ T6865] device veth1_vlan entered promiscuous mode [ 107.361159][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.369176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.385080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.393492][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.402749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.414807][ T6869] device veth0_vlan entered promiscuous mode [ 107.445146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.455249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.471044][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.478641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.491751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.509074][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.520199][ T6865] device veth0_macvtap entered promiscuous mode [ 107.545800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.559646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.567707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.583371][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 107.589050][ T6869] device veth1_vlan entered promiscuous mode [ 107.609388][ T6865] device veth1_macvtap entered promiscuous mode [ 107.656478][ T6863] device veth0_macvtap entered promiscuous mode [ 107.666741][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.684518][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.692857][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.701226][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.709139][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.717495][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.726309][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.736935][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.745334][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.755329][ T8105] Bluetooth: hci1: command 0x0419 tx timeout [ 107.786812][ T6863] device veth1_macvtap entered promiscuous mode [ 107.835593][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.844940][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.854799][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.869457][ T6869] device veth0_macvtap entered promiscuous mode [ 107.882199][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.897169][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.908411][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.919721][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.932495][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.948887][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.950109][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.961004][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.980413][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.988612][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.993014][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.009260][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.019759][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.032717][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.046753][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.057104][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.066153][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.076500][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.084502][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.093395][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.103220][ T35] Bluetooth: hci2: command 0x0419 tx timeout [ 108.109263][ T6869] device veth1_macvtap entered promiscuous mode [ 108.123408][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.134960][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.145129][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.156652][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.168747][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.182380][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.194666][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.204741][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.210245][ T5] Bluetooth: hci3: command 0x0419 tx timeout [ 108.215883][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.231078][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.241689][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.253278][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.279439][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.288564][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.300457][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.309141][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.333146][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.342521][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.356164][ T6865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.367092][ T6865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.370814][ T12] Bluetooth: hci4: command 0x0419 tx timeout [ 108.378929][ T6865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.395882][ T6865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 01:59:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@hci={0x1f, 0x8, 0x2}, 0x80) [ 108.432518][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.455602][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.475452][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.508298][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.518284][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.528787][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.539729][ T12] Bluetooth: hci5: command 0x0419 tx timeout [ 108.549671][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.561427][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.573816][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.583045][ T6863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.600041][ T6863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.630267][ T6863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.638966][ T6863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.679449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.688374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.701780][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.712716][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.722787][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.733271][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.743166][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.754174][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.765952][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.777189][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.788772][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.813481][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.822784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.831861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.840273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.848571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.857409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.868986][ T6867] device veth0_vlan entered promiscuous mode [ 108.906235][ T6869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.917115][ T6869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.926010][ T6869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.936189][ T6869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.977223][ T6867] device veth1_vlan entered promiscuous mode [ 109.032253][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.043909][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.064186][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.091006][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.180225][ T375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.188308][ T375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.227862][ T6867] device veth0_macvtap entered promiscuous mode [ 109.234286][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.246935][ T375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.265502][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.273170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.281067][ T375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.289738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.299414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.308268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.316857][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.327508][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.347671][ T6867] device veth1_macvtap entered promiscuous mode [ 109.445946][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.452267][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.469893][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.475095][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.505649][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.531840][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.559848][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.579820][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.589636][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.607710][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.619591][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.635494][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.653152][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.662003][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.672858][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.681214][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.689649][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.727763][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.749343][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.772022][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.792298][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.805648][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.817511][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.828187][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.838871][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.848764][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.859363][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.881307][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.897952][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.907456][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.907927][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.927993][ T6867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.937503][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.945435][ T6867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.956460][ T6867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.965578][ T6867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.985361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:59:30 executing program 2: socketpair(0x11, 0x2, 0x2, &(0x7f0000000000)) 01:59:30 executing program 0: clock_adjtime(0x0, &(0x7f00000003c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f}) [ 110.151447][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.165328][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.189211][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.204679][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.227072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.253314][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:59:30 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000009c0)={0x20, r0, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 01:59:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@hci={0x1f, 0x8, 0x2}, 0x80) 01:59:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x6, 0x0, 0xa}]}, 0x30}}, 0x0) 01:59:30 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000440)='/dev/v4l-subdev#\x00', 0x843, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc0445624, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8a8eee96"}}) 01:59:30 executing program 0: clock_adjtime(0x0, &(0x7f00000003c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f}) 01:59:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x110}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 01:59:30 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x58, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) 01:59:30 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00'}, 0x10) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208202) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffa) 01:59:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@hci={0x1f, 0x8, 0x2}, 0x80) 01:59:30 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r0) [ 110.545993][ T26] audit: type=1800 audit(1602640771.012:2): pid=8381 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15780 res=0 errno=0 01:59:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x2}, 0x0) 01:59:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 01:59:31 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000009c0)={0x20, r0, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 01:59:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x7, 0x1, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540), &(0x7f00000000c0), 0xfff, r0}, 0x38) 01:59:31 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x1c) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0x9a0000, 0x7fffffff, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980909, 0x5, [], @p_u32=&(0x7f0000000000)=0x1}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r2, r1) shutdown(r3, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 110.747605][ T26] audit: type=1800 audit(1602640771.212:3): pid=8388 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15780 res=0 errno=0 01:59:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x7, 0x1, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540), &(0x7f00000000c0), 0xfff, r0}, 0x38) [ 110.873361][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.946440][ T8401] bridge1: port 1(bond0) entered blocking state [ 110.955908][ T8401] bridge1: port 1(bond0) entered disabled state [ 110.967418][ T8401] device bond0 entered promiscuous mode [ 110.973568][ T8401] device bond_slave_0 entered promiscuous mode [ 110.981424][ T8401] device bond_slave_1 entered promiscuous mode [ 110.996309][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 01:59:31 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000009c0)={0x20, r0, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 01:59:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/212, 0xd4}}], 