Starting getty on tty2-tty6 if dbus and logind are not available... Starting Permit User Sessions... [ OK ] Started Daily Cleanup of Temporary Directories. [ OK ] Started Daily apt upgrade and clean activities. [ OK ] Reached target Timers. [ 65.301825][ T8162] sshd (8162) used greatest stack depth: 22912 bytes left [ OK ] Started System Logging Service. [ OK ] Started Permit User Sessions. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.52' (ECDSA) to the list of known hosts. 2020/12/17 17:32:10 fuzzer started 2020/12/17 17:32:11 dialing manager at 10.128.0.26:39069 2020/12/17 17:32:11 syscalls: 3465 2020/12/17 17:32:11 code coverage: enabled 2020/12/17 17:32:11 comparison tracing: enabled 2020/12/17 17:32:11 extra coverage: enabled 2020/12/17 17:32:11 setuid sandbox: enabled 2020/12/17 17:32:11 namespace sandbox: enabled 2020/12/17 17:32:11 Android sandbox: enabled 2020/12/17 17:32:11 fault injection: enabled 2020/12/17 17:32:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/17 17:32:11 net packet injection: enabled 2020/12/17 17:32:11 net device setup: enabled 2020/12/17 17:32:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/17 17:32:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/17 17:32:11 USB emulation: enabled 2020/12/17 17:32:11 hci packet injection: enabled 2020/12/17 17:32:11 wifi device emulation: enabled 17:36:34 executing program 0: timer_create(0x9, 0x0, &(0x7f0000000040)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) syzkaller login: [ 347.021647][ T35] audit: type=1400 audit(1608226594.457:8): avc: denied { execmem } for pid=8497 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:36:34 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xf000) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x7000) 17:36:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) 17:36:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a40)=@polexpire={0xc0, 0x1b, 0x605, 0x0, 0x0, {{{@in=@empty, @in6=@private1}}}}, 0xc0}}, 0x0) 17:36:35 executing program 4: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 348.326262][ T8498] IPVS: ftp: loaded support on port[0] = 21 17:36:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) [ 348.505354][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 348.660284][ T8500] IPVS: ftp: loaded support on port[0] = 21 [ 348.929829][ T8502] IPVS: ftp: loaded support on port[0] = 21 [ 348.944854][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.959243][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.004111][ T8498] device bridge_slave_0 entered promiscuous mode [ 349.070147][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.105201][ T8504] IPVS: ftp: loaded support on port[0] = 21 [ 349.111517][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.138406][ T8498] device bridge_slave_1 entered promiscuous mode [ 349.249360][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.436900][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.467458][ T8500] chnl_net:caif_netlink_parms(): no params data found [ 349.483165][ T8506] IPVS: ftp: loaded support on port[0] = 21 [ 349.585215][ T8498] team0: Port device team_slave_0 added [ 349.598817][ T8498] team0: Port device team_slave_1 added [ 349.741794][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.750187][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.777772][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.799200][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 349.844248][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.852829][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.880333][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.942249][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.954238][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.966034][ T8500] device bridge_slave_0 entered promiscuous mode [ 350.009580][ T8504] chnl_net:caif_netlink_parms(): no params data found [ 350.074116][ T8498] device hsr_slave_0 entered promiscuous mode [ 350.088463][ T8498] device hsr_slave_1 entered promiscuous mode [ 350.102895][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.121228][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.135856][ T8500] device bridge_slave_1 entered promiscuous mode [ 350.155416][ T8657] IPVS: ftp: loaded support on port[0] = 21 [ 350.211194][ T8500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.228120][ T8500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.297211][ T3852] Bluetooth: hci0: command 0x0409 tx timeout [ 350.345055][ T8500] team0: Port device team_slave_0 added [ 350.354201][ T8500] team0: Port device team_slave_1 added [ 350.420737][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.430193][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.457695][ T8500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.469408][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.476689][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.484669][ T8502] device bridge_slave_0 entered promiscuous mode [ 350.493595][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.501031][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.510573][ T8504] device bridge_slave_0 entered promiscuous mode [ 350.521867][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.531793][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.540965][ T9186] Bluetooth: hci1: command 0x0409 tx timeout [ 350.542615][ T8504] device bridge_slave_1 entered promiscuous mode [ 350.562090][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.569792][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.597549][ T8500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.609399][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.617079][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.624933][ T8502] device bridge_slave_1 entered promiscuous mode [ 350.754538][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.776916][ T8718] Bluetooth: hci2: command 0x0409 tx timeout [ 350.785660][ T8504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.807009][ T8500] device hsr_slave_0 entered promiscuous mode [ 350.813984][ T8500] device hsr_slave_1 entered promiscuous mode [ 350.822029][ T8500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.830737][ T8500] Cannot create hsr debugfs directory [ 350.839707][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.885636][ T8504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.933212][ T8502] team0: Port device team_slave_0 added [ 350.971413][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 351.016487][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 351.024405][ T8502] team0: Port device team_slave_1 added [ 351.081649][ T8504] team0: Port device team_slave_0 added [ 351.123815][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 351.135713][ T8504] team0: Port device team_slave_1 added [ 351.201622][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.209377][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.236956][ T8504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.252439][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.259584][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.286019][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.323727][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.330875][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.357115][ T8504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.366951][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 351.369130][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.380660][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.406795][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.489514][ T8504] device hsr_slave_0 entered promiscuous mode [ 351.504281][ T8504] device hsr_slave_1 entered promiscuous mode [ 351.511128][ T8504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.519176][ T8504] Cannot create hsr debugfs directory [ 351.559605][ T8502] device hsr_slave_0 entered promiscuous mode [ 351.567557][ T8502] device hsr_slave_1 entered promiscuous mode [ 351.574318][ T8502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.582275][ T8502] Cannot create hsr debugfs directory [ 351.653453][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.660775][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.670637][ T8506] device bridge_slave_0 entered promiscuous mode [ 351.722112][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.734473][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.743840][ T8506] device bridge_slave_1 entered promiscuous mode [ 351.779574][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.787122][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.795026][ T8657] device bridge_slave_0 entered promiscuous mode [ 351.819002][ T8498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.834501][ T8498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.845769][ T8498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.869349][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.877512][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.885276][ T8657] device bridge_slave_1 entered promiscuous mode [ 351.914918][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.926067][ T8498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.966487][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.986310][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 352.039077][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.085567][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.115685][ T8506] team0: Port device team_slave_0 added [ 352.153227][ T8657] team0: Port device team_slave_0 added [ 352.166582][ T8657] team0: Port device team_slave_1 added [ 352.198614][ T8506] team0: Port device team_slave_1 added [ 352.224620][ T8500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.269741][ T8500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.295079][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.303758][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.330814][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.353997][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.361750][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.389289][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.400593][ T3191] Bluetooth: hci0: command 0x041b tx timeout [ 352.409746][ T8500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.428942][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.435904][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.463029][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.479636][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.487557][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.514506][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.561541][ T8506] device hsr_slave_0 entered promiscuous mode [ 352.568831][ T8506] device hsr_slave_1 entered promiscuous mode [ 352.576196][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.583796][ T8506] Cannot create hsr debugfs directory [ 352.590667][ T8500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.616289][ T3191] Bluetooth: hci1: command 0x041b tx timeout [ 352.667166][ T8657] device hsr_slave_0 entered promiscuous mode [ 352.674259][ T8657] device hsr_slave_1 entered promiscuous mode [ 352.681895][ T8657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.690344][ T8657] Cannot create hsr debugfs directory [ 352.741691][ T8504] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 352.800809][ T8504] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.842550][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.856344][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 352.872180][ T8504] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.883555][ T8504] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.959743][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.973981][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.993901][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.098692][ T9720] Bluetooth: hci3: command 0x041b tx timeout [ 353.120467][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.136710][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.145551][ T3852] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.153126][ T3852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.162164][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.172429][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.181700][ T3852] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.188870][ T3852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.224736][ T8502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.245014][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.253617][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.269033][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.280975][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.290931][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.301961][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.327168][ T8502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.365903][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.386946][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.409197][ T8502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.421702][ T8502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.429239][ T9720] Bluetooth: hci4: command 0x041b tx timeout [ 353.459335][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.469584][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.478732][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.488601][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.498318][ T8657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.534538][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.558432][ T8657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.571157][ T8657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 353.599514][ T8657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.695361][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.706193][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.730236][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.754983][ T8506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.804856][ T8500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.812180][ T8506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.856863][ T8506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.874380][ T8506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.885022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.902505][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.932598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.940794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.968868][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.009328][ T8500] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.043532][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.057909][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.070070][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.077289][ T9720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.085283][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.094887][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.103874][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.113156][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.122218][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.129371][ T9720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.138792][ T9720] Bluetooth: hci5: command 0x041b tx timeout [ 354.149600][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.163484][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.172496][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.180933][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.189708][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.209295][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.217185][ T8498] device veth0_vlan entered promiscuous mode [ 354.232113][ T8504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.248901][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.270427][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.280309][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.289470][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.298210][ T3191] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.305280][ T3191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.314720][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.329494][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.359276][ T8504] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.366686][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.375443][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.385663][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.394135][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.402572][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.411309][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.420428][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.441863][ T8502] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.456912][ T9805] Bluetooth: hci0: command 0x040f tx timeout [ 354.467841][ T8498] device veth1_vlan entered promiscuous mode [ 354.481935][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 354.494258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.503671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.513642][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.520831][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.529765][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.538913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.547889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.557172][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.607266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 354.615591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.630870][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.639959][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.648812][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.657527][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.664599][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.672733][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.681669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.690337][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.697505][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.705412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.714652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.723445][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.730620][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.738678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.747586][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.756351][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.763553][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.771537][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.780511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.790213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.798984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.808134][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 354.836711][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.859902][ T8500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.885173][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.897755][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.912453][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.923008][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.936568][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.945282][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.955765][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.965001][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.973923][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.983446][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.992629][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.017827][ T9805] Bluetooth: hci2: command 0x040f tx timeout [ 355.080041][ T8498] device veth0_macvtap entered promiscuous mode [ 355.103750][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.135345][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.147352][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.156732][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.165796][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.175378][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.185432][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.195196][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.205790][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.216537][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.225116][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.236885][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.244893][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.257985][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.272620][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.281548][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.293543][ T3191] Bluetooth: hci3: command 0x040f tx timeout [ 355.294187][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.312955][ T8498] device veth1_macvtap entered promiscuous mode [ 