[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.4' (ECDSA) to the list of known hosts. 2020/09/05 20:23:34 fuzzer started 2020/09/05 20:23:35 dialing manager at 10.128.0.26:45095 2020/09/05 20:23:35 syscalls: 3333 2020/09/05 20:23:35 code coverage: enabled 2020/09/05 20:23:35 comparison tracing: enabled 2020/09/05 20:23:35 extra coverage: enabled 2020/09/05 20:23:35 setuid sandbox: enabled 2020/09/05 20:23:35 namespace sandbox: enabled 2020/09/05 20:23:35 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/05 20:23:35 fault injection: enabled 2020/09/05 20:23:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/05 20:23:35 net packet injection: enabled 2020/09/05 20:23:35 net device setup: enabled 2020/09/05 20:23:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/05 20:23:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/05 20:23:35 USB emulation: enabled 2020/09/05 20:23:35 hci packet injection: enabled 20:26:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0xfffffffffffffed3) 20:26:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 20:26:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x30, 0x0, "000000400000040000000000000000000000000000020000000000000000000089506108ec5d366a0000002300000000000000000000000000002000eaffff00"}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 20:26:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semtimedop(0x0, &(0x7f0000000000)=[{}, {}], 0x2aaaaaaaaaaaaab9, 0x0) 20:26:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20001732, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 20:26:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0xa0}, {0x4}], 0x2, 0x0) syzkaller login: [ 238.700639][ T6886] IPVS: ftp: loaded support on port[0] = 21 [ 238.844318][ T6888] IPVS: ftp: loaded support on port[0] = 21 [ 239.001349][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 239.197914][ T6890] IPVS: ftp: loaded support on port[0] = 21 [ 239.245061][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 239.289303][ T6892] IPVS: ftp: loaded support on port[0] = 21 [ 239.297426][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.305494][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.313771][ T6886] device bridge_slave_0 entered promiscuous mode [ 239.378673][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.387164][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.394845][ T6886] device bridge_slave_1 entered promiscuous mode [ 239.483952][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.499282][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.601138][ T6894] IPVS: ftp: loaded support on port[0] = 21 [ 239.625030][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.632172][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.661095][ T6888] device bridge_slave_0 entered promiscuous mode [ 239.707653][ T6886] team0: Port device team_slave_0 added [ 239.711632][ T6896] IPVS: ftp: loaded support on port[0] = 21 [ 239.753934][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.762133][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.771287][ T6888] device bridge_slave_1 entered promiscuous mode [ 239.795709][ T6886] team0: Port device team_slave_1 added [ 239.868342][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.879197][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.888239][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.916615][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.933771][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.941614][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.968231][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.004823][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.028561][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 240.123047][ T6888] team0: Port device team_slave_0 added [ 240.173051][ T6886] device hsr_slave_0 entered promiscuous mode [ 240.180269][ T6886] device hsr_slave_1 entered promiscuous mode [ 240.188864][ T6888] team0: Port device team_slave_1 added [ 240.233094][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 240.348364][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.357926][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.384763][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.450498][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.470106][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.499485][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.526805][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.534006][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.542517][ T6890] device bridge_slave_0 entered promiscuous mode [ 240.565122][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.565183][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.566095][ T6892] device bridge_slave_0 entered promiscuous mode [ 240.588569][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.596330][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.604045][ T6892] device bridge_slave_1 entered promiscuous mode [ 240.634584][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.642775][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.651658][ T6890] device bridge_slave_1 entered promiscuous mode [ 240.672208][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 240.702332][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.712420][ T17] Bluetooth: hci0: command 0x0409 tx timeout [ 240.727722][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.776263][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.804380][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.820353][ T6888] device hsr_slave_0 entered promiscuous mode [ 240.827614][ T6888] device hsr_slave_1 entered promiscuous mode [ 240.834222][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.843083][ T6888] Cannot create hsr debugfs directory [ 240.867037][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 240.880324][ T6892] team0: Port device team_slave_0 added [ 240.953812][ T6892] team0: Port device team_slave_1 added [ 240.996776][ T6890] team0: Port device team_slave_0 added [ 241.039370][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.048790][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.057876][ T6894] device bridge_slave_0 entered promiscuous mode [ 241.075815][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.082800][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.114497][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.115233][ T2543] Bluetooth: hci2: command 0x0409 tx timeout [ 241.132620][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 241.143891][ T6890] team0: Port device team_slave_1 added [ 241.164622][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.171998][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.181300][ T6894] device bridge_slave_1 entered promiscuous mode [ 241.207342][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.214315][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.240640][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.269351][ T2468] Bluetooth: hci3: command 0x0409 tx timeout [ 241.272239][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.296657][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.327519][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.350232][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.357266][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.385994][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.415977][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.442949][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.491087][ T6886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.514806][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 241.540751][ T6894] team0: Port device team_slave_0 added [ 241.550964][ T6890] device hsr_slave_0 entered promiscuous mode [ 241.559098][ T6890] device hsr_slave_1 entered promiscuous mode [ 241.567470][ T6890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.576275][ T6890] Cannot create hsr debugfs directory [ 241.582386][ T6886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.600794][ T6892] device hsr_slave_0 entered promiscuous mode [ 241.608990][ T6892] device hsr_slave_1 entered promiscuous mode [ 241.616982][ T6892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.624571][ T6892] Cannot create hsr debugfs directory [ 241.636211][ T6894] team0: Port device team_slave_1 added [ 241.642955][ T6886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.665590][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 241.704410][ T6886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.739902][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.748019][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.757517][ T6896] device bridge_slave_0 entered promiscuous mode [ 241.772681][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.783224][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.810594][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.836557][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.843639][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.860380][ T6896] device bridge_slave_1 entered promiscuous mode [ 241.872967][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.881261][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.908724][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.028836][ T6894] device hsr_slave_0 entered promiscuous mode [ 242.039717][ T6894] device hsr_slave_1 entered promiscuous mode [ 242.047983][ T6894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.056554][ T6894] Cannot create hsr debugfs directory [ 242.066196][ T6888] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.087173][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.109406][ T6888] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.126553][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.161751][ T6888] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.173450][ T6888] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.244715][ T6896] team0: Port device team_slave_0 added [ 242.281255][ T6896] team0: Port device team_slave_1 added [ 242.324203][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.332606][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.359963][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.383147][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.390236][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.417411][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.575120][ T6892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.594576][ T6892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.610801][ T6896] device hsr_slave_0 entered promiscuous mode [ 242.619669][ T6896] device hsr_slave_1 entered promiscuous mode [ 242.628072][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.635872][ T6896] Cannot create hsr debugfs directory [ 242.666233][ T6892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.708926][ T6892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.775949][ T6890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.785124][ T2468] Bluetooth: hci0: command 0x041b tx timeout [ 242.818666][ T6890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.855634][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.872870][ T6890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.905776][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.922039][ T6890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.933944][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.944936][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 242.947899][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.985930][ T6894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.003042][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.013346][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.027825][ T2468] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.035093][ T2468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.046745][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.055855][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.064151][ T2468] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.071294][ T2468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.087848][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.113039][ T6894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.122626][ T6894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.147860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.156635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.178006][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.195513][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 243.201707][ T6894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.219916][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.229274][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.241120][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.250259][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.296850][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.320121][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.330813][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.339758][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.349711][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.358494][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.369653][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.378168][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.388344][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.397403][ T2468] Bluetooth: hci3: command 0x041b tx timeout [ 243.411529][ T6896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 243.433060][ T6896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.478351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.491259][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.500118][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.507275][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.539563][ T6896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 243.552293][ T6896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.572613][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.582157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.591051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.599678][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.606837][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.615264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.623908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.633018][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.641964][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.651453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.660313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.695591][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 243.723990][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.733081][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.742446][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.751688][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.760258][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.771340][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.778955][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.787063][ T7846] Bluetooth: hci5: command 0x041b tx timeout [ 243.788839][ T6888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.834234][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.866792][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.927694][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.940427][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.949141][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.961387][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.983436][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.997946][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.013956][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.038564][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.055870][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.064526][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.114378][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.122807][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.133314][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.142400][ T2468] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.149558][ T2468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.157971][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.167682][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.177317][ T2468] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.184369][ T2468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.192367][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.201177][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.209157][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.217401][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.265753][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.274051][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.283023][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.292428][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.301854][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.311820][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.321197][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.330161][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.337313][ T7846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.345419][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.353955][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.362886][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.371683][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.380290][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.387444][ T7846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.397573][ T6890] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.405126][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.413115][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.458152][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.467238][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.478849][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.488566][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.497248][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.506409][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.514595][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.528418][ T6892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.544894][ T6892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.556524][ T6886] device veth0_vlan entered promiscuous mode [ 244.578199][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.589187][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.600786][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.610821][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.622902][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.633158][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.669780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.679306][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.688983][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.696145][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.704203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.716370][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.724923][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.733518][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.746177][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.755159][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.763680][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.770855][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.787561][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.803011][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.811912][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.824803][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.832589][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.852912][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.865591][ T7846] Bluetooth: hci0: command 0x040f tx timeout [ 244.869969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.883504][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.915200][ T6888] device veth0_vlan entered promiscuous mode [ 244.922277][ T6886] device veth1_vlan entered promiscuous mode [ 244.948218][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.966176][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.974225][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.983329][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.996303][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.004728][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.012965][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.022239][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.031877][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.039470][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.049957][ T2468] Bluetooth: hci1: command 0x040f tx timeout [ 245.054190][ T6888] device veth1_vlan entered promiscuous mode [ 245.069619][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.105111][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.113397][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.123561][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.133264][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.142222][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.151442][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.160322][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.169542][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.179335][ T2543] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.186495][ T2543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.195220][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.203855][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.212364][ T2543] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.219530][ T2543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.228522][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.237550][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.264055][ T6890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.277798][ T2468] Bluetooth: hci2: command 0x040f tx timeout [ 245.277878][ T6890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.307812][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.340753][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.349405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.362977][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.372074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.380800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.390066][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.399201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.424905][ T2468] Bluetooth: hci3: command 0x040f tx timeout [ 245.444080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.452478][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.468050][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.479457][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.491416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.510341][ T6886] device veth0_macvtap entered promiscuous mode [ 245.538144][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.546945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.558471][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.568148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.576681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.586286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.595701][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.603968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.613025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.625558][ T6886] device veth1_macvtap entered promiscuous mode [ 245.647902][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.658778][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.667580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.677417][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.686787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.694328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.733484][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.744777][ T2468] Bluetooth: hci4: command 0x040f tx timeout [ 245.753774][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.770522][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.780057][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.808997][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.822088][ T6888] device veth0_macvtap entered promiscuous mode [ 245.825568][ T2468] Bluetooth: hci5: command 0x040f tx timeout [ 245.839754][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.865845][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.874054][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.887044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.898076][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.907268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.916794][ T6888] device veth1_macvtap entered promiscuous mode [ 245.929680][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.963738][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.975881][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.986265][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.007810][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.023669][ T6892] device veth0_vlan entered promiscuous mode [ 246.045568][ T6886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.054755][ T6886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.063449][ T6886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.073721][ T6886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.089993][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.098453][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.109450][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.119651][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.174441][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.187011][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.197658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.208034][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.236919][ T6892] device veth1_vlan entered promiscuous mode [ 246.246918][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.264603][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.277931][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.295705][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.303850][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.315781][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.356345][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.370968][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.391230][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.427154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.445403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.453902][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.476111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.493403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.502602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.520724][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.536691][ T6890] device veth0_vlan entered promiscuous mode [ 246.562774][ T6888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.572245][ T6888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.581429][ T6888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.590673][ T6888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.614097][ T6890] device veth1_vlan entered promiscuous mode [ 246.622053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.631938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.640445][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.649303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.659007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.671080][ T6894] device veth0_vlan entered promiscuous mode [ 246.705531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.713272][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.732493][ T6894] device veth1_vlan entered promiscuous mode [ 246.775106][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.783351][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.793041][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.802270][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.836464][ T6896] device veth0_vlan entered promiscuous mode [ 246.846272][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.854109][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.866693][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.876498][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.889143][ T6894] device veth0_macvtap entered promiscuous mode [ 246.901696][ T6892] device veth0_macvtap entered promiscuous mode [ 246.934320][ T6890] device veth0_macvtap entered promiscuous mode [ 246.945284][ T7846] Bluetooth: hci0: command 0x0419 tx timeout [ 246.968785][ T6894] device veth1_macvtap entered promiscuous mode [ 246.986934][ T6896] device veth1_vlan entered promiscuous mode [ 246.994118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.004452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.014366][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.023909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.044158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.053925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.068519][ T6892] device veth1_macvtap entered promiscuous mode [ 247.082203][ T6890] device veth1_macvtap entered promiscuous mode [ 247.095679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.104284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.113630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.122117][ T5] Bluetooth: hci1: command 0x0419 tx timeout 20:26:39 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x318, 0x0, 0x1e8, 0x140, 0x1e8, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x11, @local, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @random="0600c4bd00", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @loopback, {[@generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) [ 247.168492][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.186910][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.224544][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.243788][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.257182][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.270571][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.288748][ T8219] x_tables: duplicate underflow at hook 1 [ 247.301626][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.331277][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.342453][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.344809][ T2468] Bluetooth: hci2: command 0x0419 tx timeout [ 247.363784][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.375687][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.388352][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.398605][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.409123][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.419064][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.431888][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.443492][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.452641][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.464064][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.479818][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.490363][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.500755][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.512259][ T2468] Bluetooth: hci3: command 0x0419 tx timeout [ 247.515935][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.528291][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.540126][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.552034][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.574680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 20:26:40 executing program 1: 20:26:40 executing program 0: [ 247.582971][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.603175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.614414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.623993][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:26:40 executing program 1: [ 247.633442][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.643024][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.652958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.675724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 20:26:40 executing program 0: [ 247.699432][ T6894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.716177][ T6894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 20:26:40 executing program 1: [ 247.745781][ T6894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.764607][ T6894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 20:26:40 executing program 0: [ 247.799346][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.824785][ T2468] Bluetooth: hci4: command 0x0419 tx timeout [ 247.833237][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 20:26:40 executing program 1: [ 247.874705][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.895269][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.914745][ T2468] Bluetooth: hci5: command 0x0419 tx timeout [ 247.944608][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.961344][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.986938][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.997407][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.024501][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.034346][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.047910][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.057854][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.068549][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.094606][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.114589][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.136200][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.143613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.162604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.173577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.190600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.217397][ T6892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.227704][ T6892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.240387][ T6892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.252630][ T6892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.276553][ T6890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.285407][ T6890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.294085][ T6890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.310063][ T6890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.335509][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.344068][ T2468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.369225][ T6896] device veth0_macvtap entered promiscuous mode [ 248.383498][ T6896] device veth1_macvtap entered promiscuous mode [ 248.444078][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.455175][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.466424][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.477615][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.487562][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.498585][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.509892][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.520920][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.531855][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.543158][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.555973][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.595344][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.603492][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.636070][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.660695][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.686290][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.711876][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.730177][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 20:26:41 executing program 2: [ 248.766748][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.788078][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.802367][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.814910][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.825873][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.840635][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.852381][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.883313][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.921524][ T8235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.945993][ T8235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.959602][ T6896] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.978394][ T6896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.005367][ T6896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.014113][ T6896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 20:26:41 executing program 3: 20:26:41 executing program 0: 20:26:41 executing program 5: 20:26:41 executing program 1: 20:26:41 executing program 4: 20:26:41 executing program 2: 20:26:41 executing program 0: 20:26:41 executing program 3: 20:26:41 executing program 4: 20:26:41 executing program 1: 20:26:41 executing program 3: 20:26:41 executing program 2: 20:26:41 executing program 0: 20:26:41 executing program 5: 20:26:42 executing program 4: 20:26:42 executing program 3: 20:26:42 executing program 2: 20:26:42 executing program 1: 20:26:42 executing program 0: 20:26:42 executing program 5: 20:26:42 executing program 3: 20:26:42 executing program 4: 20:26:42 executing program 1: 20:26:42 executing program 0: 20:26:42 executing program 2: 20:26:42 executing program 5: 20:26:42 executing program 3: 20:26:42 executing program 4: 20:26:42 executing program 0: 20:26:42 executing program 1: 20:26:42 executing program 2: 20:26:42 executing program 5: 20:26:42 executing program 3: 20:26:42 executing program 0: 20:26:42 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) 20:26:42 executing program 2: 20:26:42 executing program 1: 20:26:42 executing program 5: 20:26:42 executing program 3: 20:26:42 executing program 0: 20:26:42 executing program 2: 20:26:42 executing program 5: 20:26:42 executing program 3: 20:26:42 executing program 2: 20:26:42 executing program 1: 20:26:42 executing program 4: 20:26:42 executing program 2: 20:26:42 executing program 0: 20:26:42 executing program 5: 20:26:42 executing program 3: 20:26:43 executing program 4: 20:26:43 executing program 1: 20:26:43 executing program 0: 20:26:43 executing program 2: 20:26:43 executing program 5: 20:26:43 executing program 3: 20:26:43 executing program 4: 20:26:43 executing program 1: 20:26:43 executing program 2: 20:26:43 executing program 0: 20:26:43 executing program 4: 20:26:43 executing program 3: 20:26:43 executing program 5: 20:26:43 executing program 2: 20:26:43 executing program 4: 20:26:43 executing program 1: 20:26:43 executing program 0: 20:26:43 executing program 5: 20:26:43 executing program 3: 20:26:43 executing program 4: 20:26:43 executing program 2: 20:26:43 executing program 1: 20:26:43 executing program 0: 20:26:43 executing program 5: 20:26:43 executing program 3: 20:26:43 executing program 4: 20:26:43 executing program 2: 20:26:43 executing program 5: 20:26:43 executing program 0: 20:26:43 executing program 1: 20:26:43 executing program 3: 20:26:43 executing program 4: 20:26:43 executing program 0: 20:26:43 executing program 1: 20:26:43 executing program 2: 20:26:43 executing program 5: 20:26:43 executing program 3: 20:26:44 executing program 0: 20:26:44 executing program 4: 20:26:44 executing program 1: 20:26:44 executing program 2: 20:26:44 executing program 5: 20:26:44 executing program 3: 20:26:44 executing program 4: 20:26:44 executing program 0: 20:26:44 executing program 1: 20:26:44 executing program 2: 20:26:44 executing program 5: 20:26:44 executing program 3: 20:26:44 executing program 4: 20:26:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000012c0)={@void, @val, @ipv6=@tcp={0x0, 0x6, "b2d73e", 0x14, 0x2c, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf]}, @mcast2={0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x46) 20:26:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a00000079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@test_dummy_encryption='test_dummy_encryption'}]}) 20:26:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}]}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 20:26:44 executing program 3: 20:26:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000012c0)={@void, @val={0x0, 0x0, 0x2}, @ipv6=@tcp={0x0, 0x6, "b2d73e", 0xf98, 0x2c, 0x0, @dev, @mcast2={0x0}, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}, 0xfca) 20:26:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000fc0)=""/217, 0xd9}, {0x0}, {&(0x7f00000007c0)=""/137, 0x89}, {&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000001500)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000900)=""/175, 0xaf}], 0x7, &(0x7f0000000b40)=""/235, 0xeb}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000c40)=""/219, 0xdb}], 0x1}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000002, 0x7, 0x0, 0xe7}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x3, &(0x7f00000002c0)=[{0x9, 0x0, 0x0, 0x20}, {0x0, 0x5, 0x9, 0x2000008}, {0x0, 0xd4, 0x37, 0x402}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2000c7fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000600)=0xda6, 0x4) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd7e62f23f5d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb11974159cafffffffffffffffe9f1f639e6a18bc7b6c1d0b42bae36740a7169721af852826d7f14b6cae8af86707ff78a1dda993aea5952f43e7e0146a3c035f0113d617244e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d0000b9ab1bfd319f472a9400"/141, 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r3, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 252.063862][ T8375] FAT-fs (loop2): bogus number of reserved sectors [ 252.088388][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.097647][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:26:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a568802a902000000020000000a00000079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) [ 252.104060][ T8375] FAT-fs (loop2): Can't find a valid FAT filesystem [ 252.123636][ T8371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.179451][ T8378] EXT4-fs (loop5): Test dummy encryption mode enabled [ 252.203919][ T8378] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 252.230278][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.239741][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.262619][ T8378] EXT4-fs (loop5): Test dummy encryption mode enabled 20:26:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000a4c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000003480)=[@flowinfo={{0x14}}, @tclass={{0x14}}], 0x30}}], 0x1, 0x0) [ 252.271597][ T8384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.289883][ T8378] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 20:26:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 252.376969][ T8400] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 252.401651][ T8400] EXT4-fs (loop3): Can't read superblock on 2nd try [ 252.423767][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:26:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c00025688"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 252.512319][ T8384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:26:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a0fff000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit', 0x3d, 0xb000000}}]}) [ 252.600456][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.650144][ T8383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:26:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000240)="1f1a43c822bd805fd06364df3f1d263d53b30c9bbb38b634d4a3d29f48d39b8caf86e0615c9df972890b0ac05a15588185") syz_usb_control_io(r0, &(0x7f0000000140)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="00bea203"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20:26:45 executing program 0: r0 = socket(0x18, 0x0, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x23, &(0x7f0000000000), 0x20a154cc) [ 252.746456][ T8429] EXT4-fs (loop3): Invalid commit interval 184549376, must be smaller than 21474836 [ 252.780557][ T7846] usb (null): failed to copy DMA map [ 252.830563][ T8429] EXT4-fs (loop3): Invalid commit interval 184549376, must be smaller than 21474836 20:26:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:26:45 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r2, 0x0, 0x0, 0x200007bf, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 20:26:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) splice(r2, 0x0, r4, 0x0, 0x2000, 0x0) [ 252.953460][ T7846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 253.011819][ T2468] usb (null): failed to copy DMA map [ 253.065287][ C0] hrtimer: interrupt took 57571 ns 20:26:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) splice(r2, 0x0, r4, 0x0, 0x2000, 0x0) [ 253.190371][ T2468] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 253.204775][ T7846] usb 3-1: Using ep0 maxpacket: 8 20:26:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x420000015001}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000012c0)={@void, @val, @ipv6=@tcp={0x0, 0x6, "b2d73e", 0x2, 0x2c, 0x0, @dev, @mcast2={0x0}, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}, 0xfca) [ 253.332838][ T7846] usb 3-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config [ 253.360108][ T7846] usb 3-1: config 86 has 0 interfaces, different from the descriptor's value: 2 20:26:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) splice(r2, 0x0, r4, 0x0, 0x2000, 0x0) [ 253.434658][ T2468] usb 2-1: Using ep0 maxpacket: 16 [ 253.528883][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.554412][ T2468] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 253.562514][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.566815][ T7846] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.604543][ T8463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.617494][ T2468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.649134][ T7846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:26:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000020000000000000060b2d73e0f982c00fe80000000000000020000000000000000020000000000000000000000000001000004001a50a81b06"], 0xfca) [ 253.700422][ T7846] usb 3-1: Product: syz [ 253.709200][ T2468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.732277][ T7846] usb 3-1: Manufacturer: syz [ 253.755216][ T7846] usb 3-1: SerialNumber: syz [ 253.765652][ T2468] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 253.805916][ T7846] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 253.832704][ T2468] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 253.849395][ T2468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.860020][ T2468] usbip-host 2-1: 2-1 is not in match_busid table... skip! 20:26:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 253.927447][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.939158][ T8482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.038424][ T8494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.053638][ T8494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.064826][ T8494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.171522][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.200248][ T8482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.233141][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.248036][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.258312][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:26:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0x0, 0x0, "c09893e1", "e90cc980"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 20:26:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000080)='./file1\x00', 0x143042, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r2, 0x0, 0x8, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x80ffff) [ 255.643568][ T8235] usb 3-1: USB disconnect, device number 2 20:26:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a00000079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@bh='bh'}]}) 20:26:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, 0x0) [ 255.842155][ T7645] usb 2-1: USB disconnect, device number 2 [ 255.885418][ T8531] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 255.924341][ T8235] usb (null): failed to copy DMA map 20:26:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='L', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 20:26:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000012c0)={@void, @val={0x0, 0x0, 0x2}, @ipv6=@tcp={0x0, 0x6, "b2d73e", 0xf98, 0x2b, 0x0, @dev, @mcast2={0x0}, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}, 0xfca) 20:26:48 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0, 0x0) [ 255.946082][ T8534] EXT4-fs (loop1): Ignoring removed bh option [ 255.952377][ T8534] EXT4-fs (loop1): Can't read superblock on 2nd try [ 256.045658][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.049810][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.074040][ T8235] usb 3-1: new high-speed USB device number 3 using dummy_hcd 20:26:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000003b0000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 256.090397][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.102044][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:26:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) vmsplice(r0, &(0x7f00000016c0)=[{&(0x7f00000003c0)="ca", 0x1}], 0x1, 0x0) [ 256.170276][ T8538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:26:48 executing program 1: r0 = memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000000d2000000000001000003003e00000010000000000000000000400000000000000000000000000000000000001000003800020000000000000003"], 0x44) write$P9_RGETATTR(r0, &(0x7f0000000080)={0x25e, 0x19, 0x0, {0x0, {}, 0x4}}, 0x158) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 256.254210][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.285893][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 20:26:48 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x3800000}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}]}]}}]}, 0x478}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 256.325163][ T8235] usb 3-1: Using ep0 maxpacket: 16 [ 256.340299][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.405223][ T8546] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:26:48 executing program 4: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2) [ 256.446986][ T8566] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/3' not defined. [ 256.471129][ T8235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 256.491883][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.518192][ T8235] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 256.551577][ T8235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.598904][ T8235] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 256.626245][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:26:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x141041, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON}], 0x8) 20:26:51 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) 20:26:51 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) dup2(r2, r0) 20:26:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8) sendto$inet(r1, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="00da2d97110d3a9ae3c74d125af57139f8daa5362d9f5136a67d877d32a4d63a721bf2bc14317f177971671cde5a66f39d25fe70e6b491e90286e10ac74c0507a024790e5c6e582a093ca2f752c6626bdc4560ffbaeec9b42525e9977e6967324f166139c15cdb5a9db0501103fe54", 0x6f, 0xc840, 0x0, 0x0) close(r1) 20:26:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='io\x00') preadv(r0, &(0x7f00000017c0), 0x2c2, 0x0, 0x0) 20:26:51 executing program 4: mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x14) [ 258.724459][ T8235] usb 3-1: USB disconnect, device number 3 20:26:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 20:26:51 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') 20:26:51 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)='0', 0x1}], 0x1) 20:26:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f00000001c0)=0x18) 20:26:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='$\x00\x00\x00!