0x1, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x82600, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') preadv(r0, &(0x7f00000017c0), 0x11c, 0x0, 0x0) pipe(&(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:59:33 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 01:59:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 01:59:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x0, 0xf0000000}, 0x40) 01:59:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x7, 0x1, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540), &(0x7f00000000c0), 0xfff, r0}, 0x38) 01:59:33 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000009c0)={0x20, r0, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 01:59:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 01:59:33 executing program 3: r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000002200)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) write$smackfs_labels_list(r0, &(0x7f0000002240)={[{}, {'\xd5'}]}, 0x4) 01:59:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000be40)={0x8, 0x4, &(0x7f000000a380)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x19}]}, &(0x7f000000bc80)='syzkaller\x00', 0x5, 0xb4, &(0x7f000000bcc0)=""/180, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:59:34 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 113.560440][ C0] hrtimer: interrupt took 57832 ns 01:59:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x7, 0x1, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540), &(0x7f00000000c0), 0xfff, r0}, 0x38) 01:59:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x15, 0xa, 0x201}, 0x14}}, 0x0) 01:59:34 executing program 2: r0 = socket$inet6(0xa, 0x140000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x80000000, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 01:59:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 01:59:34 executing program 4: unshare(0x64000900) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffc, @mcast2}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x21, &(0x7f00000000c0)=""/4102, &(0x7f0000001140)=0xfffffffffffffd14) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x4000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x1000003, 0x5010, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000001200)={0x18, 0x0, {0x1, @multicast, 'veth1_macvtap\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000001240)={0x18, 0x4, {0x1, @empty, 'vlan0\x00'}}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000011c0)={0x0, 0x4}, 0x8) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'bridge_slave_0\x00'}}, 0x1e) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001180)=0x8, 0x1) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000001280)={0x18, 0x4, {0x0, @local, 'ip_vti0\x00'}}) splice(r1, &(0x7f0000000040)=0x20, r2, &(0x7f0000001100)=0x8, 0x81, 0xc4633fb62aa9069) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc9, 0x0, 0x0) 01:59:34 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 01:59:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 01:59:34 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x121202, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20000120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:59:34 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2aa70315268c7b52}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 01:59:34 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 01:59:34 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x0, 0x6c}}, 0x28}, 0x8}, 0x0) 01:59:34 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)) 01:59:34 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f00000001c0)="84", &(0x7f0000000000)=""/73}, 0x20) [ 114.146600][ T8487] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 01:59:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0) 01:59:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x6a, {0x2, 0x0, @dev}, 'veth1_vlan\x00'}) 01:59:34 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x3f}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) [ 114.620188][ C1] [ 114.622549][ C1] ======================================================== [ 114.629727][ C1] WARNING: possible irq lock inversion dependency detected [ 114.636905][ C1] 5.9.0-syzkaller #0 Not tainted [ 114.641821][ C1] -------------------------------------------------------- [ 114.648999][ C1] syz-executor.4/8452 just changed the state of lock: [ 114.655738][ C1] ffff888214eb9108 (&group->lock){..-.}-{2:2}, at: snd_pcm_period_elapsed+0x2c/0x210 [ 114.665186][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 114.673149][ C1] (&card->ctl_files_rwlock){.+.+}-{2:2} [ 114.673159][ C1] [ 114.673159][ C1] [ 114.673159][ C1] and interrupts could create inverse lock ordering between them. [ 114.673159][ C1] [ 114.693146][ C1] [ 114.693146][ C1] other info that might help us debug this: [ 114.701314][ C1] Possible interrupt unsafe locking scenario: [ 114.701314][ C1] [ 114.709618][ C1] CPU0 CPU1 [ 114.714971][ C1] ---- ---- [ 114.720322][ C1] lock(&card->ctl_files_rwlock); [ 114.725423][ C1] local_irq_disable(); [ 114.732249][ C1] lock(&group->lock); [ 114.738905][ C1] lock(&card->ctl_files_rwlock); [ 114.746518][ C1] [ 114.749958][ C1] lock(&group->lock); [ 114.754269][ C1] [ 114.754269][ C1] *** DEADLOCK *** [ 114.754269][ C1] [ 114.762490][ C1] 3 locks held by syz-executor.4/8452: [ 114.767929][ C1] #0: ffff8880857e1c90 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x94/0x260 [ 114.778172][ C1] #1: ffffffff89beb778 (rtnl_mutex){+.+.}-{3:3}, at: ip6mr_sk_done+0x9e/0x2d0 [ 114.787120][ C1] #2: ffffc90000da8db0 ((&dpcm->timer)){+.-.}-{0:0}, at: call_timer_fn+0x57/0x160 [ 114.796418][ C1] [ 114.796418][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 114.805784][ C1] -> (&card->ctl_files_rwlock){.+.+}-{2:2} { [ 114.812794][ C1] HARDIRQ-ON-R at: [ 114.816856][ C1] lock_acquire+0x160/0x710 [ 114.823171][ C1] _raw_read_lock+0x32/0x40 [ 114.829488][ C1] snd_ctl_notify+0x86/0x550 [ 114.835890][ C1] __snd_ctl_add_replace+0x582/0x8a0 [ 114.842985][ C1] snd_ctl_add+0x6e/0x110 [ 114.849126][ C1] snd_dummy_probe+0xb9e/0x1000 [ 114.855791][ C1] platform_drv_probe+0xcd/0x150 [ 114.862538][ C1] really_probe+0x753/0x1110 [ 114.868957][ C1] driver_probe_device+0x106/0x1a0 [ 114.875876][ C1] bus_for_each_drv+0x108/0x170 [ 114.882542][ C1] __device_attach+0x262/0x3f0 [ 114.889113][ C1] bus_probe_device+0xb8/0x1f0 [ 114.895704][ C1] device_add+0x1630/0x19b0 [ 114.902019][ C1] platform_device_add+0x4ad/0x6e0 [ 114.908946][ C1] platform_device_register_full+0x448/0x530 [ 114.917435][ C1] alsa_card_dummy_init+0x1b3/0x398 [ 114.924443][ C1] do_one_initcall+0x14b/0x350 [ 114.931016][ C1] do_initcall_level+0x101/0x14c [ 114.937764][ C1] do_initcalls+0x59/0x9b [ 114.943902][ C1] kernel_init_freeable+0x356/0x474 [ 114.950922][ C1] kernel_init+0xd/0x290 [ 114.957081][ C1] ret_from_fork+0x1f/0x30 [ 114.963295][ C1] SOFTIRQ-ON-R at: [ 114.967350][ C1] lock_acquire+0x160/0x710 [ 114.973658][ C1] _raw_read_lock+0x32/0x40 [ 114.979965][ C1] snd_ctl_notify+0x86/0x550 [ 114.986357][ C1] __snd_ctl_add_replace+0x582/0x8a0 [ 114.993447][ C1] snd_ctl_add+0x6e/0x110 [ 114.999578][ C1] snd_dummy_probe+0xb9e/0x1000 [ 115.006232][ C1] platform_drv_probe+0xcd/0x150 [ 115.012982][ C1] really_probe+0x753/0x1110 [ 115.019379][ C1] driver_probe_device+0x106/0x1a0 [ 115.026305][ C1] bus_for_each_drv+0x108/0x170 [ 115.032957][ C1] __device_attach+0x262/0x3f0 [ 115.039528][ C1] bus_probe_device+0xb8/0x1f0 [ 115.046093][ C1] device_add+0x1630/0x19b0 [ 115.052399][ C1] platform_device_add+0x4ad/0x6e0 [ 115.060183][ C1] platform_device_register_full+0x448/0x530 [ 115.068066][ C1] alsa_card_dummy_init+0x1b3/0x398 [ 115.075071][ C1] do_one_initcall+0x14b/0x350 [ 115.081728][ C1] do_initcall_level+0x101/0x14c [ 115.088482][ C1] do_initcalls+0x59/0x9b [ 115.094614][ C1] kernel_init_freeable+0x356/0x474 [ 115.101618][ C1] kernel_init+0xd/0x290 [ 115.107663][ C1] ret_from_fork+0x1f/0x30 [ 115.113873][ C1] INITIAL READ USE at: [ 115.118273][ C1] lock_acquire+0x160/0x710 [ 115.124926][ C1] _raw_read_lock+0x32/0x40 [ 115.131589][ C1] snd_ctl_notify+0x86/0x550 [ 115.138325][ C1] __snd_ctl_add_replace+0x582/0x8a0 [ 115.145758][ C1] snd_ctl_add+0x6e/0x110 [ 115.152236][ C1] snd_dummy_probe+0xb9e/0x1000 [ 115.159236][ C1] platform_drv_probe+0xcd/0x150 [ 115.166329][ C1] really_probe+0x753/0x1110 [ 115.173082][ C1] driver_probe_device+0x106/0x1a0 [ 115.180348][ C1] bus_for_each_drv+0x108/0x170 [ 115.187370][ C1] __device_attach+0x262/0x3f0 [ 115.194294][ C1] bus_probe_device+0xb8/0x1f0 [ 115.201216][ C1] device_add+0x1630/0x19b0 [ 115.207876][ C1] platform_device_add+0x4ad/0x6e0 [ 115.215147][ C1] platform_device_register_full+0x448/0x530 [ 115.223283][ C1] alsa_card_dummy_init+0x1b3/0x398 [ 115.230640][ C1] do_one_initcall+0x14b/0x350 [ 115.237562][ C1] do_initcall_level+0x101/0x14c [ 115.244656][ C1] do_initcalls+0x59/0x9b [ 115.251139][ C1] kernel_init_freeable+0x356/0x474 [ 115.258488][ C1] kernel_init+0xd/0x290 [ 115.264884][ C1] ret_from_fork+0x1f/0x30 [ 115.271448][ C1] } [ 115.274033][ C1] ... key at: [] snd_card_new.__key.3+0x0/0x10 [ 115.282331][ C1] ... acquired at: [ 115.286210][ C1] lock_acquire+0x160/0x710 [ 115.290864][ C1] _raw_read_lock+0x32/0x40 [ 115.295521][ C1] snd_ctl_notify+0x86/0x550 [ 115.300264][ C1] loopback_trigger+0xfbb/0x1500 [ 115.305452][ C1] snd_pcm_start+0x471/0x6c0 [ 115.310227][ C1] __snd_pcm_lib_xfer+0xf73/0x1320 [ 115.315494][ C1] snd_pcm_oss_write3+0x209/0x330 [ 115.320671][ C1] snd_pcm_plug_write_transfer+0x28b/0x490 [ 115.326624][ C1] snd_pcm_oss_write2+0x156/0x370 [ 115.331911][ C1] snd_pcm_oss_write+0x911/0xd70 [ 115.337001][ C1] vfs_write+0x2dd/0xd20 [ 115.341393][ C1] ksys_write+0x11b/0x220 [ 115.345876][ C1] do_syscall_64+0x31/0x70 [ 115.350445][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.356569][ C1] [ 115.358884][ C1] -> (&group->lock){..-.}-{2:2} { [ 115.363887][ C1] IN-SOFTIRQ-W at: [ 115.367850][ C1] lock_acquire+0x160/0x710 [ 115.373995][ C1] _raw_spin_lock_irqsave+0xaa/0xd0 [ 115.380822][ C1] snd_pcm_period_elapsed+0x2c/0x210 [ 115.387730][ C1] call_timer_fn+0x91/0x160 [ 115.393856][ C1] __run_timers+0x65e/0x830 [ 115.399995][ C1] run_timer_softirq+0x46/0x80 [ 115.406393][ C1] __do_softirq+0x256/0x6e0 [ 115.412530][ C1] asm_call_irq_on_stack+0xf/0x20 [ 115.419188][ C1] do_softirq_own_stack+0x9a/0xf0 [ 115.425844][ C1] __irq_exit_rcu+0x21f/0x230 [ 115.432143][ C1] irq_exit_rcu+0x5/0x20 [ 115.438015][ C1] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 115.445278][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 115.452887][ C1] __local_bh_enable_ip+0x160/0x1d0 [ 115.459714][ C1] nf_ct_iterate_cleanup+0x357/0x3e0 [ 115.466644][ C1] nf_ct_iterate_cleanup_net+0xfc/0x150 [ 115.473904][ C1] masq_device_event+0x9b/0xd0 [ 115.480297][ C1] raw_notifier_call_chain+0xe7/0x170 [ 115.487296][ C1] dev_close_many+0x31a/0x4d0 [ 115.493608][ C1] rollback_registered_many+0x454/0x1380 [ 115.500875][ C1] unregister_netdevice_many+0x46/0x260 [ 115.508050][ C1] mroute_clean_tables+0x211/0x970 [ 115.514889][ C1] ip6mr_sk_done+0x255/0x2d0 [ 115.521109][ C1] rawv6_close+0x5f/0x80 [ 115.526985][ C1] inet_release+0x16e/0x1f0 [ 115.533123][ C1] sock_close+0xd8/0x260 [ 115.539001][ C1] __fput+0x34f/0x7b0 [ 115.544624][ C1] task_work_run+0x137/0x1c0 [ 115.550863][ C1] exit_to_user_mode_prepare+0x125/0x1f0 [ 115.558130][ C1] syscall_exit_to_user_mode+0x82/0x1d0 [ 115.565316][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.572840][ C1] INITIAL USE at: [ 115.576720][ C1] lock_acquire+0x160/0x710 [ 115.582768][ C1] _raw_spin_lock_irq+0xa6/0xc0 [ 115.589164][ C1] snd_pcm_hw_params+0xca/0x16b0 [ 115.595642][ C1] snd_pcm_oss_change_params_locked+0x25e0/0x4410 [ 115.603599][ C1] snd_pcm_oss_make_ready+0x115/0x2b0 [ 115.610519][ C1] snd_pcm_oss_sync+0x199/0x900 [ 115.616914][ C1] snd_pcm_oss_ioctl+0x8a3/0x4660 [ 115.623480][ C1] __se_sys_ioctl+0xfb/0x170 [ 115.629612][ C1] do_syscall_64+0x31/0x70 [ 115.635573][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.643002][ C1] } [ 115.645494][ C1] ... key at: [] snd_pcm_group_init.__key+0x0/0x10 [ 115.654049][ C1] ... acquired at: [ 115.657841][ C1] __lock_acquire+0xa67/0x2bd0 [ 115.662759][ C1] lock_acquire+0x160/0x710 [ 115.667431][ C1] _raw_spin_lock_irqsave+0xaa/0xd0 [ 115.672783][ C1] snd_pcm_period_elapsed+0x2c/0x210 [ 115.678217][ C1] call_timer_fn+0x91/0x160 [ 115.682872][ C1] __run_timers+0x65e/0x830 [ 115.687526][ C1] run_timer_softirq+0x46/0x80 [ 115.692451][ C1] __do_softirq+0x256/0x6e0 [ 115.697103][ C1] asm_call_irq_on_stack+0xf/0x20 [ 115.702288][ C1] do_softirq_own_stack+0x9a/0xf0 [ 115.707465][ C1] __irq_exit_rcu+0x21f/0x230 [ 115.712298][ C1] irq_exit_rcu+0x5/0x20 [ 115.716694][ C1] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 115.722480][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 115.728612][ C1] __local_bh_enable_ip+0x160/0x1d0 [ 115.733966][ C1] nf_ct_iterate_cleanup+0x357/0x3e0 [ 115.739402][ C1] nf_ct_iterate_cleanup_net+0xfc/0x150 [ 115.745101][ C1] masq_device_event+0x9b/0xd0 [ 115.750035][ C1] raw_notifier_call_chain+0xe7/0x170 [ 115.755560][ C1] dev_close_many+0x31a/0x4d0 [ 115.760389][ C1] rollback_registered_many+0x454/0x1380 [ 115.766173][ C1] unregister_netdevice_many+0x46/0x260 [ 115.771870][ C1] mroute_clean_tables+0x211/0x970 [ 115.777133][ C1] ip6mr_sk_done+0x255/0x2d0 [ 115.781875][ C1] rawv6_close+0x5f/0x80 [ 115.786268][ C1] inet_release+0x16e/0x1f0 [ 115.790919][ C1] sock_close+0xd8/0x260 [ 115.795310][ C1] __fput+0x34f/0x7b0 [ 115.799532][ C1] task_work_run+0x137/0x1c0 [ 115.804274][ C1] exit_to_user_mode_prepare+0x125/0x1f0 [ 115.810060][ C1] syscall_exit_to_user_mode+0x82/0x1d0 [ 115.815762][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.821806][ C1] [ 115.824110][ C1] [ 115.824110][ C1] stack backtrace: [ 115.829982][ C1] CPU: 1 PID: 8452 Comm: syz-executor.4 Not tainted 5.9.0-syzkaller #0 [ 115.838192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.848224][ C1] Call Trace: [ 115.851486][ C1] [ 115.854321][ C1] dump_stack+0x1d6/0x29e [ 115.858635][ C1] print_irq_inversion_bug+0xa5c/0xd70 [ 115.864077][ C1] ? stack_trace_save+0xad/0x150 [ 115.868994][ C1] ? __bfs+0x2e6/0x5c0 [ 115.873046][ C1] mark_lock+0xe80/0x2050 [ 115.877364][ C1] ? lock_is_held_type+0xc8/0x100 [ 115.882368][ C1] __lock_acquire+0xa67/0x2bd0 [ 115.887115][ C1] ? lock_is_held_type+0xc8/0x100 [ 115.892127][ C1] lock_acquire+0x160/0x710 [ 115.896614][ C1] ? snd_pcm_period_elapsed+0x2c/0x210 [ 115.902052][ C1] ? _raw_spin_unlock_irqrestore+0x2d/0x90 [ 115.907840][ C1] ? _raw_spin_lock_irqsave+0x84/0xd0 [ 115.913190][ C1] _raw_spin_lock_irqsave+0xaa/0xd0 [ 115.918371][ C1] ? snd_pcm_period_elapsed+0x2c/0x210 [ 115.923813][ C1] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 115.930209][ C1] snd_pcm_period_elapsed+0x2c/0x210 [ 115.935475][ C1] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 115.941868][ C1] call_timer_fn+0x91/0x160 [ 115.946349][ C1] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 115.952741][ C1] __run_timers+0x65e/0x830 [ 115.957226][ C1] ? sched_clock+0x36/0x40 [ 115.961633][ C1] run_timer_softirq+0x46/0x80 [ 115.966374][ C1] __do_softirq+0x256/0x6e0 [ 115.970859][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 115.976039][ C1] asm_call_irq_on_stack+0xf/0x20 [ 115.981041][ C1] [ 115.983963][ C1] do_softirq_own_stack+0x9a/0xf0 [ 115.988966][ C1] __irq_exit_rcu+0x21f/0x230 [ 115.993622][ C1] irq_exit_rcu+0x5/0x20 [ 115.997846][ C1] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 116.003455][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 116.009419][ C1] RIP: 0010:__local_bh_enable_ip+0x160/0x1d0 [ 116.015373][ C1] Code: 8d 89 48 c1 e8 03 42 80 3c 38 00 74 0c 48 c7 c7 30 2e 8d 89 e8 61 53 6d 00 48 83 3d 39 de 44 08 00 74 6a fb 66 0f 1f 44 00 00 <65> 8b 05 05 ae b9 7e 85 c0 75 05 e8 87 20 b8 ff 5b 41 5e 41 5f 5d [ 116.035055][ C1] RSP: 0018:ffffc900169779f8 EFLAGS: 00000286 [ 116.041102][ C1] RAX: 1ffffffff131a5c6 RBX: 0000000000000286 RCX: ffff888050dac2c0 [ 116.049055][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.057007][ C1] RBP: 00000000000001ff R08: dffffc0000000000 R09: fffffbfff16e4a94 [ 116.064960][ C1] R10: fffffbfff16e4a94 R11: 0000000000000000 R12: 0000000000006cf1 [ 116.072915][ C1] R13: dffffc0000000000 R14: ffffffff86d93f65 R15: dffffc0000000000 [ 116.080875][ C1] ? local_bh_enable+0x5/0x20 [ 116.085535][ C1] ? __local_bh_enable_ip+0x131/0x1d0 [ 116.090895][ C1] nf_ct_iterate_cleanup+0x357/0x3e0 [ 116.096160][ C1] ? nf_ct_iterate_cleanup+0x3e0/0x3e0 [ 116.101599][ C1] ? masq_device_event+0xd0/0xd0 [ 116.106518][ C1] nf_ct_iterate_cleanup_net+0xfc/0x150 [ 116.112041][ C1] ? masq_device_event+0xd0/0xd0 [ 116.116974][ C1] masq_device_event+0x9b/0xd0 [ 116.121720][ C1] raw_notifier_call_chain+0xe7/0x170 [ 116.127075][ C1] dev_close_many+0x31a/0x4d0 [ 116.131824][ C1] rollback_registered_many+0x454/0x1380 [ 116.140997][ C1] ? unregister_netdevice_queue+0x246/0x4b0 [ 116.146867][ C1] ? rtnl_notify+0x7f/0xc0 [ 116.151263][ C1] ? mif6_delete+0x570/0x810 [ 116.155833][ C1] unregister_netdevice_many+0x46/0x260 [ 116.161459][ C1] ? mroute_clean_tables+0x1ef/0x970 [ 116.166841][ C1] mroute_clean_tables+0x211/0x970 [ 116.171936][ C1] ? nlmsg_notify+0x104/0x1e0 [ 116.176592][ C1] ? nlmsg_notify+0x167/0x1e0 [ 116.181248][ C1] ? rtnl_notify+0x7f/0xc0 [ 116.185648][ C1] ip6mr_sk_done+0x255/0x2d0 [ 116.190221][ C1] rawv6_close+0x5f/0x80 [ 116.194444][ C1] inet_release+0x16e/0x1f0 [ 116.198926][ C1] sock_close+0xd8/0x260 [ 116.203147][ C1] ? sock_mmap+0x90/0x90 [ 116.207366][ C1] __fput+0x34f/0x7b0 [ 116.211333][ C1] task_work_run+0x137/0x1c0 [ 116.215915][ C1] exit_to_user_mode_prepare+0x125/0x1f0 [ 116.221530][ C1] syscall_exit_to_user_mode+0x82/0x1d0 [ 116.227175][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 116.233046][ C1] RIP: 0033:0x4177b1 [ 116.236924][ C1] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 116.256524][ C1] RSP: 002b:00007ffd396c3e80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 116.264912][ C1] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004177b1 [ 116.272862][ C1] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000006 [ 116.280899][ C1] RBP: 0000000000000000 R08: 0000000001191680 R09: 0000000000000000 [ 116.288850][ C1] R10: 00007ffd396c3f50 R11: 0000000000000293 R12: ffffffffffffffff [ 116.296802][ C1] R13: 0000000000000000 R14: 0000000000000005 R15: 000000000118bf2c 01:59:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 01:59:36 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x2c}}, 0x0) 01:59:36 executing program 3: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0xffd, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x403, 0x0) 01:59:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) 01:59:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x6a, {0x2, 0x0, @dev}, 'veth1_vlan\x00'}) 01:59:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)={0x1c, 0x12, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 01:59:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x6a, {0x2, 0x0, @dev}, 'veth1_vlan\x00'}) 01:59:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x490, 0x490, 0x0, 0x280, 0x350, 0x280, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@private0, @remote, [], [], 'geneve1\x00', 'lo\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "fc11"}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, [], [], 'syz_tun\x00', 'syz_tun\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@private0}}}, {{@ipv6={@private2, @private0, [], [], 'team0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 01:59:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)={0x1c, 0x12, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 01:59:36 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x2c}}, 0x0) 01:59:36 executing program 3: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0xffd, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x403, 0x0) 01:59:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) 01:59:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x6a, {0x2, 0x0, @dev}, 'veth1_vlan\x00'}) 01:59:37 executing program 3: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0xffd, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x403, 0x0) 01:59:37 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x2c}}, 0x0) 01:59:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) [ 116.546453][ T8542] x_tables: duplicate entry at hook 1 01:59:37 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)={0x1c, 0x12, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 01:59:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)={0x1c, 0x12, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) [ 116.599265][ T8553] x_tables: duplicate entry at hook 1 01:59:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x490, 0x490, 0x0, 0x280, 0x350, 0x280, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@private0, @remote, [], [], 'geneve1\x00', 'lo\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "fc11"}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, [], [], 'syz_tun\x00', 'syz_tun\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@private0}}}, {{@ipv6={@private2, @private0, [], [], 'team0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 01:59:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) 01:59:37 executing program 3: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0xffd, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x403, 0x0) 01:59:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:59:37 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x2c}}, 0x0) 01:59:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x3}) 01:59:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x3}) 01:59:37 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 116.781081][ T8576] x_tables: duplicate entry at hook 1 01:59:37 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x490, 0x490, 0x0, 0x280, 0x350, 0x280, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@private0, @remote, [], [], 'geneve1\x00', 