355.361078][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.371709][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.380012][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.388285][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.397879][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.409418][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.418330][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.435563][ T8500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.459548][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.469616][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.480870][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.496709][ T9805] Bluetooth: hci4: command 0x040f tx timeout [ 355.503527][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.517353][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.549454][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.566447][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.573396][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.589044][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.598965][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.608226][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.617300][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.624740][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.639936][ T8498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.655730][ T8498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.672480][ T8498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.681705][ T8498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.757305][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.767410][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.801264][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.834183][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.842192][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.851649][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.859784][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.876752][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.886689][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.894155][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.912121][ T8504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.953112][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.003573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.014402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.023930][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.031089][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.039479][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.048688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.118420][ T8500] device veth0_vlan entered promiscuous mode [ 356.166889][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.175155][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.188250][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.206778][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.218918][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.227555][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.234633][ T9720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.246249][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.271731][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.281166][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.336461][ T9720] Bluetooth: hci5: command 0x040f tx timeout [ 356.399738][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.409611][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.436623][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.445467][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.455218][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.465501][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.475445][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.486691][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.494598][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.505998][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.518141][ T8589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.537319][ T8589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.537857][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 356.559453][ T8500] device veth1_vlan entered promiscuous mode [ 356.589265][ T8504] device veth0_vlan entered promiscuous mode [ 356.602316][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 356.613322][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 356.623923][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.633336][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.641765][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.650680][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.659524][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.669009][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.685186][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.702905][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.760877][ T8502] device veth0_vlan entered promiscuous mode [ 356.794471][ T8502] device veth1_vlan entered promiscuous mode [ 356.805144][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 356.816320][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 356.824634][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.834335][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.843261][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.852493][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.862981][ T9720] Bluetooth: hci1: command 0x0419 tx timeout [ 356.878576][ T8657] device veth0_vlan entered promiscuous mode [ 356.888092][ T8504] device veth1_vlan entered promiscuous mode [ 356.922448][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 356.932184][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 356.942108][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 356.950750][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.959406][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.968913][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.977673][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.987891][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.996922][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.012013][ T8657] device veth1_vlan entered promiscuous mode [ 357.016123][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.052424][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.061577][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.072100][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.085178][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.094087][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.108820][ T8500] device veth0_macvtap entered promiscuous mode [ 357.120104][ T9720] Bluetooth: hci2: command 0x0419 tx timeout [ 357.143446][ T8502] device veth0_macvtap entered promiscuous mode [ 357.158450][ T8500] device veth1_macvtap entered promiscuous mode [ 357.193072][ T8504] device veth0_macvtap entered promiscuous mode [ 357.231938][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.254467][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.269040][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.285199][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.294917][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.309472][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.324100][ T8502] device veth1_macvtap entered promiscuous mode [ 357.340947][ T5] Bluetooth: hci3: command 0x0419 tx timeout [ 357.358742][ T8504] device veth1_macvtap entered promiscuous mode 17:36:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 357.398317][ T8657] device veth0_macvtap entered promiscuous mode [ 357.423176][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 357.445543][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.470974][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.510614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.522667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.546560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:45 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 357.563692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.582436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.605615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.614839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.625124][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.641288][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.649415][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 357.663067][ T8657] device veth1_macvtap entered promiscuous mode [ 357.686233][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.694364][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.735588][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 357.756212][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.769168][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_1 17:36:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 357.787692][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 357.803989][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.814951][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 357.827759][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.841710][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.856237][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.887345][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.906438][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.926410][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.950238][ T8500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.964313][ T8500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 17:36:45 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) getpeername(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0xd) setsockopt$netlink_NETLINK_RX_RING(r4, 0x29, 0x6, 0x0, 0x0) [ 358.015017][ T8500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.034578][ T8500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.087572][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.111084][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.130836][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.154353][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.165334][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.187842][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.210280][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_0 17:36:45 executing program 0: symlinkat(&(0x7f00000011c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00') umount2(&(0x7f0000001240)='./file0\x00', 0x0) [ 358.240748][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.273485][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.309146][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.323359][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.344450][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.360857][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.385715][ T9805] Bluetooth: hci5: command 0x0419 tx timeout [ 358.396602][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:36:45 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) [ 358.414319][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.440557][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.452925][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.464970][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.475795][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.487135][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.507929][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0 17:36:46 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 358.526231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.535202][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.568337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.585489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.604835][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.627894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.648536][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.663943][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.673998][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.685158][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.695479][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.707090][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.719661][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.732694][ T8502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.744589][ T8502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.762571][ T8502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.774532][ T8502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.831340][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.842164][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.853815][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.879099][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.895736][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.915718][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.926926][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.938299][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.951409][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.968624][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.978193][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.990327][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.000136][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.013910][ T8504] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.024018][ T8504] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.033178][ T8504] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.042746][ T8504] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.076658][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.091242][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.117355][ T8657] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.126995][ T8657] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.137052][ T8657] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.147240][ T8657] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.327966][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.347564][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.361746][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.370509][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.389318][ T8506] device veth0_vlan entered promiscuous mode [ 359.430433][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.447386][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.530929][ T8506] device veth1_vlan entered promiscuous mode [ 359.560491][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 359.578887][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.623523][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.653566][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.662012][ T8926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.714953][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.728492][ T8926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.770088][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.786830][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.802108][ T8926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.813236][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.837663][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.850279][ T8926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.876283][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.006031][ T9935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.006558][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.014227][ T9935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.050048][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.084938][ T8506] device veth0_macvtap entered promiscuous mode 17:36:47 executing program 1: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 360.121612][ T9935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.132262][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.132949][ T9935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.158047][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.168157][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:36:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000cc0)='./file0\x00', 0x0) dup2(r0, r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 360.238809][ T8506] device veth1_macvtap entered promiscuous mode [ 360.267710][ T8926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.307567][ T8926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.393708][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.416916][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.481740][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 360.511007][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.556860][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 360.572654][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.593886][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 360.605472][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.626330][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 360.658618][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.678780][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 360.705854][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.723342][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.761473][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 360.774434][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.791911][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.815011][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.830464][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.875640][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.885499][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.931485][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.954924][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.977202][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.000409][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 361.044316][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.057534][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 17:36:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) [ 361.097001][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.114274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.141252][ T8506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.160165][ T8506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.169786][ T8506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.180840][ T8506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.352321][ T8926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.369654][ T8926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.438013][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.463285][ T8926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.475939][ T8926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.484965][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:36:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_sset_info}) 17:36:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r0, 0x0, 0xd, 0x0, &(0x7f0000000080)) 17:36:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:36:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) eventfd2(0x0, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x5451, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000140)) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x5451, 0x0) 17:36:49 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x242, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 17:36:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, r1/1000+30000}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:36:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x17, 0x0, 0x0) 17:36:49 executing program 0: r0 = inotify_init() r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:36:49 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 17:36:49 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000004e80)=@file={0x1, './file0\x00'}, 0x6e) 17:36:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0xffff, 0x0) dup3(r0, r1, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:36:49 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000001340)='./file0\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x286000, 0x0) 17:36:49 executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x20842, 0x0) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0xb8) 17:36:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:36:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 362.342511][ T35] audit: type=1804 audit(1608226609.778:9): pid=10039 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir825025082/syzkaller.FElkXy/4/.pending_reads" dev="sda1" ino=15776 res=1 errno=0 [ 362.460461][ T35] audit: type=1804 audit(1608226609.818:10): pid=10041 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir825025082/syzkaller.FElkXy/4/.pending_reads" dev="sda1" ino=15776 res=1 errno=0 17:36:50 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r2, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000640)=0x6b) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:36:50 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 17:36:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000002940)=0x5e) close(r1) socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 