\x00\a', 0x7}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:26:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) 20:26:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000001c0)={0x30000009}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x44}}, 0x4000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 20:26:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000010c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{0x0, 0xf0ff7f}, {&(0x7f00000006c0)=""/195, 0xc3}], 0x2}}], 0x2, 0x0, 0x0) 20:26:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1205531, &(0x7f00000001c0)) 20:26:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dced23", 0xc}], 0x0, 0x80ffff) 20:26:52 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) epoll_create1(0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000001c0)={0x30000009}) sendmsg$BATADV_CMD_SET_HARDIF(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 20:26:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@private2}) socket$inet6_tcp(0xa, 0x1, 0x0) [ 260.054626][ T8674] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 20:26:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x51027, 0x0, 0x0, 0x0, 0x34}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x3c, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20100, 0x0) flock(r2, 0x1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xa000, 0x0) r4 = getuid() read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETATTR(r3, &(0x7f0000002200)={0xa0, 0x19, 0xc02c, {0x10, {0x4, 0x2, 0x3}, 0x0, r4, r5, 0xffffffffffffff01, 0x0, 0x2, 0x5, 0x260e2e2, 0x20, 0x9, 0x3, 0x1f, 0x10001, 0x0, 0x9, 0xa7a, 0x7, 0x9}}, 0xa0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xffffff91}, 0x1c) [ 260.162801][ T8674] BFS-fs: bfs_fill_super(): Last block not available on loop0: 1177325 20:26:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 20:26:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x0, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'erspan0\x00', {0xfffffeff}, 0xfff8}) 20:26:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/25) 20:26:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @local, 0x80000000}, 0x1c) 20:26:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x0, 0x148, 0x128, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x20000003, 0x7}}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) socket(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000400)={0x184, 0x14, 0x100, 0x70bd2a, 0x25dfdbfc, {0x5, 0xf7}, [@INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "32023c4e49500327f141778aabab3de231fd595510dade5d1151b3a1c138a34068554a6ca070072c2926ec05f44a774364a12fd6841c9c36fd4e54209b1fe57eb4cebc58024b668231f16cda0d46ce65dfea207eb64b012c7b1d889a5380f2a2b4c66a5870b5a4738370f7729aac950fda53b24ce39e917b3502c84f8886e69c496aafd065c2a8b5edd6311f689d6f90b494ef6342d7b3589600a633d1b20b17b47afac5d2d2c0c8afd692dc1d9bb0d1d77fe9ce348e43638508c4a4574037f43b"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "ef343f8deab389752e0fff7b93e8acc0f373dd3b3e40af4d67b40c6b6f05c8a081af99"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "52e96251c8d6161b9c4bbeab358441cc390f69"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "b7fc6f72f5510a8578683c4dc2ce27365fd169ec4a8e3e3ef57ddb019fdba221bd058fba3a6f3f2f93c058d7"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "8a004aedc60700410b713e99aa21bb7649dbeddcb019446d5ddaf63efc165aed77529ad6e6c9d04bc7637fd9"}]}, 0x184}, 0x1, 0x0, 0x0, 0x48880}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 20:26:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'erspan0\x00', {0xfffffeff}, 0xfff8}) 20:26:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, r0, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:26:53 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d9008) 20:26:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x7, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) 20:26:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, r0, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:26:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xeb, 0x3, 0x0, 0x3, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="18207eb01c1f22fc25d8483a9cf7666b16105dff0c9a0a0cf057409907a75667fce33a18a17a3650f9d4", @ANYRES16, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="02002abd7000ffffffff060000000800020027d916b14e0e13555102e358f95aa5cf14ae1bed6401c97194e8f6827a36f4468d98929495d5daeb5e4cf96ea18e2daf77a0831139f86f025c6d42f17565424e66f20bee2eae44ee49fc159400536859afaae80d24d7b6c396953ce1a4d9b718693e10109c18d126f4e73cf5c5273eed0be76f42399b6484fe5638d9fbf93b9ba01723f441449082853a9c16a9c8962492b443ee1b9128c5cff43cb1d5c0f3"], 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000280)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x2bcf) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="008000800000000000000020481f002000640000a9299078ac1e0001ac1414bb440cc643e0000001ffff8001"]}) 20:26:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280)=0x8, 0x100) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xc02) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)=0x40000000000000) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000240)=0x2, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) fsmount(0xffffffffffffffff, 0x0, 0x8) 20:26:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x7, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'erspan0\x00', {0xfffffeff}, 0xfff8}) 20:26:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'erspan0\x00', {0xfffffeff}, 0xfff8}) 20:26:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f959, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x490100) semget$private(0x0, 0x20000000102, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x174, 0x13, 0x100, 0x70bd26, 0x0, {0x1e, 0xb4, 0x9, 0xc0, {0x4e20, 0x0, [0x5, 0xd902, 0xfffffffe, 0x5], [0x0, 0x7, 0x53, 0x7fffffff], 0x0, [0x5, 0x5]}, 0x80000000, 0x100}, [@INET_DIAG_REQ_BYTECODE={0xef, 0x1, "03ebbe60738c1558a58eba3be04eaf5202cd351b04176283dbd9d17c7682d2e4adf032cfae170324f2bd45584e6fcd2ffff225b916d5adb75f26b36054119bb10aff50b4fd60448c8bca26964bed5795b2d72501dc0cf0ec8bf472a5d71f0eb062aff4f8cff6f64c54125b3263f9b3853f2333ea686b83bca9bf79d0943f027048625d936f12719d189b31ba52eb06a732c3baca8976c1e1637b3e2443b4e7da75e4596bb25e28d89a747592b2a6f811b6742c8ae00caa0f60d27c996fbe6d6c99bad00a0281a0c79195d61403ca86b59e3635f866fadac65fbf2f3dc703b9304a94b4e7a982133534ac48"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "a2d30e9eec976bed0073e66b2b2709470f9bcf9494fd81d2869432e0f7fe0af896f591c7723c26da9cd37233115b220c5767"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x84, 0x1, 0x1, 0x201, 0x300, 0x0, {}, [@CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0x84}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x490) clock_gettime(0x0, 0x0) 20:26:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') sendfile(r0, r1, 0x0, 0x1000) 20:26:54 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, r0, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "215f3ce6304d2f1b91f384d850cd35aeabb3aaa3"}}]}]}, 0x54}}, 0x0) 20:26:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xeb, 0x3, 0x0, 0x3, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="18207eb01c1f22fc25d8483a9cf7666b16105dff0c9a0a0cf057409907a75667fce33a18a17a3650f9d4", @ANYRES16, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="02002abd7000ffffffff060000000800020027d916b14e0e13555102e358f95aa5cf14ae1bed6401c97194e8f6827a36f4468d98929495d5daeb5e4cf96ea18e2daf77a0831139f86f025c6d42f17565424e66f20bee2eae44ee49fc159400536859afaae80d24d7b6c396953ce1a4d9b718693e10109c18d126f4e73cf5c5273eed0be76f42399b6484fe5638d9fbf93b9ba01723f441449082853a9c16a9c8962492b443ee1b9128c5cff43cb1d5c0f3"], 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000280)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x2bcf) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="008000800000000000000020481f002000640000a9299078ac1e0001ac1414bb440cc643e0000001ffff8001"]}) 20:26:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'erspan0\x00', {0xfffffeff}, 0xfff8}) 20:26:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1027a00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) sendfile(r3, r4, 0x0, 0x1000) fallocate(r0, 0x100000003, 0x0, 0x8001) 20:26:55 executing program 2: 20:26:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') sendfile(r0, r1, 0x0, 0x1000) 20:26:55 executing program 4: 20:26:55 executing program 4: 20:26:55 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000000c0)=""/181, &(0x7f0000000040)=0xb5) openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) [ 263.187067][ T29] audit: type=1800 audit(1599337615.638:2): pid=8778 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15843 res=0 errno=0 20:26:55 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000000c0)=""/181, &(0x7f0000000040)=0xb5) [ 263.265489][ T29] audit: type=1800 audit(1599337615.708:3): pid=8783 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15825 res=0 errno=0 20:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_names\x00') ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x0, 0x27}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x600, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 20:26:55 executing program 1: 20:26:55 executing program 0: 20:26:55 executing program 4: [ 263.551729][ T8794] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 20:26:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'erspan0\x00', {0xfffffeff}, 0xfff8}) 20:26:56 executing program 2: 20:26:56 executing program 1: 20:26:56 executing program 4: 20:26:56 executing program 0: [ 263.836813][ T8797] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 20:26:56 executing program 0: 20:26:56 executing program 2: 20:26:56 executing program 4: 20:26:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_names\x00') ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x0, 0x27}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x600, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 20:26:56 executing program 1: 20:26:56 executing program 4: 20:26:56 executing program 0: [ 264.159448][ T8823] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 20:26:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) 20:26:57 executing program 2: 20:26:57 executing program 1: 20:26:57 executing program 4: 20:26:57 executing program 0: 20:26:57 executing program 5: 20:26:57 executing program 2: 20:26:57 executing program 1: 20:26:57 executing program 4: 20:26:57 executing program 0: 20:26:57 executing program 2: 20:26:57 executing program 5: 20:26:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0xc38}], 0x1) 20:26:57 executing program 4: 20:26:57 executing program 0: 20:26:57 executing program 1: 20:26:57 executing program 2: 20:26:57 executing program 5: 20:26:57 executing program 5: 20:26:57 executing program 4: 20:26:57 executing program 1: 20:26:57 executing program 2: 20:26:57 executing program 0: 20:26:57 executing program 0: 20:26:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) 20:26:58 executing program 5: 20:26:58 executing program 4: 20:26:58 executing program 2: 20:26:58 executing program 1: 20:26:58 executing program 0: 20:26:58 executing program 0: 20:26:58 executing program 2: 20:26:58 executing program 1: 20:26:58 executing program 4: 20:26:58 executing program 5: 20:26:58 executing program 5: 20:26:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x2001, {0x20, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x400, 0x0, 0x0, 0x7, 0x3, 0x890, 0x6, 0x0, 0xd7fe, 0xfffffffffffffffa, 0x0, 0x1b, 0xfffffffffffff5b4, 0x3}}, 0xa0) 20:26:58 executing program 0: 20:26:58 executing program 2: 20:26:58 executing program 4: 20:26:58 executing program 1: 20:26:58 executing program 5: 20:26:58 executing program 2: 20:26:58 executing program 4: 20:26:58 executing program 1: 20:26:58 executing program 0: 20:26:58 executing program 5: 20:26:58 executing program 4: 20:26:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) 20:26:59 executing program 1: 20:26:59 executing program 2: 20:26:59 executing program 5: 20:26:59 executing program 0: 20:26:59 executing program 4: 20:26:59 executing program 5: 20:26:59 executing program 1: 20:26:59 executing program 2: 20:26:59 executing program 4: 20:26:59 executing program 0: 20:26:59 executing program 4: 20:26:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) 20:26:59 executing program 2: 20:26:59 executing program 5: 20:26:59 executing program 1: 20:26:59 executing program 0: 20:26:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() get_robust_list(r2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) 20:26:59 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000000c0)='./file0\x00') rename(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file1\x00') 20:26:59 executing program 1: 20:26:59 executing program 4: 20:26:59 executing program 5: 20:26:59 executing program 0: 20:26:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022", 0x45}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x1f, r0, 0x0, 0x0) 20:27:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x220080, 0x0) 20:27:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9a96851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b220d17843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e01000000000000000d8fe5d67450f4e38f91d2457b1f", 0x8b}, {&(0x7f0000001780)="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", 0x17e}], 0x2) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 20:27:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) dup(0xffffffffffffffff) pipe(&(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="00d760e9", @ANYRES16=r1, @ANYBLOB="000229bd7000fbdbdf250c0000c0700008000400000000005c0001800c0007002800000000d553fecb5f81b20e57434545c8e02f000000060002003a00000008000800040000000800080001fcffff060004004e22000008000b007369700008000500040000000a0006006c626c6372000000060004004e22000008000b0073697000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x63365fd52eed70d1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="7993dcee207aac447c6fed9d13a113cc94ad1e9baa40e5368ee689918fa51d575d44730826b0b973", 0x28}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="a0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)='>', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000240)="09a489f1d567881b61ad72a0c66eed8c62de5359fc11c396bafb629581a0ff10ec00dc619f13d0e862b6aea7931fd5783e5565f8903c09d1211cfc2f59c4a40e41fa30a1029f385276d96de301ad4643f5816879c5af8fe8362f2ea5dba2d90533166df61c5affbf9a68ce9c392d3ffe2d333d9932d7ab7a3461ffd070484ae4ffb96e4017e4b9c4086267989e1af7000800000000000000426037397f3ba4dca5d5539d71d6a5c28d5c5baa966988841474", 0xc0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000080)="ae", 0x1}], 0x1}}], 0x5ad, 0x40048c0) 20:27:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 20:27:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100), 0x4) [ 267.793702][ T8951] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:27:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000440)={0x0, 'syzkaller0\x00', {}, 0x8}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 20:27:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 20:27:00 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) munlockall() timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:27:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb016", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) socket$inet6(0xa, 0x2, 0x0) getpid() dup(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 268.006218][ T8963] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 20:27:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:00 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000044, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="1b6a03927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec6626", 0x8204, 0x20c49a, 0x0, 0x27) 20:27:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0) 20:27:03 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c2f6b9", 0x8, 0x11, 0x0, @private1, @mcast1, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 20:27:03 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000140)="7f49b6b64c6de85c374703cfda6e", 0xe}, {&(0x7f00000003c0)='I', 0x1}, {&(0x7f00000004c0)="2614434e0836bd288024650a9f9ef6676b0d68", 0x13}], 0x3) 20:27:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb0169d21", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='D', @ANYRES16=0x0, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 