'lo\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "fc11"}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, [], [], 'syz_tun\x00', 'syz_tun\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@private0}}}, {{@ipv6={@private2, @private0, [], [], 'team0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 01:59:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x3}) 01:59:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:59:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:59:37 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) [ 117.063640][ T8597] x_tables: duplicate entry at hook 1 01:59:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x3}) 01:59:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x490, 0x490, 0x0, 0x280, 0x350, 0x280, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@private0, @remote, [], [], 'geneve1\x00', 'lo\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "fc11"}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, [], [], 'syz_tun\x00', 'syz_tun\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@private0}}}, {{@ipv6={@private2, @private0, [], [], 'team0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 01:59:37 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) [ 117.283949][ T8622] x_tables: duplicate entry at hook 1 01:59:37 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:37 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x3}) 01:59:38 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000301300006811000068110000681100006811000068110000601200006012000060120000601200006012000003"], 0x1) 01:59:38 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x3}) 01:59:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000301300006811000068110000681100006811000068110000601200006012000060120000601200006012000003"], 0x1) 01:59:38 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x3}) 01:59:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000301300006811000068110000681100006811000068110000601200006012000060120000601200006012000003"], 0x1) 01:59:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000301300006811000068110000681100006811000068110000601200006012000060120000601200006012000003"], 0x1) 01:59:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000301300006811000068110000681100006811000068110000601200006012000060120000601200006012000003"], 0x1) 01:59:38 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="0201bfffffff0a000000ff45ac0000ffffffa900e9311b0000000000000680000200000000000008e2ff8777007200300740a6ffffff00000000008000da55", 0x3f, 0x1c0}]) 01:59:38 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) sched_getscheduler(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)) r2 = gettid() tkill(r2, 0x1c) 01:59:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050008", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000011a00)="504d4d00504d4dff", 0x8, 0x8000}, {&(0x7f0000013b00)="ed41000000100000d3f4655fd3f4655fd3f4655f000000000000040008", 0x1d, 0x22080}, {&(0x7f0000013c00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001001000000010000800000000000af3", 0x2a, 0x22100}], 0x0, &(0x7f0000014900)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:59:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000301300006811000068110000681100006811000068110000601200006012000060120000601200006012000003"], 0x1) 01:59:38 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 01:59:38 executing program 5: setrlimit(0x2, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) 01:59:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000301300006811000068110000681100006811000068110000601200006012000060120000601200006012000003"], 0x1) [ 118.136606][ T8700] mmap: syz-executor.5 (8700): VmData 37388288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 118.150366][ T8688] Dev loop2: unable to read RDB block 1 [ 118.156721][ T8688] loop2: unable to read partition table [ 118.167114][ T8688] loop2: partition table beyond EOD, truncated [ 118.175263][ T8688] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 01:59:38 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 01:59:38 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) [ 118.180170][ T3923] Dev loop2: unable to read RDB block 1 [ 118.190007][ T3923] loop2: unable to read partition table [ 118.219651][ T8695] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) 01:59:38 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 01:59:38 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 01:59:38 executing program 5: setrlimit(0x2, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) [ 118.239425][ T3923] loop2: partition table beyond EOD, truncated [ 118.283910][ T8695] EXT4-fs error (device loop1): ext4_quota_enable:6125: comm syz-executor.1: Bad quota inode # 3 [ 118.300710][ T8695] EXT4-fs warning (device loop1): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 118.337950][ T8695] EXT4-fs (loop1): mount failed [ 118.362113][ T8688] Dev loop2: unable to read RDB block 1 [ 118.367738][ T8688] loop2: unable to read partition table [ 118.375809][ T8688] loop2: partition table beyond EOD, truncated [ 118.382910][ T8688] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 01:59:38 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="0201bfffffff0a000000ff45ac0000ffffffa900e9311b0000000000000680000200000000000008e2ff8777007200300740a6ffffff00000000008000da55", 0x3f, 0x1c0}]) 01:59:38 executing program 0: setrlimit(0x2, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) [ 118.476880][ T8695] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 118.494668][ T8695] EXT4-fs error (device loop1): ext4_quota_enable:6125: comm syz-executor.1: Bad quota inode # 3 [ 118.510378][ T8695] EXT4-fs warning (device loop1): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 118.528770][ T8695] EXT4-fs (loop1): mount failed 01:59:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050008", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000011a00)="504d4d00504d4dff", 0x8, 0x8000}, {&(0x7f0000013b00)="ed41000000100000d3f4655fd3f4655fd3f4655f000000000000040008", 0x1d, 0x22080}, {&(0x7f0000013c00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001001000000010000800000000000af3", 0x2a, 0x22100}], 0x0, &(0x7f0000014900)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:59:39 executing program 5: setrlimit(0x2, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) 01:59:39 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 01:59:39 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 01:59:39 executing program 0: setrlimit(0x2, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) 01:59:39 executing program 5: setrlimit(0x2, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) [ 118.560367][ T8734] Dev loop2: unable to read RDB block 1 [ 118.565972][ T8734] loop2: unable to read partition table [ 118.573155][ T8734] loop2: partition table beyond EOD, truncated [ 118.579552][ T8734] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 01:59:39 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 01:59:39 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 01:59:39 executing program 0: setrlimit(0x2, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) 01:59:39 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="0201bfffffff0a000000ff45ac0000ffffffa900e9311b0000000000000680000200000000000008e2ff8777007200300740a6ffffff00000000008000da55", 