17:36:50 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x64050800, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000080)={&(0x7f0000000000), 0x50, &(0x7f0000000140)={0x0}}, 0x0) close(r2) socket$inet6(0xa, 0x3, 0x4000009) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 17:36:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') sync_file_range(r0, 0x0, 0x0, 0x0) 17:36:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = creat(&(0x7f0000000d80)='./file0\x00', 0x0) dup3(r0, r1, 0x0) getsockopt$packet_buf(r1, 0x107, 0xf, 0x0, &(0x7f0000000100)) 17:36:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x14, 0x0, 0x0) 17:36:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x40090) 17:36:50 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000140)) 17:36:50 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:36:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210a00000000000000007f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x0, 0x70bd2b, 0xbd03, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x2e}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x30, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xc232}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x24, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="71f31542fc56"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="b9bbfa191b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) 17:36:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0xa99) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = dup2(r0, r0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) 17:36:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 363.346317][T10098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10098 comm=syz-executor.5 [ 364.097649][T10109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10109 comm=syz-executor.5 17:36:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) fcntl$notify(r2, 0x402, 0x0) 17:36:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:36:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x74d}, 0x1c}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x74d}, 0x1c}}, 0x0) dup3(r2, r4, 0x0) setsockopt$inet_int(r1, 0x0, 0x16, 0x0, 0x0) 17:36:55 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') ioctl$FIBMAP(r0, 0x1, 0x0) 17:36:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r0) getsockname$packet(r2, 0x0, &(0x7f0000000240)) 17:36:55 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5451) 17:36:55 executing program 4: r0 = socket(0xa, 0x3, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 17:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 17:36:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000), 0x4) 17:36:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$GIO_CMAP(r0, 0x890c, &(0x7f0000000200)) 17:36:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:36:55 executing program 1: poll(0x0, 0x60, 0x0) 17:36:55 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') 17:36:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0xc, 0x0, 0x0) 17:36:55 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5421, &(0x7f00000001c0)) 17:36:55 executing program 5: futex(&(0x7f00000001c0), 0x3, 0x0, 0x0, &(0x7f0000000240), 0x0) 17:36:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) 17:36:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:36:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 17:36:55 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) close(r2) dup(r1) accept4$inet6(r2, 0x0, 0x0, 0x0) 17:36:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x5421, &(0x7f0000000380)) 17:36:56 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x5450, 0x0) 17:36:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)=0x20) 17:36:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 17:36:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) 17:36:56 executing program 4: r0 = creat(&(0x7f00000009c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) 17:36:56 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x19, 0x0, &(0x7f0000000100)) 17:36:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x181282) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 17:36:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 17:36:57 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, 0x0}, 0x0) dup2(r0, r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:36:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @dev, {[@rr={0x7, 0x7, 0x0, [@rand_addr]}, @rr={0x7, 0xb, 0x0, [@private, @private]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96555a", 0x0, "1cf381"}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x890b, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 17:36:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xdc4b) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 17:36:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) write$P9_RLERRORu(r0, 0x0, 0xcd) 17:36:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:36:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f00000001c0)) 17:36:57 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0x5451, 0x0) 17:36:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xdc4b) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 17:36:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, r0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) 17:36:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 17:37:03 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) 17:37:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x7) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKSECDISCARD(r1, 0x5451, 0x0) 17:37:03 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x5450, 0x0) 17:37:03 executing program 5: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:37:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 17:37:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xdc4b) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 17:37:03 executing program 2: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x4000) 17:37:03 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x78010800) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20040004) 17:37:03 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 17:37:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x8914, &(0x7f0000000080)) 17:37:03 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r0) 17:37:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xdc4b) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 17:37:03 executing program 1: setrlimit(0x7, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) 17:37:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) shutdown(r0, 0x0) 17:37:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={0x0}}, 0x200080c5) 17:37:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000018000000000caec0000000000000006"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 17:37:04 executing program 4: socket$nl_generic(0x2, 0x13, 0x10) 17:37:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file1\x00', 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x0) ioctl$TIOCSTI(r0, 0x5421, 0x800000) 17:37:04 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x42, 0x0) write$tcp_mem(r0, 0x0, 0x0) 17:37:04 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) write$P9_RLINK(r1, 0x0, 0x0) 17:37:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000000)) 17:37:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0}}, 0x0) 17:37:04 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000080)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 17:37:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000008e80)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000d300)={0x0, 0x0, &(0x7f000000d2c0)={&(0x7f000000c880)={0x14, 0x0, 0x704}, 0x14}}, 0x0) 17:37:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 377.391757][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:37:04 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) [ 377.456132][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:37:04 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x5450, 0x0) 17:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/arp\x00') r1 = socket(0x10, 0x2, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:05 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x5460, &(0x7f0000000140)) 17:37:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "bb0b8707a3a73c754701c08c9f03cc2320ba54"}) 17:37:05 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 17:37:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_buf(r0, 0x29, 0x14, 0x0, 0x58) 17:37:05 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 17:37:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffff7a}}, 0x0) 17:37:05 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$packet(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:05 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) dup2(r3, r0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 17:37:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 17:37:05 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) write$P9_RLERRORu(r1, 0x0, 0x0) 17:37:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 17:37:05 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) 17:37:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 17:37:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5451, 0x0) 17:37:05 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b40, 0x0) 17:37:05 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$selinux_attr(r0, 0x0, 0x0) 17:37:05 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 17:37:05 executing program 3: r0 = socket(0x11, 0xa, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) 17:37:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000cc0)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKALIGNOFF(r1, 0x127a, 0x0) 17:37:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006100)={0x0, 0x0}, &(0x7f0000006140)=0xc) setuid(r1) 17:37:06 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xa1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f0000000080)={'gre0\x00', 0x0}) 17:37:06 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x2, &(0x7f00000000c0)={'dummy0\x00'}) 17:37:06 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x40140, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:37:07 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) dup2(r0, r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:07 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 17:37:07 executing program 3: r0 = eventfd(0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x2, &(0x7f0000000100)) 17:37:07 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) dup2(r1, r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:07 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:37:07 executing program 0: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) 17:37:07 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x5421, &(0x7f0000000240)=""/193) 17:37:07 executing program 5: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) 17:37:07 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$CHAR_RAW_DISCARD(r0, 0x5451, 0x0) 17:37:07 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:37:07 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x200, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:07 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 17:37:07 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 17:37:07 executing program 5: r0 = epoll_create1(0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8903, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0xfffffffffffffe88, 0x0, 0x0, 0x0, 0x0}) 17:37:07 executing program 2: r0 = socket$inet(0x2, 0x3, 0xe307) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) 17:37:07 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$LOOP_SET_FD(r0, 0x5450, r1) 17:37:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={0x0}}, 0x0) 17:37:07 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:37:07 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 17:37:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x144) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000080)) 17:37:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:07 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000240)={0x2, 0xfffb, @empty}, 0x10) getpeername(r0, 0x0, &(0x7f0000000080)) 17:37:07 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 17:37:07 executing program 3: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000700)='attr/exec\x00') 17:37:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x1943dd9d) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x8912, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:37:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, 0x0) 17:37:08 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xcb, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x0, 0x0, 0x0, {}, [@nsim={{0xfffffffffffffe7e, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0xfdf5, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0xfffffffffffffee3, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}]}, 0x13c}}, 0x0) 17:37:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RSTATFS(r1, 0x0, 0x0) close(r1) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 17:37:08 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000d80)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 380.727293][T10512] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 17:37:08 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000100)={0x0}}, 0x0) 17:37:08 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:08 executing program 4: vmsplice(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x2) 17:37:08 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=@known='trusted.syz\x00', &(0x7f00000002c0)='\x00', 0xfffffdd7, 0x0) 17:37:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:08 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x10450, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="a5", 0x1}], 0x1) [ 381.520130][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:37:09 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) [ 381.560383][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:37:09 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x10) 17:37:09 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:37:09 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) 17:37:09 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x10450, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="a5", 0x1}], 0x1) 17:37:09 executing program 5: open$dir(&(0x7f0000000200)='./file0\x00', 0x440, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='user.incfs.size\x00', 0x0, 0x0, 0x0) 17:37:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5425, 0x0) 17:37:09 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 17:37:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 17:37:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0, 0x45) 17:37:09 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x10450, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="a5", 0x1}], 0x1) 17:37:09 executing program 0: getrandom(&(0x7f0000001080)=""/4127, 0x101f, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040)='/dev/loop-control\x00', 0xc0, 0x0) 17:37:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 17:37:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010005, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) dup3(r4, r3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) tkill(r2, 0x1000000000016) 17:37:09 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r1, r0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 17:37:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0x50}}, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:09 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x10450, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="a5", 0x1}], 0x1) 17:37:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:09 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x5451, 0x0) 17:37:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={0x0}}, 0x0) 17:37:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x5451, 0x0) 17:37:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = dup(r0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) 17:37:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000140)={'batadv_slave_1\x00', @dev}) 17:37:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 17:37:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCMBIS(r1, 0x5425, 0x0) 17:37:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40040) 17:37:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={0x0}}, 0x0) 17:37:10 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf32(r1, 0x0, 0xa9) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) tkill(r2, 0x1000000000016) 17:37:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x1a, 0x0, &(0x7f0000000000)) 17:37:10 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x5451, 0x0) 17:37:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x3, &(0x7f0000000040)="000000df", 0x4) 17:37:10 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f380)={0x0, 0x0, &(0x7f000000f340)={0x0}}, 0x0) 17:37:10 executing program 1: r0 = memfd_create(&(0x7f0000000280)='nbd\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:10 executing program 5: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 17:37:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:10 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATu(r0, 0x0, 0x0) 17:37:10 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$P9_RLINK(r0, 0x0, 0x0) 17:37:10 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:10 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x5450, 0x0) 17:37:11 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "f263c5f4ff418dae", "e70f6d3695e1daee8c9c030fd81668e9e56e8c0d3759cefdade7a4f6be501adb", "6c199d8b", "88913fc4efe3f9b3"}, 0x38) 17:37:11 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:37:11 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:37:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0, 0x84c}}, 0x20008000) 17:37:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) dup3(r0, r3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:11 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x10e, 0x3, 0x0, 0x0) 17:37:11 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0x5451, 0x0) 17:37:11 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:37:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x1049a) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) 17:37:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x657, 0xfeffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) 17:37:11 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x5450, 0x0) 17:37:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040000) 17:37:11 executing program 4: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003380)='net/dev_mcast\x00') ioctl$EVIOCGABS2F(r0, 0x5450, 0x0) 17:37:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 17:37:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:12 executing program 5: r0 = socket(0x2, 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 17:37:12 executing program 4: r0 = socket(0x10, 0x3, 0x2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:12 executing program 2: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 384.752576][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:37:12 executing program 3: r0 = socket(0x11, 0x3, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) [ 384.813245][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:37:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:12 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x190}}, 0x0) 17:37:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) dup2(r0, r1) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000440)) 17:37:12 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x5450) 17:37:12 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f0000000080)) 17:37:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 17:37:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x80) 17:37:13 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$inet(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 17:37:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x63}}, 0x0) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 17:37:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 17:37:13 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) dup3(r0, r1, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x43c}}, 0x20048014) 17:37:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x22, 0x0, &(0x7f0000000100)) 17:37:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) 17:37:13 executing program 3: r0 = inotify_init1(0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) dup2(r1, r0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000001b00)) 17:37:13 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Fse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9d\x18\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x80\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:37:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f00000000c0)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup3(r0, r3, 0x0) write$P9_RWSTAT(r3, 0x0, 0x0) 17:37:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_SET_FD(r1, 0x5450, r2) 