20:27:03 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xe58\xb9C;`\xb6p\x98\xcf\x1dT\b$$+\x10\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18180b, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x208602, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r3, 0x100) sendfile(r1, r1, 0x0, 0x7fffffff) 20:27:03 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 20:27:03 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x204) 20:27:03 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000dfffffffffffffff00000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000380300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000010000000000000000000000056657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000500280020007000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000010000027465616d5f736c6176655f310008000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000004b00000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000004c1f000000003000434f4e4e4d41524b000000000000000000000000000000000000000000010000000000000000000000000000000000ff010000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000a800d00000000000000000000000000000000030e93452780239f6002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000001c0000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x158, 0x2b8, 0x0, 0x158, 0xff000000, 0x260, 0x3a8, 0x3a8, 0x260, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x0, 0x4}, {0xffffffffffffffff, 0x6, 0x2}, 0x4, 0xfffff801}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) [ 270.985812][ T9024] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 20:27:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb016", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) socket$inet6(0xa, 0x2, 0x0) getpid() dup(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 20:27:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2e2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000044, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="1b6a03927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec6626", 0x8204, 0x20c49a, 0x0, 0x27) 20:27:03 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "520001", 0x30, 0x2c, 0x0, @local, @mcast2, {[@hopopts], @ndisc_redir={0x89, 0x0, 0x0, [], @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local}}}}}}, 0x0) 20:27:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) 20:27:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000b06010202000000000000000000000005000100060000000900020073797a30000000003c000780"], 0x64}}, 0x0) 20:27:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$phonet(0x23, 0x2, 0x1) 20:27:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9a96851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b220d17843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e01000000000000000d8fe5d67450f4e38f91d2457b1f", 0x8b}, {&(0x7f0000001780)="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", 0x246}], 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 20:27:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 20:27:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x8}}}, {{@arp={@multicast1, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'macvtap0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0x8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) 20:27:06 executing program 0: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x5244656e7a71e4b2) 20:27:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$phonet(0x23, 0x2, 0x1) 20:27:06 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 20:27:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$phonet(0x23, 0x2, 0x1) 20:27:06 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x68022980, 0x0, 0x0, 0x0, 0x0) 20:27:06 executing program 1: syz_emit_ethernet(0x68, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "641110", 0x32, 0x3a, 0x0, @private1, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "000002", 0x0, 0x0, 0x0, @private0, @loopback, [], "050c"}}}}}}}, 0x0) 20:27:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getpeername(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) 20:27:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb016", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) socket$inet6(0xa, 0x2, 0x0) getpid() dup(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 274.293745][ T9090] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:27:06 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x401870cc, 0x0) 20:27:06 executing program 1: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x8}, &(0x7f0000000180), 0x0) [ 274.337492][ T9087] IPVS: ftp: loaded support on port[0] = 21 20:27:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x127d, 0x0) 20:27:06 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x88, 0x1, 0x0, 0x0) 20:27:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 20:27:07 executing program 2: r0 = socket(0x2, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x0) recvmsg$can_raw(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1}, 0x0) 20:27:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb016", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) socket$inet6(0xa, 0x2, 0x0) getpid() dup(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 20:27:09 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0x4122, 0x0) 20:27:09 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x20, 0x101) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000100)) 20:27:09 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8"}}, 0x119) 20:27:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r1 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x18d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth1_to_team\x00', 0x400}) setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000380)="3fba73049ba43513d2f7ffa3e54e0cacb63b7e3f10f3cfcf80116a40d1b1b54ab17af3d8e7ed742ac3293ffe858a788d6bad64e8780994d0f0a28bda8d0051e7c048259ee97045af67002a69c5b776097195708258fcd9659366474214a8d80db261233c4cd5deb4cf7868e563a49865e4386e3ca182ebe79998a75bec35e9f40832724c01cff30d", 0x88) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000000000d90100000008000800ac1e000106000a2300001f0bcbd6a1dd9cc850c8ac897aecf1204c35fb438c70b2a32d1c2bb462c2b9266ce653f392d10120942fe8961245971cd2ce739af438994fe44ceba5876e082f7be92f33092ce8b140a8529c86592178701be91be3d42bc92ab19796e49ab23165012f54fb3a9cf4bcfd844e2b7482b52ec99528405cc4bd3c04da06ccd9e7389ed2a9d150f47487fc5129eb19053fd85effa607b066222759e866be0c2ea6c0926c50588b8a13686cae7a2b5dc80cc5ff3447d2f18fa9f7a31180077d298eaf50f0d9fe9626eef5b1e95fab2be45bb6c98e063700feb862211d6a3641b709ea0d11100a2a94fcbd1f9d4f2c535d92a9d9904b49a23aed6bd7ca713187199ccc3a56c3af082a590034db2f783f00bd45bca0082610a7cc1187c9ec04eeb78ed2756527c2f8485952c5dd7b6f8cbb8d2e80f5110333b1414299cd7e247874c6bf1af89e866f8dd51345bba8f350568dced538d81f69e92961833676ddeaee3693ac3177160254962cff9a8c9ca8604dddf5c0490d40480e83bae64cb52c7b8a0663cc97a5df"], 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000200)={'team0\x00', r4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r4, 0x29, 0x7, 0x6, 0x1, 0x8, @private0={0xfc, 0x0, [], 0x1}, @empty, 0x8000, 0x1, 0x6, 0x3d}}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f00000002c0)={0x6, 0xfff, 0x1, 0x7, 0x6, 0x16, 0x19, "54fd7051d8c5ac5c9a5093e7e02889716fe19226", "9ea0de30f047007e0d695023cfa70d9ba7070e54"}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) 20:27:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:09 executing program 4: syz_mount_image$cifs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000fc0)=@nullb='/dev/nullb0\x00', &(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, 0x0) 20:27:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') read$snddsp(r0, &(0x7f0000000200)=""/243, 0xf3) read$alg(r0, 0x0, 0x0) [ 277.432727][ T7645] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 20:27:10 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x12210055) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) recvfrom$llc(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:27:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) [ 277.594226][ T9176] (syz-executor.4,9176,0):ocfs2_fill_super:1003 ERROR: superblock probe failed! 20:27:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000000200)=""/184, 0xb8) [ 277.644251][ T9176] (syz-executor.4,9176,1):ocfs2_fill_super:1190 ERROR: status = -22 20:27:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 20:27:12 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 20:27:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:12 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') 20:27:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x400448cb, 0xfffffffffffffffe) 20:27:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000180)) 20:27:13 executing program 0: syz_emit_ethernet(0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="e3ab04002f0016f93d3cd3fe86dd6076605100163a0000000000000000000000000000000000ff02"], 0x0) 20:27:13 executing program 1: syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1f, 0x64201) 20:27:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000014c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000001440)=[{&(0x7f00000001c0)="8f", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18"], 0x18}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x18, &(0x7f0000000000)={r2}, 0x8) 20:27:13 executing program 4: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000140)={'bridge0\x00', @ifru_map}) 20:27:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:13 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 20:27:13 executing program 5: 20:27:13 executing program 4: 20:27:13 executing program 1: 20:27:13 executing program 0: 20:27:13 executing program 5: 20:27:13 executing program 4: 20:27:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:13 executing program 1: 20:27:14 executing program 2: 20:27:14 executing program 4: 20:27:14 executing program 0: 20:27:14 executing program 5: 20:27:14 executing program 1: 20:27:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:14 executing program 4: 20:27:14 executing program 5: 20:27:14 executing program 1: 20:27:14 executing program 2: 20:27:14 executing program 0: 20:27:14 executing program 4: 20:27:14 executing program 5: 20:27:14 executing program 1: 20:27:14 executing program 2: 20:27:14 executing program 0: 20:27:14 executing program 4: 20:27:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:14 executing program 1: 20:27:14 executing program 5: 20:27:14 executing program 2: 20:27:14 executing program 0: 20:27:14 executing program 4: 20:27:14 executing program 0: 20:27:14 executing program 5: 20:27:14 executing program 4: 20:27:14 executing program 1: 20:27:14 executing program 2: 20:27:14 executing program 0: 20:27:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:15 executing program 5: 20:27:15 executing program 1: 20:27:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1279, 0xffffffffffffffff) 20:27:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010ae67, &(0x7f0000000240)) 20:27:15 executing program 0: 20:27:15 executing program 1: 20:27:15 executing program 5: [ 282.671823][ T9307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 20:27:15 executing program 0: 20:27:15 executing program 2: r0 = socket(0x28, 0x1, 0x0) connect$bt_sco(r0, 0x0, 0x0) 20:27:15 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000080)) 20:27:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x400000f5}]}) 20:27:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32, 0x100000}, 0x9c) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) ioprio_set$uid(0x2, 0x0, 0x2004) 20:27:15 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x800013, 0x0, 0xa8c1}}) 20:27:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x29, 0x0, 0x4f) 20:27:15 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x6a040, 0x0) dup3(r0, r1, 0x0) 20:27:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x90000, 0x0) 20:27:15 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x10) 20:27:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000006b, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x4004550d, 0x0) 20:27:15 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x410800, 0x0) 20:27:15 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000080)={'xfrm0\x00', @ifru_flags}) 20:27:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="f5d0d90273bd0c151f8195150624861c", 0x10) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 20:27:15 executing program 0: r0 = socket(0x2, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 20:27:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:16 executing program 5: r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 20:27:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x10, &(0x7f0000000180)={0x0, 0x4, "9188c6ef"}, &(0x7f0000000040)=0xc) 20:27:16 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0) 20:27:16 executing program 1: mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:27:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x2}}}}) 20:27:16 executing program 1: r0 = socket(0x2, 0x6, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:27:16 executing program 2: r0 = socket(0x15, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x114, 0x3, 0x0, 0x4) 20:27:16 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x400000, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000240)={0x37, 0x3, 0x0, {0x0, 0xffffff19, 0x0, '/\x0f\xa3\x1bse\xad\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x98m\x82Uk\x00\x00!x\xdejT|\xcf'}}, 0x37) 20:27:16 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) fanotify_mark(r0, 0x12, 0x2, 0xffffffffffffffff, 0x0) 20:27:16 executing program 4: prctl$PR_GET_NO_NEW_PRIVS(0x39) 20:27:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:27:16 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf6c0024eff6ce4bc}) 20:27:16 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x5411, &(0x7f0000000080)) 20:27:16 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:16 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x9, 0x0, 0x0, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000540), 0x1}, 0x0, 0x9, 0x1, 0x0, 0x7e84, 0x3, 0x101}, 0xffffffffffffffff, 0x0, r0, 0x9) setsockopt$ax25_int(r1, 0x101, 0x0, 0x0, 0x0) [ 284.361394][ T9407] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 20:27:16 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) 20:27:16 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:16 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x80108906, 0x0) 20:27:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f0000000100)=0x40004, 0x4) 20:27:16 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) mq_notify(r0, 0x0) [ 284.494400][ T29] audit: type=1326 audit(1599337636.951:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:27:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0xc885) 20:27:17 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x40000) 20:27:17 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) [ 285.163977][ T29] audit: type=1326 audit(1599337637.621:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:27:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) clock_gettime(0x1, &(0x7f0000000240)) 20:27:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r0, r1, 0x0) 20:27:17 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f00000000c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=@deltaction={0xd8, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0xfffffffffffffeae, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xd8}}, 0x0) 20:27:17 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x80044dfd, 0x0) 20:27:17 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:17 executing program 0: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004780)={0x77359400}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xd0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @multicast2}, @dev, [], [0xffffffff], 'lo\x00', 'macvlan0\x00', {}, {0xff}, 0x89, 0x0, 0x1, 0x35}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev, @private2, [], [0xff000000], 'team_slave_0\x00', 'lo\x00', {0xff}, {}, 0x66, 0x33, 0x0, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3000}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 285.293045][ T9446] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. [ 285.326166][ T9449] x_tables: duplicate underflow at hook 2 20:27:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4068aea3, &(0x7f0000000240)) 20:27:17 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x80044dff, 0x0) 20:27:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4004af07, &(0x7f0000000000)) 20:27:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x84, 0x0, 0x0, 0x0) 20:27:17 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0xcd}]}) 20:27:18 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') read$snddsp(r0, &(0x7f0000000200)=""/243, 0xf3) 20:27:18 executing program 1: r0 = socket(0x18, 0x80000, 0x1) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) socket(0x2, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}) 20:27:18 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_dccp_buf(r0, 0x29, 0x11, 0x0, 0x300) 20:27:18 executing program 0: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001a00a901"], 0x48}}, 0x0) 