0x3f, 0x1c0}]) 01:59:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) select(0x40, &(0x7f0000001900), &(0x7f0000001940)={0x20}, 0x0, 0x0) 01:59:39 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) [ 118.884339][ T8758] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 118.909117][ T8758] EXT4-fs error (device loop1): ext4_quota_enable:6125: comm syz-executor.1: Bad quota inode # 3 [ 118.920743][ T8758] EXT4-fs warning (device loop1): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 01:59:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050008", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000011a00)="504d4d00504d4dff", 0x8, 0x8000}, {&(0x7f0000013b00)="ed41000000100000d3f4655fd3f4655fd3f4655f000000000000040008", 0x1d, 0x22080}, {&(0x7f0000013c00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001001000000010000800000000000af3", 0x2a, 0x22100}], 0x0, &(0x7f0000014900)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:59:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="3a12040000000000fc00000000000000000000000000000d4d000000000000000000000000000001"], 0x98) 01:59:39 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) select(0x40, &(0x7f0000001900), &(0x7f0000001940)={0x20}, 0x0, 0x0) [ 118.935595][ T8758] EXT4-fs (loop1): mount failed [ 118.947037][ T8767] Dev loop2: unable to read RDB block 1 [ 118.955712][ T8767] loop2: unable to read partition table [ 118.962947][ T8767] loop2: partition table beyond EOD, truncated [ 118.969161][ T8767] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 01:59:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="3a12040000000000fc00000000000000000000000000000d4d000000000000000000000000000001"], 0x98) 01:59:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) select(0x40, &(0x7f0000001900), &(0x7f0000001940)={0x20}, 0x0, 0x0) 01:59:39 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:39 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="0201bfffffff0a000000ff45ac0000ffffffa900e9311b0000000000000680000200000000000008e2ff8777007200300740a6ffffff00000000008000da55", 0x3f, 0x1c0}]) 01:59:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="3a12040000000000fc00000000000000000000000000000d4d000000000000000000000000000001"], 0x98) 01:59:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) select(0x40, &(0x7f0000001900), &(0x7f0000001940)={0x20}, 0x0, 0x0) [ 119.114153][ T8791] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 119.220151][ T8791] EXT4-fs error (device loop1): ext4_quota_enable:6125: comm syz-executor.1: Bad quota inode # 3 [ 119.232400][ T8791] EXT4-fs warning (device loop1): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 119.247410][ T8791] EXT4-fs (loop1): mount failed [ 119.262186][ T8811] Dev loop2: unable to read RDB block 1 01:59:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050008", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000011a00)="504d4d00504d4dff", 0x8, 0x8000}, {&(0x7f0000013b00)="ed41000000100000d3f4655fd3f4655fd3f4655f000000000000040008", 0x1d, 0x22080}, {&(0x7f0000013c00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001001000000010000800000000000af3", 0x2a, 0x22100}], 0x0, &(0x7f0000014900)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:59:39 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="3a12040000000000fc00000000000000000000000000000d4d000000000000000000000000000001"], 0x98) [ 119.268078][ T8811] loop2: unable to read partition table [ 119.275074][ T8811] loop2: partition table beyond EOD, truncated [ 119.283457][ T8811] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 01:59:39 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:39 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:39 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 119.556560][ T8830] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 119.628325][ T8830] EXT4-fs error (device loop1): ext4_quota_enable:6125: comm syz-executor.1: Bad quota inode # 3 [ 119.641064][ T8830] EXT4-fs warning (device loop1): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 119.656785][ T8830] EXT4-fs (loop1): mount failed 01:59:40 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:40 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:40 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:40 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) select(0x40, &(0x7f0000001900), &(0x7f0000001940)={0x20}, 0x0, 0x0) 01:59:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$packet(r0, &(0x7f0000000000), 0x14) 01:59:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 01:59:40 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xdc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:59:40 executing program 2: unshare(0x400) r0 = eventfd(0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x0) 01:59:40 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) select(0x40, &(0x7f0000001900), &(0x7f0000001940)={0x20}, 0x0, 0x0) 01:59:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$packet(r0, &(0x7f0000000000), 0x14) 01:59:40 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="500000002c00270d0012aa0177d4e1c75a000000", @ANYRES32, @ANYBLOB="0000000000000000080000000a00010062"], 0x50}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:59:40 executing program 2: unshare(0x400) r0 = eventfd(0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x0) 01:59:40 executing program 5: unshare(0x400) r0 = eventfd(0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x0) 01:59:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) select(0x40, &(0x7f0000001900), &(0x7f0000001940)={0x20}, 0x0, 0x0) 01:59:40 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$packet(r0, &(0x7f0000000000), 0x14) 01:59:40 executing program 5: unshare(0x400) r0 = eventfd(0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x0) 01:59:40 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 120.021001][ T8895] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 01:59:40 executing program 2: unshare(0x400) r0 = eventfd(0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x0) 01:59:40 executing program 5: unshare(0x400) r0 = eventfd(0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x0) 01:59:40 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="500000002c00270d0012aa0177d4e1c75a000000", @ANYRES32, @ANYBLOB="0000000000000000080000000a00010062"], 0x50}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 120.108224][ T8908] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 01:59:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$packet(r0, &(0x7f0000000000), 0x14) 01:59:40 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 2: unshare(0x400) r0 = eventfd(0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x0) 01:59:40 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 120.226963][ T8925] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 01:59:40 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="500000002c00270d0012aa0177d4e1c75a000000", @ANYRES32, @ANYBLOB="0000000000000000080000000a00010062"], 0x50}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:59:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x27) 01:59:40 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:40 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf) 