17:37:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x10) 17:37:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5450, 0x0) 17:37:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:14 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5421, &(0x7f0000001cc0)={0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ethernet={0x0, @dev}, @hci}) 17:37:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = dup3(r1, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:14 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x5450, 0x0) 17:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10010) 17:37:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:14 executing program 3: r0 = socket$inet6_icmp(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0xc}, &(0x7f0000000040)=0x20) 17:37:14 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x113460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:37:14 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) close(r0) inotify_init1(0x0) mknod(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000001080)='./file0\x00', 0x200003fe) 17:37:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0xd) dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) 17:37:18 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:37:18 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) 17:37:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) 17:37:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) 17:37:18 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:37:18 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r1, r0) ioctl$TIOCL_SELLOADLUT(r0, 0x560d, &(0x7f0000000240)={0xb}) 17:37:18 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x18207, 0x0) 17:37:18 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x1, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 17:37:18 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x2, &(0x7f0000000140)={'batadv_slave_1\x00'}) 17:37:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000001700)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) 17:37:18 executing program 1: socket$netlink(0x11, 0x3, 0xc) 17:37:19 executing program 0: r0 = epoll_create(0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4180072, r0, 0x0) 17:37:19 executing program 5: r0 = socket$inet6_icmp(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 17:37:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:37:19 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f0000000040)) 17:37:19 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:19 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:19 executing program 0: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x69, 0x0) ioctl$TUNSETOWNER(r0, 0x5451, 0xee01) 17:37:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x201) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup(r0) ioctl$TIOCGWINSZ(r2, 0x5413, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 17:37:19 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/zero\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 17:37:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000880)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000002c0), 0x8) 17:37:19 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:37:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000000)=""/79, 0x48, 0x10120, 0x0, 0x34) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:37:19 executing program 1: r0 = eventfd(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000006d00)={0x0, 0x0, &(0x7f0000006cc0)={0x0}}, 0x0) 17:37:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:37:19 executing program 2: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0xe7d071f3fc55b9a7) 17:37:19 executing program 5: r0 = socket(0x10, 0x80003, 0x2) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:37:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:37:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$GIO_FONT(r2, 0x4b60, 0x0) tkill(r1, 0x7) 17:37:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x540d, 0x0) 17:37:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) 17:37:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x101000000, 0x0) ioctl$EVIOCRMFF(r0, 0x2, &(0x7f0000000000)) 17:37:23 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:23 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\xfa+\x8ev\xab%-D\x14/\xe2\xf6\xf1[\x8a\xbc\x1f\xbc\x96R[\'\x03\xba\x1a\xee\x83\x9f\xe3\x90X\xac\x96\xb4\x13O;\xf2\xba\tl\x1fq\x9c\xa0\x1b\xfe\xc1\xbe\xe6\x92\xfdM\x059f\xf9+\xe8\xc0\xc9\xfe}g\x85IX\xde\xba\xca\xdb\x04q\xfe\x0esjI\xb1\x93\xfc\n\x00$4\xe1\x18@F\xf7\x8a/e\xdb:\x87\x0e\x1ev\xe4\\\xebU\x03\x81\xda\n\x1d~\xc4\xce\xda\xe9J\xa3\xa03\"\xed\fY\xb0J\xacr\xa2\x19\xcb\xcaz\xe54W\xe3\x81\xea\x85\xcdL]q3B\x00D\x9d\x81P\xb2\x92\xec\xe2m\x1a \v\xd9\x99\xd7:A\x84\x98\xa4\xbe\x16W\b\\2\xd789/T\x16]\xbd\xd7\x7fH\rw!D\"(\xc1q\xf6O\xd3', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 17:37:23 executing program 0: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}}, 0x0) 17:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd2(0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 17:37:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:37:23 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, 0x0, &(0x7f0000000100)) 17:37:23 executing program 1: r0 = socket(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0x26, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x3c}}, 0x0) 17:37:23 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) 17:37:23 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000010c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x6b) dup3(r2, r3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x43}}, 0x0) 17:37:23 executing program 1: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:23 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:23 executing program 3: sched_setscheduler(0x0, 0x0, 0xfffffffffffffffe) 17:37:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:23 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:24 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) write$tcp_congestion(r0, 0x0, 0x0) 17:37:24 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xffffff82, 0x20, 0x0, 0x0) 17:37:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) dup3(r1, r0, 0x0) fchdir(r0) 17:37:24 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:37:24 executing program 4: r0 = timerfd_create(0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5421, &(0x7f0000000000)) 17:37:24 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x12040, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x5450, 0x0) 17:37:24 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:24 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) [ 397.018989][T11052] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 17:37:24 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8903, &(0x7f0000000640)) 17:37:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r0, 0x5450, 0x0) 17:37:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 17:37:24 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$CHAR_RAW_BSZGET(r0, 0x5450, 0x0) 17:37:24 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ttyS3\x00', 0x1, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 17:37:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EVIOCSFF(r0, 0x5452, &(0x7f0000000280)) 17:37:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x5450, 0x0) 17:37:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) tkill(r2, 0x1000000000016) 17:37:24 executing program 4: r0 = socket$inet(0x2, 0x3, 0xffff) fstat(r0, &(0x7f0000000040)) 17:37:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup3(r0, r1, 0x0) ioctl$KDENABIO(r2, 0x4b36) 17:37:24 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x16) unshare(0x40600) ftruncate(r0, 0x0) 17:37:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = dup(r1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) 17:37:24 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:24 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x5450, 0x0) 17:37:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:37:25 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40004080) 17:37:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x0) ioctl$TUNSETVNETBE(r0, 0x5421, &(0x7f0000000040)) 17:37:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = gettid() tkill(r2, 0x1000000000016) 17:37:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, 0x0, 0x0) 17:37:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/full\x00', 0x0, 0x0) dup2(r1, r0) pread64(r0, 0x0, 0x0, 0x0) 17:37:28 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') dup2(r0, r1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:37:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) tkill(r2, 0x1000000000016) 17:37:28 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001500)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) dup2(r1, r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @timestamp, @timestamp], 0x4) 17:37:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKRAGET(r0, 0x5451, 0x0) 17:37:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x6c1) r2 = dup(r0) write$eventfd(r2, &(0x7f0000000040), 0x8) 17:37:28 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) 17:37:28 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 17:37:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) 17:37:28 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 17:37:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x6c1) r2 = dup(r0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x78}}, 0x0) 17:37:28 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:28 executing program 0: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x9996369c849f0030) 17:37:28 executing program 4: pipe2(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x106) 17:37:28 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(r0, 0x0, 0x0, 0x4000080) 17:37:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 17:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 17:37:29 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = dup(r0) ioctl$CHAR_RAW_DISCARD(r1, 0x8980, 0x0) 17:37:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x4, 0x0, 0x0) 17:37:29 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close(r1) tkill(r0, 0x1000000000015) 17:37:29 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) 17:37:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 17:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 17:37:29 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$packet(r0, &(0x7f0000000080)="1d", 0x1, 0x2000c050, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 17:37:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) fgetxattr(r2, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0) 17:37:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') tkill(r2, 0x1000000000016) 17:37:29 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 17:37:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x22df2d20) connect$inet(r0, &(0x7f0000000780), 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:29 executing program 0: r0 = open(&(0x7f0000000240)='./file0\x00', 0x173c42, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x5450, 0x0) 17:37:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SEND(r0, 0x5450, 0x0) 17:37:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 17:37:29 executing program 5: r0 = socket(0xa, 0x3, 0x3) setsockopt$inet6_tcp_TLS_RX(r0, 0x29, 0x18, 0x0, 0x300) 17:37:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) ioctl$FS_IOC_SETFSLABEL(r1, 0x5427, 0x0) 17:37:30 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x4, 0x0, 0x0) 17:37:30 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5e, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5451, 0x0) 17:37:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x181202, 0x0) write$selinux_attr(r0, 0x0, 0x0) 17:37:30 executing program 0: r0 = socket$inet(0x2, 0x3, 0xfffffffb) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @multicast1}}}, 0x108) 17:37:30 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 17:37:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x0) 17:37:30 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:30 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:30 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) 17:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x4000080) 17:37:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, 0x0, 0x0) 17:37:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0}}, 0x4051) 17:37:30 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_evm(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.evm\x00', 0x0, 0xffffffffffffffba, 0x0) 17:37:30 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x4000009) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = dup(r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r1, &(0x7f00000004c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$BLKRAGET(r1, 0x1263, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)) 17:37:30 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, 0x0, 0x0) 17:37:30 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x0) 17:37:30 executing program 2: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:37:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}}, 0x20040000) 17:37:30 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x20042, 0x59) 17:37:31 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x3, 0x0, &(0x7f00000000c0)) 17:37:31 executing program 4: r0 = msgget(0xffffffffffffffff, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x0, 0x0) msgrcv(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x2800) 17:37:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x100000000807d) write$P9_RXATTRCREATE(r1, 0x0, 0x0) 17:37:31 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 17:37:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netlink\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x14031, r0, 0x0) 17:37:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 17:37:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101006) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:37:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 17:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc010) 17:37:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) 17:37:32 executing program 0: r0 = socket(0x1, 0x2, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 17:37:32 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:32 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x5421, &(0x7f0000000180)) 17:37:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x81, 0x0) pread64(r0, 0x0, 0x0, 0x0) 17:37:32 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={0x0, 0x12, &(0x7f0000000080)={0x0, 0xffffffffffffff59}}, 0x0) 17:37:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)) 17:37:32 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:32 executing program 2: r0 = inotify_init() socket$packet(0x11, 0x0, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) fcntl$notify(r0, 0x0, 0x80000009) 17:37:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x0) ioctl$EVIOCGUNIQ(r0, 0x5450, 0x0) 17:37:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x10001) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x5451, 0x0) 17:37:32 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:32 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x5452, &(0x7f0000000040)) 17:37:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000000c0)) 17:37:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:32 executing program 3: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "512e4a4b6b0c10cc"}) 17:37:32 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:37:32 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) 17:37:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x253) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) 17:37:32 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/220) 17:37:32 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x12c}}, 0x0) 17:37:33 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5450, 0x0) 17:37:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x1a) 17:37:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x540a, 0x0) 17:37:33 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x5450, 0x0) 17:37:33 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 17:37:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x80) 17:37:33 executing program 2: r0 = open(&(0x7f0000000540)='./file0\x00', 0x2840, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5421, &(0x7f00000001c0)) 17:37:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f00000007c0)='/dev/vcs#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r0, r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000000)="d7b8607420290a1922c935c8dfb20aebd6820acc00961d9502b75583fbf648dd", 0x20) recvfrom$inet6(r2, &(0x7f0000000400)=""/91, 0x5b, 0x3, &(0x7f0000000480)={0xa, 0x4e24, 0x8, @private2, 0x9}, 0x1c) r4 = syz_open_dev$vcsn(&(0x7f00000007c0)='/dev/vcs#\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={0x0}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000340)={r3, 0xffffffffffffffe8, 0x58, 0x7fff}) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) 17:37:33 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:33 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r0, 0x2, &(0x7f00000000c0)) [ 405.990129][T11433] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 17:37:33 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 17:37:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000080)) 17:37:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 406.030759][T11437] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 17:37:33 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000340)=ANY=[], 0x0, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="030e"], 0x1, 0x0) 17:37:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xaa2, @loopback, 0x10}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x101d0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x24, &(0x7f0000000400), 0x18) 17:37:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:37:33 executing program 5: r0 = memfd_create(&(0x7f0000000000)='wlan0(\x00', 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:33 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:37:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 17:37:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1dc}}, 0x0) tkill(r1, 0x1000000000016) 17:37:33 executing program 2: r0 = eventfd(0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 17:37:34 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0041, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x90000, 0x0) 17:37:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) futimesat(r0, 0x0, 0x0) 17:37:34 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0), 0x0) 17:37:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:34 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) 17:37:34 executing program 0: r0 = epoll_create(0x8846) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 17:37:34 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x4048010, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 17:37:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x800) 17:37:34 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup2(r1, r1) dup2(r2, r0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000003300)) 17:37:34 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'sit0\x00'}) 17:37:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'sit0\x00'}) 17:37:34 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) setsockopt$inet_mreq(r0, 0x0, 0x7, 0x0, 0x0) 17:37:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) r1 = dup(r0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000040)) 17:37:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x5451, 0x0) 17:37:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0xfffffffffffffd02}}, 0x0) 17:37:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 17:37:35 executing program 0: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:35 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$cgroup_subtree(r0, 0x0, 0x0) 17:37:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x960eb906001125ad) 17:37:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000020c0)={&(0x7f0000000280), 0xc, &(0x7f0000002080)={0x0}}, 0x24040001) 17:37:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, 0x0) 17:37:35 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0}) 17:37:35 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0x541b, 0x960000) 17:37:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x44800) 17:37:35 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:37:35 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 17:37:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:35 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000004c0), 0x4) 17:37:35 executing program 5: sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x8ca5c0e1d79f27ee) 17:37:35 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) r2 = dup3(r0, r1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50}) 17:37:35 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:36 executing program 4: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x10e, 0x3, 0x0, 0x0) 17:37:36 executing program 2: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup2(r1, r0) write$evdev(r0, 