20:27:18 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:18 executing program 2: setresuid(0x0, 0xee00, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 20:27:18 executing program 5: r0 = socket(0xa, 0x3, 0x3) setsockopt$MISDN_TIME_STAMP(r0, 0x29, 0x19, 0x0, 0x0) 20:27:18 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x29, 0x0, 0x0) 20:27:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_dccp_buf(r0, 0x29, 0x16, 0x0, 0x300) 20:27:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002fc0)={'syztnl2\x00', 0x0}) 20:27:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) syz_open_dev$vcsa(0x0, 0x0, 0x0) 20:27:18 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:18 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='auxv\x00') read$snddsp(r0, &(0x7f0000000200)=""/243, 0xf3) 20:27:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0xb, &(0x7f0000000100), 0x4) 20:27:18 executing program 4: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0) 20:27:18 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SIOCPNENABLEPIPE(r1, 0x5460, 0x0) 20:27:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x400002, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x401002]}) 20:27:18 executing program 0: setresuid(0xee00, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:27:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket(0x2, 0x5, 0x0) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) 20:27:18 executing program 5: r0 = socket(0x2, 0x3, 0x4) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40002102) 20:27:18 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:18 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af20, &(0x7f0000000000)={0x0, r0}) 20:27:18 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x8982, &(0x7f0000000080)) 20:27:18 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x9b, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) 20:27:18 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:18 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89f4, &(0x7f0000000000)={'sit0\x00'}) 20:27:18 executing program 1: r0 = socket(0x2, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80040, 0x0) dup3(r0, r1, 0x0) 20:27:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4004af61, &(0x7f0000000000)) 20:27:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xb, &(0x7f0000000180)={0x0}}, 0x0) 20:27:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x88, 0x1, 0x0, &(0x7f0000000140)) 20:27:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000051) 20:27:19 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x80044dff, 0x0) 20:27:19 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:19 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000180)) 20:27:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8980, 0x0) 20:27:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 20:27:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) 20:27:19 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x40046629, 0x0) 20:27:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x8b}]}) 20:27:19 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5460, 0x0) 20:27:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8901, &(0x7f0000000040)={0x72, @tipc=@id, @sco={0x1f, @none}, @rc={0x1f, @none}}) 20:27:19 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:19 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0189436, &(0x7f0000000080)) 20:27:19 executing program 4: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, 0x0) 20:27:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x16, 0x0, 0x0) 20:27:19 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)) 20:27:19 executing program 0: select(0xffffffce, &(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0) 20:27:19 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x545d, 0x0) 20:27:19 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:19 executing program 5: r0 = socket(0x1, 0x5, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000400)) [ 287.192132][ T29] audit: type=1326 audit(1599337639.651:6): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9595 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:27:19 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 20:27:19 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:19 executing program 2: getsockname(0xffffffffffffffff, 0x0, 0x0) 20:27:19 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004780)={0x77359400}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001a00a901"], 0x48}}, 0x0) recvmmsg(r1, &(0x7f0000022900)=[{{0x0, 0x0, &(0x7f000001e800)=[{&(0x7f000001d700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 287.935489][ T29] audit: type=1326 audit(1599337640.391:7): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9595 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:27:20 executing program 1: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x5, 0x0, 0x0) 20:27:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0xce}]}) 20:27:20 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:20 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 20:27:20 executing program 2: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001240)=""/198, 0xc6}], 0x1}, 0x0) 20:27:20 executing program 4: r0 = socket(0x21, 0x2, 0x2) setsockopt$inet_dccp_int(r0, 0x110, 0x4, 0x0, 0x0) 20:27:20 executing program 0: r0 = socket(0x2, 0x6, 0x0) connect$caif(r0, &(0x7f0000000100)=@util={0x25, "a52490676dd483633cc5031648606ec7"}, 0x18) 20:27:20 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:20 executing program 4: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet_dccp_int(r0, 0x107, 0xc, 0x0, 0x4) 20:27:20 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000031c0)={0x0}}, 0x0) 20:27:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0xc0045878, 0x0) 20:27:20 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x9}, 0x0, 0x0) 20:27:20 executing program 0: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000001c0)='\f', 0x1) 20:27:20 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x577003) 20:27:20 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20:27:20 executing program 5: r0 = socket(0x25, 0x5, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:27:20 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0x4020940d, 0x0) 20:27:20 executing program 4: r0 = socket(0x28, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x28, 0x16, 0x0, 0x0) 20:27:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0x571}]}) 20:27:21 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:21 executing program 1: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, 0x0, 0x0) 20:27:21 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$ax25(r0, 0x0, 0x0) 20:27:21 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x541b, 0x0) 20:27:21 executing program 4: r0 = socket(0x11, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000840)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xd}}}, 0x24}}, 0x0) 20:27:21 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0xc020660b, 0x0) 20:27:21 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 20:27:21 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:21 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10fcc1, 0x0) write$UHID_CREATE2(r0, 0x0, 0x80000) 20:27:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000006b, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001280)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:27:21 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 20:27:21 executing program 2: renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 20:27:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote}], 0xf) 20:27:21 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:22 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 20:27:22 executing program 5: r0 = fsopen(&(0x7f0000000100)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='!---#\x00', &(0x7f0000000240)='\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:27:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', 0x0}) 20:27:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x11, 0x0, 0x80ffff}]}) 20:27:22 executing program 4: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x46, 0x0, 0x0) 20:27:22 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:22 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) [ 289.686122][ T9737] autofs4:pid:9737:autofs_fill_super: called with bogus options 20:27:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af13, &(0x7f0000000000)) 20:27:22 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, 0x0) [ 289.769133][ T9743] autofs4:pid:9743:autofs_fill_super: called with bogus options 20:27:22 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@id, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)='U', 0x200001c1}], 0x1}, 0x0) 20:27:22 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 20:27:22 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:22 executing program 2: capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)) socket$vsock_stream(0x2c, 0x1, 0x0) 20:27:22 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) 20:27:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000d940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="fd030000000000ce000006"], 0x1c}}, 0x0) 20:27:22 executing program 1: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 20:27:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') ioctl$LOOP_SET_FD(r0, 0x1267, r1) 20:27:22 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:22 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000003c0)) 20:27:22 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_dccp_int(r0, 0x6, 0xd, 0x0, 0x4) 20:27:22 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000040)={0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 20:27:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x18d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth1_to_team\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x6}, 0x2e, &(0x7f00000000c0)={0x0}}, 0x0) 20:27:22 executing program 0: r0 = getpgid(0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:27:22 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="ffff000000000000000005000000640006"], 0x78}}, 0x0) 20:27:22 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1a, 0x0, 0x0) 20:27:22 executing program 0: getpgrp(0x0) waitid(0x0, 0x0, 0x0, 0x2000000a, 0x0) 20:27:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 20:27:22 executing program 4: io_uring_setup(0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xa1) 20:27:22 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x2, 0x0) [ 290.455471][ T9798] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 20:27:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000012c0)) [ 290.515109][ T9803] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 20:27:23 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 20:27:23 executing program 0: bpf$MAP_CREATE(0x21, 0x0, 0x0) 20:27:23 executing program 4: r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0)) 20:27:23 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x5404, &(0x7f0000000180)) 20:27:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0x400000f5}]}) 20:27:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0}}) 20:27:23 executing program 0: r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x4d, 0x0, &(0x7f0000000080)) 20:27:23 executing program 4: r0 = io_uring_setup(0x7, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x8000000) 20:27:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x541b, 0xffffffffffffffff) 20:27:23 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x44480, 0x0) 20:27:23 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x13, 0x0, 0x0) 20:27:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 20:27:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') ioctl$LOOP_SET_FD(r0, 0x125e, r1) 20:27:23 executing program 1: r0 = socket(0xa, 0x3, 0x3) setsockopt$MISDN_TIME_STAMP(r0, 0x29, 0x6, 0x0, 0xfff1) 20:27:23 executing program 4: accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:27:23 executing program 0: r0 = socket(0x2, 0xa, 0x0) bind$isdn(r0, 0x0, 0x0) 20:27:23 executing program 5: r0 = epoll_create1(0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 20:27:23 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) read$rfkill(r0, 0x0, 0x0) 20:27:23 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140), 0x0) 20:27:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x20, 0x1405, 0x983c43b0f5b8665f, 0x0, 0x0, "", [{{0x8}, {0x4, 0x10}}]}, 0x20}}, 0x0) 20:27:23 executing program 1: prctl$PR_GET_NO_NEW_PRIVS(0x3) 20:27:23 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) 20:27:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x11, r1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x5d, 0x0) 20:27:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SIOCPNENABLEPIPE(r1, 0x40305829, 0x0) [ 291.327303][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 20:27:23 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, 0x0) 20:27:23 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x8914, &(0x7f0000000080)) 20:27:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x8ff}]}) 20:27:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, &(0x7f0000000040)={'gre0\x00', 0x0}) 20:27:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 20:27:24 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f000000a880)={0x0, 0x0, &(0x7f000000a740)=[{&(0x7f000000a4c0)=""/125, 0x7d}], 0x1}, 0x0) 20:27:24 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendto$l2tp6(r0, &(0x7f0000000100)="86", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x0, 0x0, @remote}, 0x20) 20:27:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x400000b7, 0x0, 0x80ffff}]}) 20:27:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x400454ca, &(0x7f00000000c0)) 20:27:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x800800000000) 20:27:24 executing program 0: r0 = socket(0x15, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) 20:27:24 executing program 5: syz_mount_image$jfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.apparmor\x00') 20:27:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0x4008af25, 0x400000) 20:27:24 executing program 4: r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_buf(r0, 0x3a, 0x0, 0x0, 0x0) 20:27:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) 20:27:24 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet_dccp_int(r0, 0x107, 0x9, 0x0, 0x4) 20:27:24 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x8000042, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x88, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x88, 0x0, 0x0) 20:27:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_dccp_buf(r0, 0x29, 0x38, 0x0, 0x0) 20:27:24 executing program 2: r0 = socket(0x1e, 0x5, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) 20:27:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x88, 0x0, 0x0, &(0x7f0000000140)) 20:27:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0xc0185879, 0x0) 20:27:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_dccp_buf(r0, 0x29, 0x4e, 0x0, 0x0) 20:27:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', @ifru_ivalue}) 20:27:24 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x16, 0x0, 0x3) 20:27:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x17, 0x0, 0x0) 20:27:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x1e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) 20:27:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0x11e}]}) 20:27:24 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x0, 0x2002) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11813, r0, 0x8000000) 20:27:24 executing program 5: r0 = socket(0xa, 0x3, 0x3) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x890b, &(0x7f0000000000)) 20:27:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x3a) 20:27:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x22}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:27:24 executing program 1: prctl$PR_GET_NO_NEW_PRIVS(0x8) 20:27:25 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10fcc1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) write$UHID_CREATE2(r0, 0x0, 0x49) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) 20:27:25 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socket$nl_generic(0x10, 0x3, 0x10) accept$inet6(r0, 0x0, 0x0) 20:27:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x18d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth1_to_team\x00'}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x6}, 0x2e, &(0x7f00000000c0)={0x0}}, 0x6800) 20:27:25 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082404009e40000108030109023f000101000000090400000342ba0100052406000005240000000d240f010000000000000000000424130009058202f7000000000905030234"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000340), 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6, 0xd, 0x400000, 0x3) 20:27:25 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) [ 292.879600][ T8235] usb (null): failed to copy DMA map [ 293.029462][ T8235] usb 3-1: new high-speed USB device number 4 using dummy_hcd 20:27:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x5421, 0xffffffffffffffff) 20:27:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) 20:27:25 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreq(r0, 