01:59:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x511, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x4}]}, 0x24}}, 0x0) 01:59:40 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 120.419269][ T8950] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 01:59:40 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2a136, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:59:41 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf) 01:59:41 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="500000002c00270d0012aa0177d4e1c75a000000", @ANYRES32, @ANYBLOB="0000000000000000080000000a00010062"], 0x50}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:59:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) [ 120.529345][ T8963] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 01:59:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x511, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x4}]}, 0x24}}, 0x0) [ 120.578116][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 01:59:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:41 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf) 01:59:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:41 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x5, @sliced}) [ 120.629431][ T8983] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 01:59:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x511, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x4}]}, 0x24}}, 0x0) 01:59:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:41 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf) 01:59:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 01:59:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x511, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x4}]}, 0x24}}, 0x0) [ 120.726124][ T8999] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 01:59:41 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x5, @sliced}) 01:59:41 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x5, @sliced}) 01:59:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 01:59:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 01:59:41 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'macvlan0\x00'}) [ 120.813928][ T9010] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 01:59:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a80)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x40) 01:59:41 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000240)) 01:59:41 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x5, @sliced}) 01:59:41 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'macvlan0\x00'}) 01:59:41 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000240)) 01:59:41 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000240)) 01:59:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a80)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x40) 01:59:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 01:59:41 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'macvlan0\x00'}) 01:59:41 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000240)) 01:59:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 01:59:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 01:59:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a80)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x40) 01:59:41 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000240)) 01:59:41 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'macvlan0\x00'}) 01:59:41 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000240)) 01:59:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 01:59:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 01:59:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 01:59:41 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000240)) 01:59:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 01:59:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a80)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x40) 01:59:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 01:59:41 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'macvlan0\x00'}) 01:59:41 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) 01:59:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 01:59:41 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9}) 01:59:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 01:59:42 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'macvlan0\x00'}) 01:59:42 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) 01:59:42 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9}) 01:59:42 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 01:59:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x4, 0x4, 0x2000005, 0x0, 0x1}, 0x40) 01:59:42 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) 01:59:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 01:59:42 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'macvlan0\x00'}) 01:59:42 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9}) 01:59:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x4, 0x4, 0x2000005, 0x0, 0x1}, 0x40) 01:59:42 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) 01:59:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xffe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r2, r0, 0x0) 01:59:42 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000080)={0x0, [[0x8], [0x0, 0x81], [0x0, 0x3]]}) 01:59:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x4, 0x4, 0x2000005, 0x0, 0x1}, 0x40) 01:59:42 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c010"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 01:59:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xffe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r2, r0, 0x0) 01:59:42 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9}) 01:59:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xffe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r2, r0, 0x0) [ 121.886844][ T9146] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 121.927052][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.962807][ T9146] device team_slave_0 entered promiscuous mode [ 121.969015][ T9146] device team_slave_1 entered promiscuous mode [ 121.989796][ T9146] device macsec1 entered promiscuous mode [ 121.999816][ T9146] device team0 entered promiscuous mode 01:59:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xffe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r2, r0, 0x0) 01:59:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x4, 0x4, 0x2000005, 0x0, 0x1}, 0x40) 01:59:42 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000080)={0x0, [[0x8], [0x0, 0x81], [0x0, 0x3]]}) 01:59:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xffe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r2, r0, 0x0) 01:59:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xffe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r2, r0, 0x0) [ 122.046432][ T9159] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 122.068831][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:59:42 executing program 3: syz_emit_ethernet(0x58, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "42d5f4", 0x1e, 0x6, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"757a26f278ba4ecb98a0"}}}}}}}, 0x0) 01:59:42 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c010"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000),