0x0, 0x0) 17:37:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x38) 17:37:36 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 17:37:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 17:37:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}}, 0x0) 17:37:36 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 17:37:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETVERSION(r0, 0x8953, &(0x7f0000000040)) 17:37:37 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5450, 0x0) 17:37:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:37:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) r2 = gettid() tkill(r2, 0x1000000000015) 17:37:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0) 17:37:37 executing program 3: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:37 executing program 0: r0 = epoll_create1(0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 17:37:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$FS_IOC_GETFSLABEL(r1, 0x5411, &(0x7f0000000400)) 17:37:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x1049a) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)) ioctl$TCSETAF(r1, 0x5408, 0x0) 17:37:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)) 17:37:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x0) 17:37:37 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0}}, 0x24004085) 17:37:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:37 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0) 17:37:37 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Fse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9d\x18\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x80\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) prctl$PR_SET_FPEMU(0xa, 0x0) 17:37:37 executing program 1: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x840, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:37:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 17:37:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:37 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:37 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000280)) 17:37:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 17:37:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000340)) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 17:37:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:38 executing program 2: r0 = epoll_create(0x9) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:38 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x18024, 0x0, 0x2) 17:37:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:38 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xa871, r0, 0x0) 17:37:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000380)=0x1f6) dup2(r0, r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) 17:37:38 executing program 0: r0 = socket(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x16, 0x0, &(0x7f0000000100)) 17:37:38 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x5451, 0x0) 17:37:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000400)=0x80) write$tcp_congestion(r1, 0x0, 0x0) 17:37:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541b, &(0x7f0000000080)) 17:37:38 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vcsa\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:37:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={0x0}}, 0x40000) 17:37:39 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 17:37:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0xa) dup3(r0, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RSYMLINK(r0, 0x0, 0x0) 17:37:39 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) 17:37:39 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000a, 0x3031, r0, 0x0) 17:37:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 17:37:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:37:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 17:37:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5451, 0x0) 17:37:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CHAR_RAW_RAGET(r1, 0x1263, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:37:39 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x1118c1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}) 17:37:39 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/54) 17:37:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r0, 0x8953, &(0x7f0000000140)={'batadv_slave_1\x00', @dev}) 17:37:39 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:39 executing program 5: r0 = inotify_init1(0x0) fstatfs(r0, &(0x7f00000000c0)=""/193) 17:37:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:40 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) unlink(&(0x7f0000000040)='./bus\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000001740)='./file0/file0\x00', 0x0) 17:37:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 17:37:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)) 17:37:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080), 0x4) 17:37:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xffffffe8) r1 = gettid() ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) tkill(r1, 0xb) 17:37:40 executing program 1: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept$inet(r2, 0x0, 0x0) dup2(r0, r3) getsockopt$inet6_opts(r3, 0x29, 0x3c, 0x0, &(0x7f0000000100)) 17:37:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000050) 17:37:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 17:37:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup3(r0, r1, 0x0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000000c0)) 17:37:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003100)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0xa, 0x10, 0x1a3, 0x0}) 17:37:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x40802, 0x0) sendfile(r1, r0, 0x0, 0x0) 17:37:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt(r0, 0x1, 0xb, &(0x7f00000001c0)="7b01e54a", 0x4) 17:37:40 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x802, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 17:37:40 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x4000002) 17:37:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000240)={'sit0\x00'}) 17:37:45 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:37:45 executing program 5: r0 = epoll_create(0x2) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:45 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:45 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) dup2(r0, r1) read$char_usb(r1, 0x0, 0x0) 17:37:45 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x5450, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000180)) 17:37:45 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendmsg$nl_crypto(r0, 0x0, 0x0) 17:37:45 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$FIONCLEX(r3, 0x5450) 17:37:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r1) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x4000001f, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0x6) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 17:37:45 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002740), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSABS3F(r0, 0x5421, &(0x7f00000000c0)) 17:37:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getpeername$netlink(r1, 0x0, &(0x7f00000000c0)) 17:37:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x19, 0x0, 0x0) 17:37:46 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0) 17:37:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_elf64(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:37:46 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x40140, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) connect(r1, &(0x7f0000000040)=@nl=@unspec, 0x80) 17:37:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) read$char_usb(r1, &(0x7f0000000280), 0x0) 17:37:46 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x1a1}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000) 17:37:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1261, 0x0) 17:37:46 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x5451, 0x0) 17:37:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) 17:37:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xa8}}, 0x0) 17:37:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ttyS3\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 17:37:46 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 17:37:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x20004808) 17:37:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:46 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=',{[:$,[\x00', 0xfffffffffffffdab, 0x0) 17:37:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b36, 0x0) 17:37:46 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 17:37:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002240)='/dev/vcsa#\x00', 0x1000, 0x0) dup2(r0, r1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000100), 0x4) 17:37:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x10e, 0x5, 0x0, 0x0) 17:37:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000881) 17:37:47 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={0x0}}, 0x0) 17:37:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r0, r1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x1a, 0x0, &(0x7f00000001c0)) 17:37:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x22, 0x0, &(0x7f00000000c0)) 17:37:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$CHAR_RAW_REPORTZONE(r0, 0xc0101282, 0x0) 17:37:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) write$P9_RSETATTR(r1, 0x0, 0x0) dup2(r1, r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x80) 17:37:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) 17:37:47 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x5450, 0x0) 17:37:47 executing program 1: sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0xcb6e8e1b0337163) 17:37:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x2710}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={0x0}}, 0x24000080) 17:37:47 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:37:47 executing program 1: r0 = open$dir(&(0x7f0000003a00)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x40, 0x4) 17:37:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x39, 0x0, 0x0) 17:37:48 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r0) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 17:37:48 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket(0x1, 0x5, 0x0) dup3(r1, r0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 420.635845][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 420.695096][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:37:48 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) 17:37:48 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x22, 0x0, 0x0) 17:37:48 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) 17:37:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) dup2(r0, r1) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000840)) 17:37:48 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x2d, &(0x7f0000000140)={0x0}}, 0x0) 17:37:48 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/vcsa\x00', 0x60801, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 17:37:48 executing program 0: sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="093867d2", @ANYRES16, @ANYBLOB="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"], 0x284}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f0000000700)=0x80) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 17:37:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000140)) 17:37:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4804) 17:37:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) dup2(r0, r1) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) 17:37:49 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000005c0)=[{0x0, 0x0, 0x0}], 0x4924924924926ea, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40400c4) 17:37:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa4}}, 0x0) close(r0) socket$nl_generic(0x2, 0x2, 0x88) tkill(r2, 0x1000000000016) 17:37:51 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) readv(r0, 0x0, 0x0) 17:37:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:51 executing program 4: r0 = eventfd(0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) 17:37:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000880)={@multicast1}, 0x8) 17:37:51 executing program 3: r0 = epoll_create1(0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)) 17:37:51 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 17:37:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0xd) dup3(r0, r1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xc, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "c873ba58fd899806004273afd5f550ea4effec58555707c20800130007f80fdd522e9b08d02167c42a67884930b4019abe000082244fb187970676410000000000000000000000000000000000000004"}, 0xd8) 17:37:51 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 17:37:51 executing program 4: capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000780)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={0x0}}, 0x0) 17:37:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:51 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nbd(r2, 0x0, 0x0) 17:37:51 executing program 1: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:52 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r1, r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000002c0)) tkill(r0, 0x8001004000000016) 17:37:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) flistxattr(r0, 0x0, 0x0) 17:37:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x24048080, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80) 17:37:52 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:37:52 executing program 1: r0 = socket(0x10, 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:37:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) 17:37:52 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:52 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 17:37:52 executing program 2: write$nbd(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0xffffffe7) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', 0x0, 0x0, 0x0) 17:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:37:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:52 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 425.209526][ T35] audit: type=1804 audit(1608226672.651:11): pid=12152 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir825025082/syzkaller.FElkXy/114/bus" dev="sda1" ino=16129 res=1 errno=0 17:37:52 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 17:37:52 executing program 5: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) [ 425.321728][ T35] audit: type=1800 audit(1608226672.691:12): pid=12147 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16129 res=0 errno=0 17:37:53 executing program 4: r0 = creat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5421, 0x400000) 17:37:53 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x20, 0x0, &(0x7f0000001540)) 17:37:53 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000001480)) 17:37:53 executing program 3: r0 = socket(0x1, 0x2, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, 0x0, 0x0) 17:37:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x840) 17:37:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x802) 17:37:53 executing program 3: r0 = open(&(0x7f0000000180)='./file1\x00', 0x84c0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 17:37:53 executing program 0: r0 = socket$nl_generic(0x2, 0xa, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0xa, 0x4}, 0x2000019b, &(0x7f0000000240)={0x0, 0x4}}, 0x0) 17:37:53 executing program 2: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 17:37:53 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(r0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) 17:37:53 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000840), 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000140)) 17:37:53 executing program 4: r0 = socket(0xa, 0x3, 0x8) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:53 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40040, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000180)) 17:37:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x25, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x5452, &(0x7f00000000c0)) 17:37:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) 17:37:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:53 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x2, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) 17:37:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RFSYNC(r0, 0x0, 0xfffffd87) 17:37:53 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r1, r0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 17:37:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 17:37:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:37:54 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) 17:37:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:37:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101042, 0x17d) 17:37:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30140, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 17:37:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:37:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:37:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x1049a) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) 17:37:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev}, 0x10) 17:37:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) tkill(r2, 0x1000000000016) 17:37:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x31, &(0x7f0000000000), 0x2039662a) 17:37:57 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000003c0)) 17:37:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}}, 0x0) socket(0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 17:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffda0}}, 0x0) 17:37:57 executing program 0: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) 17:37:57 executing program 4: r0 = socket$inet(0x2, 0x3, 0xc2b) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 17:37:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 17:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) [ 430.210330][T12292] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 17:37:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8901, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x0, {}, 'erspan0\x00'}) 17:37:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:37:57 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x0) ioctl(r0, 0x2, &(0x7f0000000040)) 17:37:57 executing program 5: r0 = inotify_init1(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 17:37:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x1b, &(0x7f0000000340)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x5c) 17:37:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) 17:37:58 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) 17:37:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000001c0)) 17:37:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:37:58 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x5451, 0x0) 17:37:58 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}}, 0x0) 17:37:58 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24004081) 17:37:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={0x0}}, 0x0) 17:37:58 executing program 0: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5411, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) 17:37:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0x0) 17:37:58 executing program 5: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup2(r0, r0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 17:37:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x541b, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 17:37:58 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000001c00)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) 17:37:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r0, 0x2, &(0x7f0000000100)={'batadv0\x00', @multicast}) 17:37:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000010000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) 17:37:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:37:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fcntl$getflags(r0, 0x0) 17:37:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000010000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) 17:37:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001840)=0x80) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) 17:37:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) write$P9_RFLUSH(r1, 0x0, 0x0) 17:37:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000010000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) 17:37:59 executing program 4: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x5452, &(0x7f0000000040)) 17:37:59 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 17:37:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010005, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet(0x2, 0xa, 0x0) tkill(r2, 0x1000000000016) 17:37:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000010000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) 17:37:59 