0x0, 0xa, 0x0, &(0x7f0000000180)) 20:27:25 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={0x0}}, 0x24008844) 20:27:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000140)={'filter\x00', 0x1001, 0x4, 0x418, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @broadcast, @loopback, 0xf}}}, {{@arp={@local, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'syzkaller0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast2, @loopback, 0x1}}}, {{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_virt_wifi\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @multicast2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) [ 293.269537][ T8235] usb 3-1: Using ep0 maxpacket: 8 20:27:25 executing program 3: r0 = socket(0x15, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) 20:27:25 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x8903, &(0x7f0000000000)={@loopback, @mcast2, @local}) 20:27:25 executing program 1: keyctl$reject(0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 20:27:25 executing program 4: r0 = socket(0x18, 0x800, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}}, 0x0) 20:27:25 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000003e00)='./file0\x00', 0x0, 0x0, 0x0, 0x2203024, &(0x7f0000003ec0)) [ 293.389405][ T8235] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 293.414109][ T8235] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 52 [ 293.465090][ T8235] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.689757][ T8235] usb 3-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40 [ 293.698846][ T8235] usb 3-1: New USB device strings: Mfr=1, Product=8, SerialNumber=3 [ 293.719273][ T8235] usb 3-1: Product: syz [ 293.723492][ T8235] usb 3-1: Manufacturer: syz [ 293.728095][ T8235] usb 3-1: SerialNumber: syz [ 293.754069][ T8235] usbip-host 3-1: 3-1 is not in match_busid table... skip! 20:27:28 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 20:27:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae60, 0x0) ioctl$KVM_IRQFD(r1, 0xc008ae67, &(0x7f0000000240)) 20:27:28 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0xc0189436, 0x0) 20:27:28 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, 0x0) 20:27:28 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) 20:27:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) [ 295.703680][ T12] usb 3-1: USB disconnect, device number 4 20:27:28 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10fcc1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) write$UHID_CREATE2(r0, 0x0, 0x49) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) 20:27:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 20:27:28 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="4cba18ce7936a73ffb601a4c09be38a69f95d395cc834279c93da961a3dbf8cbe125a5383b36edac3cedde390b4beaa8fd6a431b996956a16a4b9774e60245aea9d6e35a5903c7890bd11903c7ff42a88b618614f1ae541c057fde1c70f28ae8be7d944b1a202166adb8ce54e7e5abe5f510337bbd84aaddc496d521b272d2f396d08eabd311df6a37a73414041301906c4e5c68a26fa43b5c39da119245224d2338f2839585bb6349946e14bdce2ae1a1eb60406c7b195197f1582941f32b54609e57fe23dc4d7a75c5c51e2e12b1599e28aa8c51ac5a50", 0xd8}, {&(0x7f0000000280)="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", 0xde9}], 0x2, &(0x7f0000001280)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000100), 0x10, 0x0}}], 0x2, 0x0) 20:27:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af23, &(0x7f0000000000)) 20:27:28 executing program 2: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x4c, 0x0, 0x0) 20:27:28 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg$xdp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 20:27:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001300)=""/24, 0x18}], 0x1, &(0x7f0000001380)=""/174, 0xae}, 0x63) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000000c0)="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") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x502) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x20000049) write$FUSE_DIRENT(r1, &(0x7f0000001240)={0x30, 0xfffffffffffffffe, 0x0, [{0x4, 0x6, 0x3, 0x100, '*#-'}]}, 0x30) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x2b, 0x6}}}}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x20, 0x6a, 0x8, 0x10, 0x3}, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="050f2400020b1001040200b2f1567460485dc125717ee3eb0902000114100480178174c7"], 0x1, [{0xf3, &(0x7f0000001100)=@string={0xf3, 0x3, "b1601bd56a99f642b359bf974214dc606f9fb689dd8447acc0cdd3751248fff0da292c173d9f65175c1ab5b5f4cf6a87a2058a069a566c7f35f7eb50da4d79fa57023a363a7c3322f6d13249c5fec90d8237e4cf4eb4fa40607dd78edf49b4817b284a71dc5c05a6addad815d0fba80809c6c4fc1b8983961b23bd508c949e956b994d0ff8fc67997b031bf4bfcdd0518fdbe2d174b984e92e57774a7d8f1a2023590846ba6d4c1b8b0601b680fd8629cbd6747f6d63cddd7a7b5ec3ba855136ccecb4453a29e7bfa573e1819be2382ad0ae5ae8fd3d80de08f927dae17771438e90163030d7251742a32dffb450140983"}}]}) 20:27:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8008551c, &(0x7f0000001280)=@urb_type_interrupt={0x1, {0x6}, 0x6, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:27:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0xa, 0x7, 0xfd5, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp}, 0x20) 20:27:28 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 20:27:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 20:27:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) 20:27:28 executing program 2: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) 20:27:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004a80)={0x0, 0x0, &(0x7f00000049c0)=[{0x0}, {&(0x7f00000008c0)={0x10}, 0x10}], 0x2}, 0x0) [ 296.289886][ T8235] usb (null): failed to copy DMA map 20:27:28 executing program 0: io_uring_setup(0x0, 0xfffffffffffffffd) 20:27:28 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x30, 0x0, 0x0) 20:27:28 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x480, 0x0, 0x0) 20:27:28 executing program 5: r0 = socket(0x2, 0x3, 0x9) ioctl$SIOCPNENABLEPIPE(r0, 0x541b, 0x960000) [ 296.459176][ T8235] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 296.709228][ T8235] usb 5-1: Invalid ep0 maxpacket: 512 [ 296.715414][ T8235] usb (null): failed to copy DMA map [ 296.881476][ T8235] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 297.168924][ T8235] usb 5-1: Invalid ep0 maxpacket: 512 [ 297.175111][ T8235] usb usb5-port1: attempt power cycle [ 297.538969][ T8235] usb (null): failed to copy DMA map [ 297.928896][ T8235] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 298.048990][ T8235] usb 5-1: Invalid ep0 maxpacket: 512 [ 298.054639][ T8235] usb (null): failed to copy DMA map [ 298.208816][ T8235] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 298.329366][ T8235] usb 5-1: Invalid ep0 maxpacket: 512 [ 298.334924][ T8235] usb usb5-port1: unable to enumerate USB device 20:27:31 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@id, 0x10, 0x0, 0x0, 0x0, 0x101d0}, 0x0) 20:27:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000001000100f90000020000000900010073007a368f"], 0x34}}, 0x0) 20:27:31 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet_dccp_int(r0, 0x107, 0x0, 0x0, 0x0) 20:27:31 executing program 2: r0 = socket(0xa, 0x80002, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x29, 0x10, 0x0, 0x3) 20:27:31 executing program 3: sendmsg$rds(0xffffffffffffffff, 0x0, 0x803e0000) 20:27:31 executing program 5: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000000)) 20:27:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_mcast\x00') read$snddsp(r0, &(0x7f0000000200)=""/243, 0xf3) 20:27:31 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x84, 0xc, 0x0, 0x0) 20:27:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x0, r0}) [ 299.207527][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:27:31 executing program 2: r0 = socket(0xa, 0x80002, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x11, 0x68, &(0x7f0000000280), 0x10) 20:27:31 executing program 4: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0xf, 0x0, 0x0) [ 299.298565][T10173] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:27:31 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000640), 0x4) 20:27:31 executing program 1: bpf$BPF_TASK_FD_QUERY(0x3, 0x0, 0xd9) 20:27:31 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreq(r0, 0x10d, 0xb, 0x0, &(0x7f0000000180)=0x300) 20:27:31 executing program 2: r0 = syz_open_dev$char_raw(&(0x7f0000000400)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$CHAR_RAW_RAGET(r0, 0x1263, 0x0) 20:27:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0x4000009f}]}) 20:27:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) 20:27:32 executing program 0: r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x13, 0x0, &(0x7f0000000080)) 20:27:32 executing program 5: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, 0x0) 20:27:32 executing program 3: r0 = socket(0x11, 0x3, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 20:27:32 executing program 2: r0 = socket(0x21, 0x80002, 0x2) accept4(r0, 0x0, 0x0, 0x0) 20:27:32 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x800, 0x0) mmap$snddsp(&(0x7f0000631000/0x400000)=nil, 0x400000, 0x9, 0x2c812, r0, 0x0) 20:27:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x201, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x8) 20:27:32 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x3}, 0x0, &(0x7f0000000100)={0x9}, 0x0) 20:27:32 executing program 4: bpf$MAP_CREATE(0x22, &(0x7f00004f9fe4), 0x40) 20:27:32 executing program 1: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x40001) 20:27:32 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreq(r0, 0x10d, 0x6, 0x0, &(0x7f0000000180)=0x300) 20:27:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001200a901"], 0x48}}, 0x0) 20:27:32 executing program 4: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rds(r0, 0x0, 0x0) 20:27:32 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) 20:27:32 executing program 1: capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)) mmap$snddsp(&(0x7f0000631000/0x400000)=nil, 0x400000, 0x100000f, 0x4003032, 0xffffffffffffffff, 0x0) 20:27:32 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x8903, &(0x7f00000005c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 20:27:32 executing program 4: futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) [ 300.031693][T10238] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 300.062664][T10238] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 20:27:32 executing program 3: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) 20:27:32 executing program 0: io_setup(0x0, &(0x7f00000001c0)) 20:27:32 executing program 1: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'wg2\x00', &(0x7f0000000580)=@ethtool_ringparam={0x10}}) 20:27:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='keyring\x00', 0x0, &(0x7f0000000380)="fb", 0x1, r0) 20:27:32 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x8903, &(0x7f00000005c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 20:27:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40040, 0x0) 20:27:32 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x5450, 0x0) 20:27:32 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x8981, 0x0) 20:27:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x8ff}]}) 20:27:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x80108906, 0x0) 20:27:32 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) 20:27:32 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0xfffffe10) 20:27:33 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) migrate_pages(0x0, 0xd1, 0x0, &(0x7f00000002c0)) 20:27:33 executing program 1: socket(0xd8e5d8f31640bd20, 0x0, 0x0) 20:27:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, 0x7800}}) 20:27:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$sequencer(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="06750900ff"], 0x28) 20:27:33 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080), 0x3) 20:27:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 20:27:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x401}}) 20:27:33 executing program 3: mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xdda56e5b83fe4bb2, 0xffffffffffffffff, 0x0) 20:27:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0xc0096616, 0x0) 20:27:33 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000140)={0x2}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@loopback={0x100000000000000}, @mcast2, @local, 0x4, 0x8, 0x5, 0x400, 0xffff, 0x830340}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) 20:27:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0xb, 0x0, 0x0) 20:27:33 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) 20:27:33 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40}, 0x10) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) 20:27:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 20:27:33 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000200)={@hyper}) 20:27:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 20:27:33 executing program 3: r0 = socket(0x2b, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 20:27:33 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$ax25(r0, 0x0, &(0x7f0000000480)) 20:27:33 executing program 1: unshare(0x40600) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) 20:27:33 executing program 2: r0 = socket(0xa, 0x3, 0x3) setsockopt$MISDN_TIME_STAMP(r0, 0x3a, 0x1, 0x0, 0x0) 20:27:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)=ANY=[]}) 20:27:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_dccp_buf(r0, 0x29, 0x4b, 0x0, 0x0) 20:27:33 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x7ffffffff000) 20:27:33 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$caif(r0, 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 20:27:33 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000, 0xc01) write$vhost_msg(r0, &(0x7f00000003c0)={0xfffffff3, {0x0, 0x0, 0x0}}, 0x48) 20:27:34 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') bpf$BPF_MAP_GET_NEXT_ID(0x10, &(0x7f00000000c0), 0x78) 20:27:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_genetlink_get_family_id$devlink(0x0) syz_genetlink_get_family_id$netlbl_mgmt(0xfffffffffffffffe) 20:27:34 executing program 5: r0 = socket(0x23, 0x5, 0x0) getpeername$tipc(r0, 0x0, &(0x7f0000000040)) 20:27:34 executing program 3: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x4e, 0x0, 0x300) 20:27:34 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x8918, 0x0) 20:27:34 executing program 1: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 20:27:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x88801) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x80044dfd, 0x0) 20:27:34 executing program 4: setresuid(0xee00, 0xee00, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:27:34 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5411, 0x0) 20:27:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x8010aebb, 0x0) 20:27:34 executing program 2: r0 = socket(0xa, 0x80002, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x11, 0x68, &(0x7f0000000000)={0xfffffffd}, 0x10) 20:27:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f0000000040)={'gre0\x00', 0x0}) 20:27:34 executing program 4: r0 = socket(0x21, 0x80002, 0x2) connect$tipc(r0, 0x0, 0x0) 20:27:34 executing program 0: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$can_raw(r0, 0x0, 0x0) 20:27:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0xae45, 0x0) 20:27:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x25a, 0x0) 20:27:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xf, 0x4, 0x0, 0x8}, 0x40) 20:27:34 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f407183df56a00000000ff00ffffffef0000", 0x1c) 20:27:34 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendto$l2tp6(r0, &(0x7f0000000100)="86", 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x20) 20:27:34 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r0, &(0x7f0000000000)=@rfm={0x2, 0x0, "3937d9e492bcba35aea4cfb2727cc194"}, 0x18) 20:27:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x14, 0x73, 0x1}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000005bc0)) recvmmsg(r0, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003640)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) 20:27:34 executing program 1: r0 = socket(0xa, 0x80002, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x29, 0x1d, 0x0, 0x300) 20:27:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8936, &(0x7f0000000180)={'wg2\x00'}) 20:27:35 executing program 5: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, 0x300) 20:27:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x40042408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:27:35 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r0) 20:27:35 executing program 5: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x90a1fa092b53f321}, 0x10) 20:27:35 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x8982, 0x0) 20:27:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) 20:27:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0x34}]}) 20:27:35 executing program 4: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x13, 0x0, 0x0) 20:27:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) 20:27:35 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x40001) 20:27:35 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 