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:37:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) 17:38:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) epoll_create1(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 17:38:00 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}}, 0x4000) clone(0x3502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:38:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) dup3(r4, r3, 0x0) dup3(r3, r0, 0x0) tkill(r1, 0x1000000000016) 17:38:00 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:38:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) 17:38:00 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup2(r0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) 17:38:00 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) 17:38:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2040, 0x0) ioctl$BLKSECTGET(r0, 0x5421, &(0x7f0000000040)) 17:38:01 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) 17:38:01 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x5450, 0x0) 17:38:01 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) dup2(r0, r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:38:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 17:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:38:01 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:38:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, 0x0) 17:38:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x1013c1, 0x1e0) 17:38:01 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x5452, &(0x7f00000001c0)) 17:38:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) 17:38:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 17:38:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 17:38:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:38:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x8980, 0x0) 17:38:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0xf, &(0x7f0000000040)) 17:38:01 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) 17:38:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000100)={'batadv0\x00'}) 17:38:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000023c0)) 17:38:02 executing program 4: r0 = epoll_create(0x6) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 17:38:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$CHAR_RAW_ROGET(r1, 0x125e, 0x0) 17:38:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETX(r0, 0x4b36, 0x0) 17:38:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:38:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x1a, 0x0, &(0x7f0000006500)) 17:38:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup3(r0, r1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x3, 0x0, 0x0) 17:38:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = gettid() sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0x35, &(0x7f00000001c0)={0x0}}, 0x0) tkill(r2, 0x1000000000016) 17:38:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TCGETX(r1, 0x5425, 0x0) 17:38:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x100000289) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) 17:38:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RREADDIR(r1, 0x0, 0xa6) close(r0) r2 = gettid() socket$nl_route(0x10, 0x3, 0x0) tkill(r2, 0x1000000000016) 17:38:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x4a, &(0x7f00000001c0)={'mangle\x00', 0x10000000000002d8, [{}, {}]}, 0x48) 17:38:02 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ubi_ctrl\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) 17:38:02 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_inet_SIOCDELRT(r1, 0x5450, 0x0) 17:38:02 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:38:02 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 17:38:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, 0x0) 17:38:02 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) 17:38:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, 0x0, 0x0) 17:38:03 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 17:38:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup3(r0, r1, 0x0) write$char_raw(r1, 0x0, 0x0) 17:38:06 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:38:06 executing program 0: r0 = memfd_create(&(0x7f0000000000)='/proc/self/attr/current\x00', 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x2, &(0x7f0000000100)) 17:38:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 17:38:06 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 17:38:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) 17:38:06 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 17:38:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_getattr(r1, &(0x7f0000000080)={0x38}, 0x38, 0x0) 17:38:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$inet_int(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) 17:38:06 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 17:38:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup2(r0, r0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, 0x0) getsockname$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8983, &(0x7f0000000040)) 17:38:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101006) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:38:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000000)=0x80) dup2(r0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) [ 439.047579][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 439.078147][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:38:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff3e80e1fffffff300"}) r1 = open(&(0x7f0000000080)='./file0\x00', 0xa4c40, 0x529eac26a44d9849) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x14, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0xb1d7, 0x4) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) 17:38:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) write$P9_RXATTRCREATE(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = gettid() tkill(r2, 0x1000000000016) 17:38:06 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r1, 0x5450, 0x0) 17:38:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) [ 439.317314][ T35] audit: type=1800 audit(1608226686.762:13): pid=12654 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16226 res=0 errno=0 17:38:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r1, 0x1000000000016) [ 439.414664][ T35] audit: type=1800 audit(1608226686.812:14): pid=12658 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16226 res=0 errno=0 17:38:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) dup2(r2, r1) getsockname$inet(r1, 0x0, &(0x7f0000000180)) 17:38:07 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/uts\x00') ioctl$TUNSETQUEUE(r0, 0x5451, 0x0) 17:38:07 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:38:07 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 17:38:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) read$eventfd(r2, 0x0, 0x0) 17:38:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockname(r1, 0x0, &(0x7f0000000200)) 17:38:07 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000040)) 17:38:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x28000801) 17:38:07 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='uid_map\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 17:38:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={&(0x7f0000000140), 0x19, &(0x7f0000000000)={0x0}}, 0x0) 17:38:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40041, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:38:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) getsockopt$inet_int(r2, 0x0, 0xc, 0x0, &(0x7f00000001c0)) 17:38:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0, 0xffffffc9}}, 0x0) 17:38:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 17:38:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$KDSETLED(r1, 0x5409, 0x0) 17:38:08 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RXATTRCREATE(r1, &(0x7f0000001040)={0x7}, 0x7) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:38:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 17:38:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000200), 0x1c) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:38:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x7fff) r1 = dup(r0) setsockopt$inet_mreqsrc(r1, 0x0, 0x3, 0x0, 0x0) 17:38:08 executing program 0: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:38:08 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x40040, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000014180)={0x0, 0x0, &(0x7f0000014140)={0x0}}, 0x0) 17:38:08 executing program 1: r0 = eventfd(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:38:08 executing program 4: sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0xda6c28ec9cb4bd6e) 17:38:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2042000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08022bbd7000fedbdf25050000000c00060002000000000000000c00060002000000000000000c000800ffff000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x800) setrlimit(0x9, &(0x7f0000000140)={0x4, 0x3}) r2 = semget$private(0x0, 0x4, 0x42) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = dup3(r0, r0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000180)) semget$private(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000005c0)=""/139) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') ioctl$TCXONC(r3, 0x540a, 0xffffffffffffff7f) fcntl$setsig(r0, 0xa, 0x3d) write$P9_RXATTRCREATE(r3, &(0x7f0000000280)={0x7, 0x21, 0x2}, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup2(r4, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x131f64) accept$unix(r6, 0x0, 0x0) r7 = accept4$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@ipv4={[], [], @multicast1}, r8}, 0x14) write$P9_RMKNOD(r3, &(0x7f00000003c0)={0x14, 0x13, 0x2, {0x40, 0x4}}, 0x14) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000400)=0x0) sched_getaffinity(r9, 0x8, &(0x7f0000000440)) getpriority(0x0, r9) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000480)={0x7, 0x7fc, 0x8, 0xd77, 0x6, 0x4f}) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000004c0)={0x3ff, 0x8, 0x3, 0x8000, 0x53543bf}) r10 = msgget$private(0x0, 0x9) shmctl$IPC_RMID(r10, 0x0) 17:38:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RREAD(r0, 0x0, 0x0) 17:38:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acafff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, 0x0) 17:38:08 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(r0, 0x0, 0x0) 17:38:08 executing program 4: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:09 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 17:38:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:38:09 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={0x0}}, 0x0) 17:38:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCSMASK(r1, 0x5451, 0x0) 17:38:09 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_REGISTER(r0, 0x5450, 0x0) 17:38:09 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x285400, 0x31) 17:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r2 = dup2(r0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) 17:38:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x3, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0xc0042, 0x0) 17:38:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:38:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffecff0000e17789dc6100"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x0) 17:38:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) 17:38:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x540d, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) 17:38:09 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ip6erspan0\x00'}) 17:38:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:38:09 executing program 1: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd/3\x00') write$P9_RSETATTR(r0, 0x0, 0x0) 17:38:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 17:38:10 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xffffffff) ioctl$VT_RELDISP(r0, 0x5450) 17:38:10 executing program 1: open$dir(&(0x7f0000000140)='./file0\x00', 0x20042, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', ']$\x00'}, 0x0, 0x0) 17:38:10 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) connect$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 17:38:10 executing program 0: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000180)={0x7}, 0xffffffffffffffa9) 17:38:10 executing program 5: r0 = getuid() setfsuid(r0) 17:38:10 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:38:10 executing program 3: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 17:38:10 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 17:38:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) 17:38:10 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) dup2(r2, r0) r3 = dup(r0) ioctl$FIOCLEX(r3, 0x40049409) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 17:38:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:38:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000cc0)='/dev/loop#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x0) 17:38:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5450, 0x0) 17:38:10 executing program 5: r0 = creat(&(0x7f0000001480)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000800) 17:38:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:38:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000040) 17:38:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 17:38:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) 17:38:10 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x541b, &(0x7f0000000040)) 17:38:10 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x5451, 0x0) 17:38:11 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:38:11 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) fsync(r0) 17:38:11 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:11 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 17:38:11 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000cc0)='fd/3\x00') ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 17:38:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x1046) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl$TIOCGSID(r1, 0x5429, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 17:38:11 executing program 2: r0 = socket$inet(0x2, 0x2000000001, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000200)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0xfffffffffffffe9b, 0x2000, 0x0, 0x85) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:38:11 executing program 5: socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x2, &(0x7f0000000080)={'ip_vti0\x00', @link_local}) 17:38:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:38:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKTRACESETUP(r0, 0x5450, 0x0) 17:38:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r0, 0x5425, 0x0) 17:38:12 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) dup2(r1, r2) accept$inet(r2, 0x0, 0x0) 17:38:12 executing program 5: close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x8940, 0x0) 17:38:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RMKDIR(r0, 0x0, 0x80000001) 17:38:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e) 17:38:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 17:38:12 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:38:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x5427, 0x0) 17:38:14 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r3, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = dup3(r3, r2, 0x0) getsockname$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x5) r5 = socket$unix(0x1, 0x200000000001, 0x0) dup3(r5, r0, 0x0) tkill(r1, 0x1004000000013) 17:38:14 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000340)) 17:38:14 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 17:38:14 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/zero\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x5451, 0x0) 17:38:14 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f00000001c0)={'syzkaller1\x00'}) 17:38:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)) 17:38:15 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x5450, 0x0) 17:38:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000002800)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x20004000) 17:38:15 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:38:15 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 17:38:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40448c0) 17:38:15 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x2, &(0x7f00000000c0)={'veth0_macvtap\x00', @ifru_ivalue}) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) write$binfmt_script(r1, 0x0, 0x0) 17:38:15 executing program 4: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:38:15 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0) 17:38:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) memfd_create(&(0x7f0000001a00)='nbd\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 17:38:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 17:38:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:38:15 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x4008000) 17:38:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, 0x0, 0x0, 0x40010120, 0x0) 17:38:15 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)) 17:38:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x2, &(0x7f0000000040)={0x3, 'batadv0\x00'}) 17:38:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) close(r1) socket$nl_crypto(0x10, 0x3, 0x15) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 17:38:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) 17:38:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x80) close(r1) socket$nl_generic(0x10, 0x3, 0x10) connect(r1, &(0x7f00000001c0)=@nl=@proc, 0x80) 17:38:15 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) [ 448.489287][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 448.526919][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 17:38:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5425, 0x0) 17:38:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:38:16 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x1, 0x2, 0x0, &(0x7f00000000c0)) 17:38:16 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:38:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:38:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) 17:38:16 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$CHAR_RAW_IOOPT(r0, 0x5450, 0x0) 17:38:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) write$P9_RLOPEN(r0, 0x0, 0x0) 17:38:16 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vcsa\x00', 0x40101, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 17:38:16 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1cc58137d46e7fdae33d739c63a086f985ec41"}) ioctl$TIOCGSID(r0, 0x802c542a, &(0x7f00000001c0)=0x0) getpgid(r2) 17:38:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x840, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 17:38:16 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:38:17 executing program 4: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x24}}, 0x0) 17:38:17 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3e, 0x0, 0x26) 17:38:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x144) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xc, &(0x7f0000000000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "a64fa31e6f47336673f87280544b587ed299a973b9d853931a18e8b08fa413abf2a651090000000000000017b4f930d21d300730ab8054305355309fb77f8eec236635dfdbf8cb9867490a8de67777d4"}, 0xd8) 17:38:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x8d4, 0x0, 0x0) 17:38:17 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000) 17:38:17 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, 0x0, 0x0) 17:38:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x8682) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$TIOCSBRK(r0, 0x5427) 17:38:17 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:38:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x549) recvmsg(r1, &(0x7f0000000a40)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r2, 0x0, 0x0) 17:38:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x14, 0x0, 0x0) 17:38:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x890b, &(0x7f0000008b40)) 17:38:17 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003e40)='/proc/self/attr/current\x00', 0x2, 0x0) ftruncate(r0, 0x0) 17:38:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000240)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x20000000) 17:38:17 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x1b2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 17:38:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 17:38:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x5421, &(0x7f00000002c0)=""/181) 17:38:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="ed", 0x1, 0x800, 0x0, 0x0) 17:38:17 executing program 1: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x32, 0x0, &(0x7f0000000240)) 17:38:20 executing program 4: pipe2(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffff50}}, 0x0) 17:38:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:38:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000f00)={0x0}}, 0x0) 17:38:20 executing program 3: pipe(&(0x7f0000000540)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) dup2(r1, r0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/189) 17:38:20 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:38:20 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCGABS20(r1, 0x5450, 0x0) 17:38:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$EVIOCRMFF(r0, 0x2, &(0x7f0000000040)) 17:38:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000580)) 17:38:20 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2}}) 17:38:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_elf32(r0, 0x0, 0x0) 17:38:20 executing program 2: r0 = epoll_create1(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:20 executing program 4: r0 = eventfd2(0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x11, 0x0, &(0x7f0000000040)) 17:38:21 executing program 0: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000100)) 17:38:21 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xf1, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0) 17:38:21 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNDETACHFILTER(r0, 0x5450, 0x0) 17:38:21 executing program 2: r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r1, r0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x180) 17:38:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:38:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:38:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:38:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create(0x9e) r2 = dup3(r0, r1, 0x0) sendmmsg$inet6(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000014) 17:38:21 executing program 3: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x846da44e960c05e4) 17:38:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:38:21 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 17:38:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x803, 0xa0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000080)={'vcan0\x00'}) 17:38:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x80081) 17:38:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) dup2(r0, r1) getsockname(r0, &(0x7f0000001a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001a80)=0x80) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}}, 0x0) 17:38:21 executing program 5: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, 0x0, 0x0) 17:38:21 executing program 1: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000140)) 17:38:21 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000840) 17:38:21 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:38:21 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000180)) 17:38:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 17:38:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 17:38:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff3e80e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 17:38:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:38:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) dup2(r0, r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000080)={0x6, 'vxcan1\x00'}) 17:38:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000180)=0x98) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x20000818) 17:38:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:38:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) dup2(r0, r1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) 17:38:22 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x5450, 0x0) 17:38:22 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:38:22 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 17:38:22 executing program 2: r0 = memfd_create(&(0x7f00000002c0)='+posix_acl_access\x00', 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@routing, 0x8) 17:38:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0xc, 0x0, 0x0) 17:38:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc110) 17:38:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5451, 0x0) 17:38:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r0, 0x4b36, 0x0) 17:38:22 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in6=@private0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x802c542a, &(0x7f00000001c0)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x7) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, 0x0) fadvise64(r2, 0x8f, 0x6, 0x2) prlimit64(r1, 0x9, 0x0, &(0x7f0000000080)) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) 17:38:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = dup3(r0, r1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x0) dup3(r2, r3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:38:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x2) tkill(r2, 0x1000000000016) 17:38:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000036c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000140)) 17:38:22 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000b40)) 17:38:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004004) 17:38:22 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:38:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x2004c041) 17:38:22 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xd855, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5451, 0x0) 17:38:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0x5450, 0x0) 17:38:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) 17:38:22 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:38:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000018000000000caec0000000000000006"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x0, 0x0) 17:38:23 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0xa21, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:38:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', 0x0}) 17:38:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:38:23 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x5451, 0x0) 17:38:23 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\'\xf2]<\\@^$]-\x00', 0x0) fcntl$getflags(r0, 0x40a) 17:38:23 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:38:23 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 17:38:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) 17:38:24 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f00000004c0)='./file1\x00', 0x0, 0x9c631ad7a261fd13, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='user.incfs.size\x00', 0x0, 0x0, 0x0) 17:38:24 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x5452, 0x2071dffe) 17:38:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, 0x0, 0xfffffffffffffd00, 0x40020101, 0x0, 0x0) shutdown(r0, 0x0) 17:38:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40000) 17:38:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 17:38:28 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 17:38:28 executing program 0: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200000841, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet6_buf(r0, 0x29, 0x2, 0x0, &(0x7f00000002c0)) 17:38:28 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "419020100b71d487ae19096e6edab5c79812cf"}) 17:38:28 executing program 1: r0 = socket(0x10, 0x3, 0x2) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:38:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 17:38:28 executing program 2: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 17:38:28 executing program 4: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x8) 17:38:28 executing program 1: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x80880) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 17:38:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={0x0}}, 0x0) 17:38:28 executing program 5: syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x10001, 0x4000) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) 17:38:28 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0xc0481273, &(0x7f0000000440)) 17:38:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f452346f"}}) [ 461.353477][ C1] hrtimer: interrupt took 60998 ns 17:38:28 executing program 2: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa01, 0x41) 17:38:28 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 17:38:28 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0d05640, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c7dd3f85"}}) 17:38:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) 17:38:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000540)={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c7dd3f85"}}) 17:38:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'sit0\x00', 0x0}) 17:38:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x5}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c", 0x1f}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d08a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x68}], 0x3, 0x0, 0x0, 0x1a0}}], 0x1, 0x0) 17:38:29 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 17:38:29 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000004bc0)='/dev/audio\x00', 0x0, 0x0) 17:38:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x3}, 0x14}}, 0x0) 17:38:29 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0xc0481273, 0x0) 17:38:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "813cd185"}, 0x0, 0x0, @userptr}) 17:38:29 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x14) 17:38:29 executing program 5: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x4, 0xcd, 0x1, 0x5}, &(0x7f0000000240)=0x20) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x0, 0x4000) close(r2) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="010026bd7000fddbdf250e0000004000038014000600fc0000000000000000000000000000011c00060078dcb8cf58ff0200000000000000000001000000000000020076657468315d746f5f68d4737200000000080005000900000008010400810000"], 0x78}, 0x1, 0x0, 0x0, 0x20000044}, 0x48080) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x140xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0xfc01, 0x0, 0x0, 0x9}, {0x9, 0x0, 0x81, 0x3}, {0x1}, {0x2, 0x6, 0x4}, {0xb0, 0xd0, 0x80, 0xfffff7a4}, {}, {}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100007fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x7, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r4, &(0x7f00000003c0)="8a3444dd0681016da2cdc2f9675c09ff00000051ea83c657c12f9da8011c9c1309cd3e1f22296bbab4b93c63f85cdff2bead452a6aebbffd25ba452a808ffeb3d5b6876666c111c6ada56f170a0988a3a7133d835e365000000000", 0x5b) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='B?K{\n', @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYBLOB="d4cb2c8098df8df8b68930591c8ea5ef7140b1673be846215f23fc553a69bf1515e192ad772aaa23a89cdb2361ac68deb21a71658857fdff56199b75", @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) 17:38:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f00000002c0)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000180)={[{@uid={'uid'}}]}) 17:38:31 executing program 4: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x109283) 17:38:31 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10}], 0x10}}], 0x1, 0x0) 17:38:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) 17:38:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_matches\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 17:38:33 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r0) 17:38:33 executing program 4: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="e8", 0x1}, {0x0}], 0x2, 0x0) 17:38:33 executing program 0: syz_mount_image$xfs(&(0x7f0000001ac0)='xfs\x00', &(0x7f0000001b00)='./file0\x00', 0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f80)={[{@gqnoenforce='gqnoenforce'}]}) 17:38:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f00000002c0)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000180)={[{@uid={'uid'}}]}) 17:38:33 executing program 1: syz_mount_image$tmpfs(&(0x7f0000002cc0)='tmpfs\x00', &(0x7f0000002d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000031c0)) 17:38:33 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x24000, 0x0) 17:38:33 executing program 3: syz_mount_image$tmpfs(&(0x7f0000002cc0)='tmpfs\x00', &(0x7f0000002d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000031c0)={[{@huge_advise='huge=advise'}]}) 17:38:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f00000002c0)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000180)={[{@uid={'uid'}}]}) 17:38:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_matches\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa2203, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) write$cgroup_int(r0, 0x0, 0x0) 17:38:34 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:38:34 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x8466caf8ef047e40) 17:38:34 executing program 1: clock_gettime(0x0, &(0x7f0000000480)) pselect6(0x40, &(0x7f0000000140)={0x6}, 0x0, 0x0, 0x0, 0x0) 17:38:34 executing program 3: add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="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", 0xff1, 0xfffffffffffffffe) [ 466.809607][T13550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.958737][T13550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:38:34 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x8466caf8ef047e40) 17:38:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f00000002c0)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000180)={[{@uid={'uid'}}]}) 17:38:34 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getpeername$tipc(r0, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10) 17:38:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 17:38:34 executing program 2: add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 17:38:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000340)={@mcast2}) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0xfc01, 0x0, 0x0, 0x9}, {0x9, 0x0, 0x81, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x2, 0x6, 0x4}, {0xb0, 0xd0, 0x80, 0xfffff7a4}, {}, {}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100007fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x7, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r4, &(0x7f00000003c0), 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB='\x00\x00']) 17:38:34 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000002c0)="1020f5f201000b0009000000070000000c00000009", 0x15, 0x400}, {0x0, 0x0, 0xae61}], 0x0, &(0x7f0000000180)=ANY=[]) 17:38:34 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x8466caf8ef047e40) 17:38:34 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0xdc87fda6bd710779) 17:38:34 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') 17:38:35 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) 17:38:35 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa2203, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) 17:38:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') gettid() gettid() tgkill(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000a000000000006"], 0x24}}, 0x0) 17:38:35 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x8466caf8ef047e40) 17:38:35 executing program 5: keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x3}) 17:38:35 executing program 3: select(0x29, &(0x7f0000000000), &(0x7f0000000140)={0x51}, 0x0, 0x0) [ 467.852692][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:38:35 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x70bd26, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x44810) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x60a382, 0x0) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 17:38:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') read$snapshot(r0, 0x0, 0x0) 17:38:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f0000000100)=""/81, 0x51) 17:38:35 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x1, @dev, 'veth0_to_hsr\x00'}}, 0x1e) 17:38:35 executing program 4: select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0xffffffffffffffbe}, &(0x7f0000000100), &(0x7f0000000140)) 17:38:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000adc8"], 0x18}}, 0x0) 17:38:35 executing program 2: socketpair(0x2, 0x0, 0x800, 0x0) 17:38:35 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 17:38:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f000000a480)={0x0, 0x989680}) 17:38:35 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f00000005c0)="01da618f97c774fc654e9869164f22d8622d81f81336c15af01beb7ceaac97b3", 0x20, r0) 17:38:35 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) [ 468.460000][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:38:36 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cd091cf"}, 0x0, 0x0, @fd}) 17:38:36 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x800) [ 468.531579][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:38:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7181ba24"}, 0x0, 0x0, @fd}) 17:38:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 17:38:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), 0x4) 17:38:36 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/dev\x00') 17:38:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000000)=""/157, 0x9d) 17:38:36 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) 17:38:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}}, 0x0) 17:38:36 executing program 5: syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) 17:38:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x40, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "49f22cb3"}, 0x0, 0x0, @fd}) 17:38:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', 0x0}) 17:38:36 executing program 0: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x2a00) 17:38:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000058c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f000000c400)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a3e63c42"}, 0x0, 0x0, @planes=0x0}) 17:38:36 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa2203, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0xffff}, 0x8) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40000, 0x0) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x8) sendmsg$alg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000100)="872e6efad7806bb261", 0x9}, {&(0x7f0000000140)="0015a50f27ec6b8fe142f365762ec811eaa79e94bec3c7b7f55f324e9328a9d1d6911089ffa9fb3a4dd5fec19d1aa7c0e7aa94115001eeb980f13bb788ed122b56b610ef415b225d", 0x48}, {0x0}, {&(0x7f0000000380)="9cb80f1b0f0c32892f96a448577aac2dfe0312057fa616d42058e254b4225b2dc52a3e0d4a749413f7be5aa998f8054e0c85b9105caedd820db90f63c1f70640755f48c6ee85154911422d7779108a4651f8eab71845c37bf2ef860eacfc52b4769e167d4157cc02374fbf8d800efecb83a6f80b1915a68b18b19eb2e0f675a8e37b19e905df6b6f54fb9a4120688efd9a361af8a19588", 0x97}, {&(0x7f0000000440)="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", 0xab5}, {&(0x7f0000001440)="4d57a97e93bd766b0fd3c49332c7e498319f873c6df1b290a2bccffdf957d07f0377429acf74f03f2f3aa8bf903dec097771faf8a0af132277e783e7b6be1d751ab561c4ca0b5d4aede47f6186b477e27212d81d8f509ad90e8fe8f8ff7a4f7e41710f51958c924011582b85765b3f0317d7bef71cbc8200a3", 0x79}, {&(0x7f0000001540)="37da73f461341834715749f07ccf1d51529a7a170bd65ca48d9c7c267d7b921a75183e4d0fb950f098e8ada9530bc120d65288447c7f95e05203c6ac60d6d958ebe6007fccac0adc4d6090e250a04f3b73879dce767dd3fa6678138a1f877e7da4cb64806faf4d7a043d9a25fad1735a93ab", 0x72}, {&(0x7f00000015c0)="66e80b03a2a4ec81686f523253b882cc0e393528ddfdc715eb436d83ce7863b8b49e181bea0a52135d56f449c2ce5893b30b0d5884f22516b775f73e27630b775cfdd2893ed08692b51f4d39d6ef73ec5d8497397219b062ce96fee878d65b383016ee16a0c76e5b0c113431917bdf4b207b0b58bb346bc1f16161b0ddb925777dcdc35c87b066e28e72a89633d97e4d47e2d9945d73cfc18cd5695cb113be1b0ee9b29655101a3a130c0c971c228a7cf79bd7286b2bad70db6984f3a0c1c36a", 0xc0}], 0x8}, 0x5) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 17:38:36 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_names\x00') 17:38:36 executing program 3: add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="5865defecb80a10b75f7858647a020856fe817d76fa8c26770d72aa3e8c73ba513fe6544cf837957722509c8968e2d26627020de225255d14b22eaff280d5db0ce4782ebb37a72f324761c6e4af25783965aa3ec64d661044bf12431692664b0e46dff9428ac69b75e84e1dc08b80c1eb176a16cee6dea541b142ea5509c25620cc2529f6aafdc43277bc29ea0860396c6fc0d0b17c007ea198bdff1ac8e06eb43985af869114676af45af24a9022e9f6dfaeedb199f8cafb5cf61fb7197d4ddb0d9e4f879319d2510e13e4f2f2f6ed38645f280e90fd792593c1b612f1bf06d313fbe349a5e93a848316d73a2b4836804c4c1a3909766f77134b160acc3c8aea74aa34c5c8e400ee53dd59ae5bf23468d9900ed82ee24b8032ef58d7f1217201401aa3340fcaf87682ed4c34f3dc84e92c45083b865766bc6054ea688fde94786cdbe32f1aa83970ebce7e7f63477d476df65a70088e2bfa4c83b67794f06ebb33ff6c587f7d4dbbf99ac387981c69855d2e6a1e951712b18aa06b2818357dde2f76782231887451a9e0a7d96b0d8234307fddfc2f7316ec4c082c0bfb163747fbcf42ea47f37e16060b2d4a2cf8f674aabfe99fdfa0a96248da3e948e3807f8a0f8747b819c289d5bb6ac5e04f295a8471a3ef23872ee9a081723ebe2c172fd735c07e0ea94b8e9acb0ca4628ab98b07c19cc52a30a62bfef80fe94c12025ff1c78fafbd67e20a01330b4980461ba45b53a7bf3e6fc69248bec8335b8bd7450d4bfc1073d7a5acacc6ba4148524233683a5c98758750e5b98e605b5ccef07909e16152f6faf77cab48ff0344bdce366e8ec1e35539b04cc99da119848174cf3955de3128a29458b6294e830899d575d4cb16666d4a5e45b2e93c9400b426d997bb17b52462a9e35021729d41afaaba4d03d689d579ead268059e328bf361a76ac5f3b05934eb56e5e02eccb21634f9cf23a95804068482d285911cfa067f73d54940264666b2691b0669aca1550232f62b7c75b4a26ede9e0460ba6106b1351dd6100e9fffcb5665631f13c5c1c2de2be441d83f1693651979bdb8336976fc2362b906d770a65570ad1db9eb7bb16f59e0a2a94f4a1798da622f7de15423cb7d404c20f1db95d774860ef763ca5f5d8bffcce6204b6afee9c828e95d38c07472266ef7f6082f99162702020fe036f43dcb84f2e95df269b15ca8abc70c6b758111db1d719648958a9e3887d9a7c702693943601f4c5b9786abb7cd961fbaea767fff57621dd2c77487ad8bd2c903b89de73ed01b9bce70e89fc8fb9a2bf630870c36c7335810f98e4fec946702c7d786d06df4393cf38f1e2048a71cb802e839c6e93150d9e2431b7ebd0b9dc09fd546bbeb2978b791ca1321b9eb2ff933e52a5daea08e3ce8897da982f66b3a2af53d1ab6d206d16d8f16e723dfc52835429b2012e55776f7f3c5cc4e5f88c2d1c0a822fbb700e107cbe31496669c6cfa3b7fe0275bc311d3ec5344280fcc0aafa83c21306fa820c53658e7c5cc237bfa36934b7eda8f6cd904caf56d8b7416c3c7350eec98279d342e9125104f14123f27bbcd7b4259cb67f39cbda628f1e3b1c7c928d11a8d3828905352d19312b0edd44e654ab738c4f9075e40edff20d8522224d31774deb2028c56d4e20959c3420c9aff3935ca12187ab8e7a30db8696165be48f08c00e4a5da9630687016dbd2002d65019596cd95a9b86da45041f12dd6b44f2c577cae1e942d", 0x4d9, 0xfffffffffffffffe) 17:38:36 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240), 0x4) 17:38:36 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x5a) 17:38:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$alg(r0, &(0x7f0000000080)=""/115, 0x73) read$snapshot(r0, 0x0, 0x0) 17:38:36 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0xa4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x78, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80}}]}]}}]}, 0xa4}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:38:36 executing program 3: unshare(0x44030280) 17:38:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xa5, &(0x7f0000000180)="c4c69105000000078a0098d1e0a593b040f762910000000000000022addee07bee0d6331b7cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b71010000000808ffdb2dc4a741357baa16dacdcfac32957dc4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e00000000006f9065227639e823d61dcb10a8c53733b92a77dd824cc78552bf48bb6af21cce044b97f9"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x3c) 17:38:36 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r0, &(0x7f0000002c40)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2, &(0x7f00000008c0)=[{0x28, 0x0, 0x0, "a52a020c5f6d50b9ab1292cadb7370e743"}], 0x28}}], 0x1, 0x0) 17:38:37 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000140)) [ 469.547904][T13702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 17:38:37 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa2203, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0xffff}, 0x8) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40000, 0x0) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x8) sendmsg$alg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000100)="872e6efad7806bb261", 0x9}, {&(0x7f0000000140)="0015a50f27ec6b8fe142f365762ec811eaa79e94bec3c7b7f55f324e9328a9d1d6911089ffa9fb3a4dd5fec19d1aa7c0e7aa94115001eeb980f13bb788ed122b56b610ef415b225d", 0x48}, {0x0}, {&(0x7f0000000380)="9cb80f1b0f0c32892f96a448577aac2dfe0312057fa616d42058e254b4225b2dc52a3e0d4a749413f7be5aa998f8054e0c85b9105caedd820db90f63c1f70640755f48c6ee85154911422d7779108a4651f8eab71845c37bf2ef860eacfc52b4769e167d4157cc02374fbf8d800efecb83a6f80b1915a68b18b19eb2e0f675a8e37b19e905df6b6f54fb9a4120688efd9a361af8a19588", 0x97}, {&(0x7f0000000440)="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", 0xab5}, {&(0x7f0000001440)="4d57a97e93bd766b0fd3c49332c7e498319f873c6df1b290a2bccffdf957d07f0377429acf74f03f2f3aa8bf903dec097771faf8a0af132277e783e7b6be1d751ab561c4ca0b5d4aede47f6186b477e27212d81d8f509ad90e8fe8f8ff7a4f7e41710f51958c924011582b85765b3f0317d7bef71cbc8200a3", 0x79}, {&(0x7f0000001540)="37da73f461341834715749f07ccf1d51529a7a170bd65ca48d9c7c267d7b921a75183e4d0fb950f098e8ada9530bc120d65288447c7f95e05203c6ac60d6d958ebe6007fccac0adc4d6090e250a04f3b73879dce767dd3fa6678138a1f877e7da4cb64806faf4d7a043d9a25fad1735a93ab", 0x72}, {&(0x7f00000015c0)="66e80b03a2a4ec81686f523253b882cc0e393528ddfdc715eb436d83ce7863b8b49e181bea0a52135d56f449c2ce5893b30b0d5884f22516b775f73e27630b775cfdd2893ed08692b51f4d39d6ef73ec5d8497397219b062ce96fee878d65b383016ee16a0c76e5b0c113431917bdf4b207b0b58bb346bc1f16161b0ddb925777dcdc35c87b066e28e72a89633d97e4d47e2d9945d73cfc18cd5695cb113be1b0ee9b29655101a3a130c0c971c228a7cf79bd7286b2bad70db6984f3a0c1c36a", 0xc0}], 0x8}, 0x5) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 17:38:37 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x0, 0x0) 17:38:37 executing program 0: add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 17:38:37 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000003c0)="8a3444dd0681016da2cdc2f9675c09ff00000051ea83c657c12f9da8011c9c1309cd3e1f22296bbab4b93c63f85cdff2bead452a6aebbffd25ba452a808ffeb3d5b6876666c111c6ada56f170a0988a3a7133d835e365000000000", 0x5b) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) 17:38:37 executing program 4: syz_mount_image$xfs(&(0x7f0000001ac0)='xfs\x00', &(0x7f0000001b00)='./file0\x00', 0x604, 0x4, &(0x7f0000003ec0)=[{0x0, 0x0, 0xffffffffffffff80}, {0x0}, {0x0}, {&(0x7f0000002e00)}], 0x0, &(0x7f0000003f80)={[{@sysvgroups='sysvgroups'}, {@grpquota='grpquota'}, {@nobarrier='nobarrier'}], [{@uid_eq={'uid'}}, {@measure='measure'}]}) 17:38:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') read$snapshot(r0, &(0x7f0000000540)=""/4096, 0x1000) 17:38:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000000), 0x0) [ 469.976450][T13732] loop4: detected capacity change from 16383 to 0 [ 469.997629][T13732] xfs: Unknown parameter 'nobarrier' [ 470.075550][T13732] loop4: detected capacity change from 16383 to 0 [ 470.093498][T13732] xfs: Unknown parameter 'nobarrier' [ 472.530841][ T9720] Bluetooth: hci0: command 0x0406 tx timeout [ 472.537026][ T9720] Bluetooth: hci1: command 0x0406 tx timeout [ 472.550052][ T9720] Bluetooth: hci2: command 0x0406 tx timeout [ 472.562934][ T9720] Bluetooth: hci3: command 0x0406 tx timeout [ 472.575645][ T9720] Bluetooth: hci5: command 0x0406 tx timeout [ 472.584859][ T9720] Bluetooth: hci4: command 0x0406 tx timeout [ 616.355736][ T1652] INFO: task kworker/u4:4:9900 blocked for more than 143 seconds. [ 616.363879][ T1652] Not tainted 5.10.0-syzkaller #0 [ 616.373505][ T1652] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.384307][ T1652] task:kworker/u4:4 state:D stack:25488 pid: 9900 ppid: 2 flags:0x00004000 [ 616.395896][ T1652] Workqueue: tc_filter_workqueue u32_delete_key_freepf_work [ 616.403235][ T1652] Call Trace: [ 616.408756][ T1652] __schedule+0x8eb/0x21b0 [ 616.413221][ T1652] ? io_schedule_timeout+0x140/0x140 [ 616.421190][ T1652] schedule+0xcf/0x270 [ 616.430558][ T1652] schedule_preempt_disabled+0xf/0x20 [ 616.438264][ T1652] __mutex_lock+0x81a/0x1110 [ 616.442888][ T1652] ? u32_delete_key_freepf_work+0xe/0x30 [ 616.450968][ T1652] ? mutex_lock_io_nested+0xf60/0xf60 [ 616.475388][ T1652] ? lock_release+0x710/0x710 [ 616.480224][ T1652] u32_delete_key_freepf_work+0xe/0x30 [ 616.488124][ T1652] process_one_work+0x98d/0x1630 [ 616.493107][ T1652] ? pwq_dec_nr_in_flight+0x320/0x320 [ 616.515371][ T1652] ? rwlock_bug.part.0+0x90/0x90 [ 616.520505][ T1652] ? _raw_spin_lock_irq+0x41/0x50 [ 616.537081][ T1652] worker_thread+0x64c/0x1120 [ 616.541821][ T1652] ? __kthread_parkme+0x13f/0x1e0 [ 616.565324][ T1652] ? process_one_work+0x1630/0x1630 [ 616.570593][ T1652] kthread+0x3b1/0x4a0 [ 616.574684][ T1652] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 616.595515][ T1652] ret_from_fork+0x1f/0x30 [ 616.600036][ T1652] INFO: task syz-executor.5:13702 blocked for more than 143 seconds. [ 616.643544][ T1652] Not tainted 5.10.0-syzkaller #0 [ 616.649225][ T1652] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.675353][ T1652] task:syz-executor.5 state:D stack:23552 pid:13702 ppid: 8657 flags:0x00000004 [ 616.684769][ T1652] Call Trace: [ 616.688169][ T1652] __schedule+0x8eb/0x21b0 [ 616.692620][ T1652] ? io_schedule_timeout+0x140/0x140 [ 616.705331][ T1652] schedule+0xcf/0x270 [ 616.709433][ T1652] schedule_preempt_disabled+0xf/0x20 [ 616.714818][ T1652] __mutex_lock+0x81a/0x1110 [ 616.736114][ T1652] ? rtnetlink_rcv_msg+0x443/0xb80 [ 616.741279][ T1652] ? mutex_lock_io_nested+0xf60/0xf60 [ 616.765319][ T1652] ? rtnetlink_rcv_msg+0x40d/0xb80 [ 616.770499][ T1652] rtnetlink_rcv_msg+0x443/0xb80 [ 616.785442][ T1652] ? rtnl_fdb_dump+0xa00/0xa00 [ 616.790264][ T1652] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 616.806200][ T1652] netlink_rcv_skb+0x153/0x420 [ 616.811010][ T1652] ? rtnl_fdb_dump+0xa00/0xa00 [ 616.825321][ T1652] ? netlink_ack+0xab0/0xab0 [ 616.829945][ T1652] ? netlink_deliver_tap+0x2c4/0xc00 [ 616.846130][ T1652] netlink_unicast+0x533/0x7d0 [ 616.850942][ T1652] ? netlink_attachskb+0x870/0x870 [ 616.865295][ T1652] ? _copy_from_iter_full+0x275/0x850 [ 616.871112][ T1652] netlink_sendmsg+0x907/0xe40 [ 616.885339][ T1652] ? netlink_unicast+0x7d0/0x7d0 [ 616.890323][ T1652] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 616.916319][ T1652] ? netlink_unicast+0x7d0/0x7d0 [ 616.921309][ T1652] sock_sendmsg+0xcf/0x120 [ 616.925818][ T1652] ____sys_sendmsg+0x6e8/0x810 [ 616.930606][ T1652] ? kernel_sendmsg+0x50/0x50 [ 616.946879][ T1652] ? do_recvmmsg+0x6c0/0x6c0 [ 616.951511][ T1652] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 616.975309][ T1652] ___sys_sendmsg+0xf3/0x170 [ 616.979944][ T1652] ? sendmsg_copy_msghdr+0x160/0x160 [ 616.995519][ T1652] ? __fget_files+0x2c1/0x430 [ 617.000236][ T1652] ? lock_downgrade+0x6d0/0x6d0 [ 617.005420][ T1652] ? find_held_lock+0x2d/0x110 [ 617.010223][ T1652] ? __fget_files+0x2e3/0x430 [ 617.014929][ T1652] ? __fget_light+0xea/0x280 [ 617.035314][ T1652] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 617.041602][ T1652] __sys_sendmsg+0xe5/0x1b0 [ 617.066088][ T1652] ? __sys_sendmsg_sock+0xb0/0xb0 [ 617.071681][ T1652] ? __x64_sys_futex+0x3c8/0x5e0 [ 617.076733][ T1652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 617.082922][ T1652] do_syscall_64+0x2d/0x70 [ 617.103094][ T1652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.115321][ T1652] RIP: 0033:0x45e149 [ 617.124695][ T1652] RSP: 002b:00007f85f7cdec68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.144713][ T1652] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 617.163879][ T1652] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 617.180379][ T1652] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 617.197513][ T1652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 617.209837][ T1652] R13: 00007fff1b1e198f R14: 00007f85f7cdf9c0 R15: 000000000119bf8c [ 617.228515][ T1652] INFO: task syz-executor.2:13714 blocked for more than 144 seconds. [ 617.247278][ T1652] Not tainted 5.10.0-syzkaller #0 [ 617.253040][ T1652] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.273025][ T1652] task:syz-executor.2 state:D stack:29616 pid:13714 ppid: 8502 flags:0x00000000 [ 617.293597][ T1652] Call Trace: [ 617.299415][ T1652] __schedule+0x8eb/0x21b0 [ 617.303874][ T1652] ? io_schedule_timeout+0x140/0x140 [ 617.322170][ T1652] schedule+0xcf/0x270 [ 617.331616][ T1652] schedule_preempt_disabled+0xf/0x20 [ 617.344359][ T1652] __mutex_lock+0x81a/0x1110 [ 617.354261][ T1652] ? sock_do_ioctl+0x253/0x2f0 [ 617.364353][ T1652] ? mutex_lock_io_nested+0xf60/0xf60 [ 617.379498][ T1652] ? lock_downgrade+0x6d0/0x6d0 [ 617.384416][ T1652] sock_do_ioctl+0x253/0x2f0 [ 617.399562][ T1652] ? kernel_sendpage_locked+0x100/0x100 [ 617.405146][ T1652] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 617.422376][ T1652] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 617.432318][ T1652] ? do_vfs_ioctl+0x27d/0x1090 [ 617.445508][ T1652] ? selinux_file_ioctl+0x45f/0x5f0 [ 617.450753][ T1652] ? generic_block_fiemap+0x60/0x60 [ 617.467123][ T1652] ? selinux_bprm_creds_for_exec+0xb70/0xb70 [ 617.473158][ T1652] sock_ioctl+0x477/0x6c0 [ 617.489659][ T1652] ? sock_do_ioctl+0x2f0/0x2f0 [ 617.494475][ T1652] ? __x64_sys_futex+0x3c8/0x5e0 [ 617.505973][ T1652] ? security_file_ioctl+0x5c/0xb0 [ 617.511132][ T1652] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 617.525595][ T1652] ? sock_do_ioctl+0x2f0/0x2f0 [ 617.530388][ T1652] __x64_sys_ioctl+0x193/0x200 [ 617.535176][ T1652] do_syscall_64+0x2d/0x70 [ 617.549682][ T1652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.566610][ T1652] RIP: 0033:0x45e149 [ 617.570541][ T1652] RSP: 002b:00007f129095dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.584450][ T1652] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 617.594672][ T1652] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000003 [ 617.603635][ T1652] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 617.612529][ T1652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 617.621405][ T1652] R13: 00007ffdb3d3bcaf R14: 00007f129095e9c0 R15: 000000000119bf8c [ 617.630594][ T1652] [ 617.630594][ T1652] Showing all locks held in the system: [ 617.643802][ T1652] 1 lock held by khungtaskd/1652: [ 617.653953][ T1652] #0: ffffffff8b78e0e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x28c [ 617.673083][ T1652] 3 locks held by kworker/1:2/3852: [ 617.678463][ T1652] #0: ffff888023c00138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x1630 [ 617.700691][ T1652] #1: ffffc90002defda8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1630 [ 617.713906][ T1652] #2: ffffffff8d0d8ae8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 617.737867][ T1652] 1 lock held by in:imklog/8178: [ 617.742829][ T1652] #0: ffff88801409d3f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 617.762499][ T1652] 3 locks held by kworker/u4:4/9900: [ 617.769448][ T1652] #0: ffff888014c4b138 ((wq_completion)tc_filter_workqueue){+.+.}-{0:0}, at: process_one_work+0x871/0x1630 [ 617.786553][ T1652] #1: ffffc90016037da8 ((work_completion)(&(rwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1630 [ 617.821003][ T1652] #2: ffffffff8d0d8ae8 (rtnl_mutex){+.+.}-{3:3}, at: u32_delete_key_freepf_work+0xe/0x30 [ 617.842104][ T1652] 1 lock held by syz-executor.5/13702: [ 617.850215][ T1652] #0: ffffffff8d0d8ae8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x443/0xb80 [ 617.869589][ T1652] 2 locks held by syz-executor.5/13715: [ 617.885334][ T1652] 1 lock held by syz-executor.2/13714: [ 617.891809][ T1652] #0: ffffffff8d0d8ae8 (rtnl_mutex){+.+.}-{3:3}, at: sock_do_ioctl+0x253/0x2f0 [ 617.911979][ T1652] [ 617.914327][ T1652] ============================================= [ 617.914327][ T1652] [ 617.936997][ T1652] NMI backtrace for cpu 0 [ 617.941338][ T1652] CPU: 0 PID: 1652 Comm: khungtaskd Not tainted 5.10.0-syzkaller #0 [ 617.949320][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.959551][ T1652] Call Trace: [ 617.962836][ T1652] dump_stack+0x107/0x163 [ 617.967185][ T1652] nmi_cpu_backtrace.cold+0x3c/0xef [ 617.972400][ T1652] ? lapic_can_unplug_cpu+0x80/0x80 [ 617.977962][ T1652] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 617.983961][ T1652] watchdog+0xe36/0x10b0 [ 617.988219][ T1652] ? reset_hung_task_detector+0x30/0x30 [ 617.993780][ T1652] kthread+0x3b1/0x4a0 [ 617.997867][ T1652] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 618.003777][ T1652] ret_from_fork+0x1f/0x30 [ 618.009485][ T1652] Sending NMI from CPU 0 to CPUs 1: [ 618.015781][ C1] NMI backtrace for cpu 1 [ 618.015790][ C1] CPU: 1 PID: 13715 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 618.015799][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.015808][ C1] RIP: 0010:lock_is_held_type+0xc2/0x100 [ 618.015818][ C1] Code: 03 44 39 f0 41 0f 94 c4 48 c7 c7 40 9a 6b 89 e8 44 0b 00 00 b8 ff ff ff ff 65 0f c1 05 87 c8 eb 76 83 f8 01 75 23 ff 34 24 9d <48> 83 c4 08 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 45 31 e4 eb [ 618.015834][ C1] RSP: 0018:ffffc900023a6b08 EFLAGS: 00000202 [ 618.015846][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 1ffffffff1afb2d3 [ 618.015854][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.015863][ C1] RBP: ffffffff8b78e020 R08: ffffffff87261ea8 R09: ffff888028658a07 [ 618.015871][ C1] R10: ffffed10050cb140 R11: 0000000000000000 R12: 0000000000000000 [ 618.015880][ C1] R13: ffff888030134e88 R14: 00000000ffffffff R15: ffff888030134e88 [ 618.015888][ C1] FS: 00007f85f7c9d700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 618.015897][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.015904][ C1] CR2: 00000000033cea98 CR3: 000000002af70000 CR4: 00000000001506e0 [ 618.015913][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 618.015922][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 618.015929][ C1] Call Trace: [ 618.015933][ C1] ___might_sleep+0x25d/0x2d0 [ 618.015938][ C1] __mutex_lock+0xa9/0x1110 [ 618.015944][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 618.015949][ C1] ? mutex_lock_io_nested+0xf60/0xf60 [ 618.015956][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 618.015962][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 618.015968][ C1] ? wait_for_completion_io+0x260/0x260 [ 618.015974][ C1] ? __radix_tree_lookup+0x211/0x2a0 [ 618.015980][ C1] tcf_idr_check_alloc+0x78/0x3b0 [ 618.015986][ C1] tcf_police_init+0x1fd/0x12e0 [ 618.015991][ C1] ? tcf_police_search+0x40/0x40 [ 618.015997][ C1] ? find_held_lock+0x2d/0x110 [ 618.016002][ C1] ? tc_lookup_action_n+0xcd/0xf0 [ 618.016008][ C1] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 618.016014][ C1] tcf_action_init_1+0x1a3/0x990 [ 618.016020][ C1] ? tcf_action_dump_old+0x80/0x80 [ 618.016025][ C1] ? find_held_lock+0x2d/0x110 [ 618.016031][ C1] ? pcpu_alloc+0x12f4/0x17d0 [ 618.016036][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 618.016042][ C1] tcf_exts_validate+0x138/0x420 [ 618.016047][ C1] ? tcf_exts_destroy+0xc0/0xc0 [ 618.016053][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 618.016059][ C1] ? wait_for_completion_io+0x260/0x260 [ 618.016065][ C1] u32_set_parms+0xb9/0xd10 [ 618.016071][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 618.016077][ C1] ? u32_bind_class+0x2c0/0x2c0 [ 618.016082][ C1] u32_change+0x1f8d/0x3100 [ 618.016087][ C1] ? u32_dump+0x1060/0x1060 [ 618.016092][ C1] ? blackhole_dequeue+0x10/0x10 [ 618.016098][ C1] ? u32_lookup_ht+0x220/0x220 [ 618.016104][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 618.016110][ C1] ? tc_new_tfilter+0x138e/0x21b0 [ 618.016116][ C1] tc_new_tfilter+0x13fb/0x21b0 [ 618.016121][ C1] ? u32_dump+0x1060/0x1060 [ 618.016126][ C1] ? tc_del_tfilter+0x15f0/0x15f0 [ 618.016133][ C1] ? tc_del_tfilter+0x15f0/0x15f0 [ 618.016139][ C1] rtnetlink_rcv_msg+0x8b6/0xb80 [ 618.016144][ C1] ? rtnl_fdb_dump+0xa00/0xa00 [ 618.016150][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 618.016155][ C1] netlink_rcv_skb+0x153/0x420 [ 618.016161][ C1] ? rtnl_fdb_dump+0xa00/0xa00 [ 618.016166][ C1] ? netlink_ack+0xab0/0xab0 [ 618.016172][ C1] ? netlink_deliver_tap+0x2c4/0xc00 [ 618.016177][ C1] netlink_unicast+0x533/0x7d0 [ 618.016183][ C1] ? netlink_attachskb+0x870/0x870 [ 618.016188][ C1] ? _copy_from_iter_full+0x275/0x850 [ 618.016194][ C1] netlink_sendmsg+0x907/0xe40 [ 618.016200][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 618.016205][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 618.016212][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 618.016217][ C1] sock_sendmsg+0xcf/0x120 [ 618.016222][ C1] ____sys_sendmsg+0x331/0x810 [ 618.016228][ C1] ? kernel_sendmsg+0x50/0x50 [ 618.016233][ C1] ? do_recvmmsg+0x6c0/0x6c0 [ 618.016238][ C1] ? __lock_acquire+0x16c2/0x54b0 [ 618.016244][ C1] ___sys_sendmsg+0xf3/0x170 [ 618.016249][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 618.016255][ C1] ? find_held_lock+0x2d/0x110 [ 618.016260][ C1] ? __might_fault+0xd3/0x180 [ 618.016266][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 618.016271][ C1] __sys_sendmmsg+0x195/0x470 [ 618.016277][ C1] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 618.016282][ C1] ? _copy_to_user+0xdc/0x150 [ 618.016288][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 618.016294][ C1] ? put_timespec64+0xcb/0x120 [ 618.016299][ C1] ? ns_to_timespec64+0xc0/0xc0 [ 618.016305][ C1] ? __x64_sys_futex+0x3c8/0x5e0 [ 618.016310][ C1] __x64_sys_sendmmsg+0x99/0x100 [ 618.016316][ C1] ? syscall_enter_from_user_mode+0x1d/0x50 [ 618.016322][ C1] do_syscall_64+0x2d/0x70 [ 618.016327][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 618.016333][ C1] RIP: 0033:0x45e149 [ 618.016342][ C1] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 618.016358][ C1] RSP: 002b:00007f85f7c9cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 618.016371][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 618.016379][ C1] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 618.016388][ C1] RBP: 000000000119c118 R08: 0000000000000000 R09: 0000000000000000 [ 618.016397][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 618.016405][ C1] R13: 00007fff1b1e198f R14: 00007f85f7c9d9c0 R15: 000000000119c0dc [ 618.065189][ T1652] Kernel panic - not syncing: hung_task: blocked tasks [ 618.587676][ T1652] CPU: 0 PID: 1652 Comm: khungtaskd Not tainted 5.10.0-syzkaller #0 [ 618.595661][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.605725][ T1652] Call Trace: [ 618.609016][ T1652] dump_stack+0x107/0x163 [ 618.613371][ T1652] panic+0x343/0x77f [ 618.617280][ T1652] ? __warn_printk+0xf3/0xf3 [ 618.621894][ T1652] ? lapic_can_unplug_cpu+0x80/0x80 [ 618.627110][ T1652] ? preempt_schedule_thunk+0x16/0x18 [ 618.632503][ T1652] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 618.638677][ T1652] ? watchdog.cold+0xb8/0x23e [ 618.643373][ T1652] watchdog.cold+0xc9/0x23e [ 618.647903][ T1652] ? reset_hung_task_detector+0x30/0x30 [ 618.653468][ T1652] kthread+0x3b1/0x4a0 [ 618.657552][ T1652] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 618.663464][ T1652] ret_from_fork+0x1f/0x30 [ 618.668779][ T1652] Kernel Offset: disabled [ 618.673120][ T1652] Rebooting in 86400 seconds..