20:27:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0) 20:27:35 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 20:27:35 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x2, 0x0, &(0x7f0000000180)) 20:27:35 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000040)) 20:27:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x2, 0x0, 0x4f) 20:27:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x570}]}) 20:27:35 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x410101, 0x0) 20:27:35 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x3) 20:27:35 executing program 2: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000440)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) write$P9_RFSYNC(r0, &(0x7f0000000480)={0x7}, 0xfffffdef) 20:27:35 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) 20:27:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) 20:27:35 executing program 5: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x0) syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f00000000c0)="05", 0x1, 0x505e}], 0x0, 0x0) 20:27:35 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 20:27:35 executing program 3: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x13, 0x0, 0x300) 20:27:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 20:27:35 executing program 1: r0 = socket(0x2, 0x3, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x20}, 0x7}, 0x0) 20:27:35 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0xf) 20:27:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') read$snddsp(r0, &(0x7f0000000200)=""/243, 0x200002f3) read$snddsp(r0, 0x0, 0x0) 20:27:36 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 20:27:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 20:27:36 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5460, 0x0) 20:27:36 executing program 4: r0 = socket(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r2 = socket$packet(0x11, 0x3, 0x300) dup3(r2, r0, 0x0) 20:27:36 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x10d, 0x61, 0x0, 0x0) 20:27:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, &(0x7f0000000040)={'gre0\x00', 0x0}) 20:27:36 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x7, 0x0, &(0x7f0000000180)) 20:27:36 executing program 1: unshare(0x40600) bpf$BPF_GET_MAP_INFO(0x18, 0x0, 0x0) 20:27:36 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x891a, &(0x7f0000000080)={'caif0\x00', @ifru_flags}) 20:27:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x9ccc, 0x4) 20:27:36 executing program 3: prctl$PR_SET_FPEXC(0x28, 0x0) 20:27:36 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x25, 0x0, 0x0) 20:27:36 executing program 2: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x0, 0xfe, [], [@generic={0x0, 0x7ef, "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"}]}, 0x800) 20:27:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0xc0406618, 0x0) 20:27:36 executing program 1: socket(0xa, 0x0, 0xffff) 20:27:37 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xe8030000) 20:27:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9a, 0x4) 20:27:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 20:27:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0xc008aeba, 0x0) 20:27:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x5421, 0x0) 20:27:37 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockname$tipc(r0, 0x0, &(0x7f00000001c0)) 20:27:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0x345}]}) 20:27:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x3, 0x0, 0x0, 0x0) 20:27:37 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x10fcc1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x13e) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00'}}, 0x118) 20:27:37 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0) 20:27:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/kcm\x00') read$snddsp(r0, &(0x7f0000000240)=""/124, 0x7c) read$snddsp(r0, &(0x7f0000000140)=""/229, 0xe5) 20:27:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_hwaddr}) 20:27:37 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 20:27:37 executing program 1: prctl$PR_GET_NO_NEW_PRIVS(0x21) 20:27:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/igmp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000f8ff00"}) r2 = syz_open_pts(r1, 0x2) sendfile(r2, r0, 0x0, 0x6f0a77bd) 20:27:37 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/112, 0x70}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) 20:27:37 executing program 5: syz_emit_ethernet(0x104, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2c86dd65"], 0x0) 20:27:37 executing program 4 (fault-call:4 fault-nth:0): mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) [ 305.193252][T10598] FAULT_INJECTION: forcing a failure. [ 305.193252][T10598] name failslab, interval 1, probability 0, space 0, times 1 [ 305.253898][T10598] CPU: 1 PID: 10598 Comm: syz-executor.4 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 305.263919][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.274058][T10598] Call Trace: [ 305.277523][T10598] dump_stack+0x198/0x1fd [ 305.281945][T10598] should_fail.cold+0x5/0x14 [ 305.286653][T10598] should_failslab+0x5/0xf [ 305.291192][T10598] slab_pre_alloc_hook.constprop.0+0xf4/0x200 [ 305.297399][T10598] ? sock_free_inode+0x20/0x20 [ 305.302191][T10598] kmem_cache_alloc+0x46/0x3a0 [ 305.306983][T10598] ? sock_free_inode+0x20/0x20 [ 305.311773][T10598] sock_alloc_inode+0x18/0x1c0 [ 305.316559][T10598] ? sock_free_inode+0x20/0x20 [ 305.321507][T10598] alloc_inode+0x61/0x230 [ 305.325861][T10598] new_inode_pseudo+0x14/0xe0 [ 305.330557][T10598] sock_alloc+0x3c/0x260 [ 305.334886][T10598] __sock_create+0xb9/0x740 [ 305.339509][T10598] ? wait_for_completion+0x260/0x260 [ 305.344818][T10598] __sys_socket+0xef/0x200 [ 305.349328][T10598] ? fput_many+0x2f/0x1a0 [ 305.353678][T10598] ? move_addr_to_kernel+0x70/0x70 [ 305.358846][T10598] ? syscall_enter_from_user_mode+0x20/0x290 [ 305.364844][T10598] ? check_preemption_disabled+0x50/0x130 [ 305.370588][T10598] ? syscall_enter_from_user_mode+0x20/0x290 [ 305.376695][T10598] __x64_sys_socket+0x6f/0xb0 [ 305.381469][T10598] do_syscall_64+0x2d/0x70 [ 305.385946][T10598] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 305.391861][T10598] RIP: 0033:0x45d5b9 [ 305.395781][T10598] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.415616][T10598] RSP: 002b:00007f0403c9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 305.424052][T10598] RAX: ffffffffffffffda RBX: 0000000000033540 RCX: 000000000045d5b9 [ 305.432121][T10598] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 305.440108][T10598] RBP: 00007f0403c9bca0 R08: 0000000000000000 R09: 0000000000000000 [ 305.448101][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.456086][T10598] R13: 00007ffd2317f3af R14: 00007f0403c9c9c0 R15: 000000000118cf4c [ 305.526815][T10598] net_ratelimit: 1 callbacks suppressed [ 305.526822][T10598] socket: no more sockets 20:27:38 executing program 4 (fault-call:4 fault-nth:1): mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:38 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x400000, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000006880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xd03408}}, 0x50) 20:27:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8010, 0x100000000000, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x84000, 0xb4, 0xc}, 0x18) ioctl$TIOCSIG(r1, 0x40045436, 0x22) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) 20:27:38 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x8029, 0x1}) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) close(r2) 20:27:38 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) write$P9_RVERSION(r0, 0x0, 0x15) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8}, 0x8) 20:27:38 executing program 3: r0 = socket(0x2, 0x6, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x4, 0x0, 0x0) 20:27:38 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) [ 305.776034][T10619] FAULT_INJECTION: forcing a failure. [ 305.776034][T10619] name failslab, interval 1, probability 0, space 0, times 0 20:27:38 executing program 0: r0 = socket(0x2a, 0x2, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 20:27:38 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x0, 0x0, 0x0) 20:27:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0x3b}]}) [ 305.931437][T10619] CPU: 0 PID: 10619 Comm: syz-executor.4 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 305.941404][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.951474][T10619] Call Trace: [ 305.954824][T10619] dump_stack+0x198/0x1fd [ 305.959276][T10619] should_fail.cold+0x5/0x14 [ 305.963990][T10619] should_failslab+0x5/0xf [ 305.968423][T10619] slab_pre_alloc_hook.constprop.0+0xf4/0x200 [ 305.974518][T10619] kmem_cache_alloc+0x46/0x3a0 [ 305.979522][T10619] security_inode_alloc+0x34/0x160 [ 305.984667][T10619] ? check_memory_region+0x134/0x180 [ 305.989978][T10619] inode_init_always+0x5a7/0xd10 [ 305.994939][T10619] ? __address_space_init_once+0x190/0x190 [ 306.000777][T10619] alloc_inode+0x82/0x230 [ 306.005133][T10619] new_inode_pseudo+0x14/0xe0 [ 306.009843][T10619] sock_alloc+0x3c/0x260 [ 306.014086][T10619] __sock_create+0xb9/0x740 [ 306.018776][T10619] ? hrtimer_interrupt+0x6ea/0x930 [ 306.023905][T10619] __sys_socket+0xef/0x200 [ 306.028338][T10619] ? move_addr_to_kernel+0x70/0x70 [ 306.033434][T10619] ? syscall_enter_from_user_mode+0x20/0x290 [ 306.039394][T10619] ? check_preemption_disabled+0x50/0x130 [ 306.045096][T10619] ? syscall_enter_from_user_mode+0x20/0x290 [ 306.051062][T10619] __x64_sys_socket+0x6f/0xb0 [ 306.055748][T10619] do_syscall_64+0x2d/0x70 [ 306.060273][T10619] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 306.066158][T10619] RIP: 0033:0x45d5b9 [ 306.070140][T10619] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.089837][T10619] RSP: 002b:00007f0403c9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 306.098236][T10619] RAX: ffffffffffffffda RBX: 0000000000033540 RCX: 000000000045d5b9 [ 306.106188][T10619] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 306.114137][T10619] RBP: 00007f0403c9bca0 R08: 0000000000000000 R09: 0000000000000000 [ 306.122110][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.130063][T10619] R13: 00007ffd2317f3af R14: 00007f0403c9c9c0 R15: 000000000118cf4c 20:27:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f000001b000/0x1000)=nil, 0x7fffdffe4000, 0x1, 0x11, r1, 0x0) 20:27:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x10e, 0x1, 0x0, 0x0) 20:27:38 executing program 4 (fault-call:4 fault-nth:2): mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:38 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x129202, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x8004500f, 0x0) [ 306.367551][T10619] socket: no more sockets [ 306.575652][T10654] FAULT_INJECTION: forcing a failure. [ 306.575652][T10654] name failslab, interval 1, probability 0, space 0, times 0 [ 306.596201][T10654] CPU: 0 PID: 10654 Comm: syz-executor.4 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 306.606166][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.616234][T10654] Call Trace: [ 306.619545][T10654] dump_stack+0x198/0x1fd [ 306.623903][T10654] should_fail.cold+0x5/0x14 [ 306.628514][T10654] should_failslab+0x5/0xf [ 306.633056][T10654] slab_pre_alloc_hook.constprop.0+0xf4/0x200 [ 306.639152][T10654] kmem_cache_alloc+0x46/0x3a0 [ 306.643982][T10654] sk_prot_alloc+0x5f/0x300 [ 306.648682][T10654] sk_alloc+0x32/0xbd0 [ 306.652876][T10654] pn_socket_create+0x20a/0x5a0 [ 306.657756][T10654] __sock_create+0x3ca/0x740 [ 306.662373][T10654] __sys_socket+0xef/0x200 [ 306.666899][T10654] ? move_addr_to_kernel+0x70/0x70 [ 306.672037][T10654] ? syscall_enter_from_user_mode+0x20/0x290 [ 306.678048][T10654] ? check_preemption_disabled+0x50/0x130 [ 306.683794][T10654] ? syscall_enter_from_user_mode+0x20/0x290 [ 306.689810][T10654] __x64_sys_socket+0x6f/0xb0 [ 306.694523][T10654] do_syscall_64+0x2d/0x70 [ 306.698961][T10654] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 306.704911][T10654] RIP: 0033:0x45d5b9 [ 306.708941][T10654] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.728643][T10654] RSP: 002b:00007f0403c9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 306.737081][T10654] RAX: ffffffffffffffda RBX: 0000000000033540 RCX: 000000000045d5b9 [ 306.745069][T10654] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 306.753063][T10654] RBP: 00007f0403c9bca0 R08: 0000000000000000 R09: 0000000000000000 [ 306.761079][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.769071][T10654] R13: 00007ffd2317f3af R14: 00007f0403c9c9c0 R15: 000000000118cf4c 20:27:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x2000}}], 0x1, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(r2, &(0x7f0000000280), 0x0, 0xb00, 0x0) 20:27:39 executing program 3: prctl$PR_GET_NO_NEW_PRIVS(0x3a) 20:27:39 executing program 5: r0 = socket(0x21, 0x80002, 0x2) getsockname$netlink(r0, 0x0, 0x0) 20:27:39 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0x40049409, 0x0) 20:27:39 executing program 1: mkdir(&(0x7f0000000100)='./file1\x00', 0xfa) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) r2 = socket$kcm(0xa, 0x2, 0x11) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, &(0x7f0000000040)=r3, 0x4) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1bc, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72f12906}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5164b01d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x253070a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ac95347}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73458ef3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x329e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x132f268d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x3}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe548}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f01f25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30e1be0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20c7c990}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39a01f7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cb9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb5f53f0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a71}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3521ad43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17a9502f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9242}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa54d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c802a42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6520d4a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb5b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x269cac55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27803b2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e4e6374}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbd0acb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51c761f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ebb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22fb8a52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcad1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8565}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x959a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21ec}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x91}, 0x20008000) setreuid(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,uppeHdir=./bus,\x00']) 20:27:39 executing program 4 (fault-call:4 fault-nth:3): mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, 0x0) 20:27:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x4b564d06}]}) 20:27:39 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) [ 307.132472][T10671] overlayfs: unrecognized mount option "uppeHdir=./bus" or missing value 20:27:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000100) [ 307.271587][T10672] overlayfs: unrecognized mount option "uppeHdir=./bus" or missing value 20:27:39 executing program 1: r0 = socket(0x21, 0x80002, 0x2) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) [ 307.349093][T10677] FAULT_INJECTION: forcing a failure. [ 307.349093][T10677] name failslab, interval 1, probability 0, space 0, times 0 20:27:39 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 307.421651][T10677] CPU: 0 PID: 10677 Comm: syz-executor.4 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 307.431586][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.441655][T10677] Call Trace: [ 307.444972][T10677] dump_stack+0x198/0x1fd [ 307.449327][T10677] should_fail.cold+0x5/0x14 [ 307.453944][T10677] should_failslab+0x5/0xf [ 307.458392][T10677] slab_pre_alloc_hook.constprop.0+0xf4/0x200 [ 307.464501][T10677] kmem_cache_alloc_trace+0x49/0x2c0 20:27:39 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) [ 307.469997][T10677] apparmor_sk_alloc_security+0x79/0xf0 [ 307.475644][T10677] security_sk_alloc+0x50/0xb0 [ 307.480456][T10677] sk_prot_alloc+0xae/0x300 [ 307.484981][T10677] sk_alloc+0x32/0xbd0 [ 307.489066][T10677] pn_socket_create+0x20a/0x5a0 [ 307.493946][T10677] __sock_create+0x3ca/0x740 [ 307.498566][T10677] __sys_socket+0xef/0x200 [ 307.503004][T10677] ? move_addr_to_kernel+0x70/0x70 [ 307.508144][T10677] ? syscall_enter_from_user_mode+0x20/0x290 [ 307.514151][T10677] ? check_preemption_disabled+0x50/0x130 [ 307.519985][T10677] ? syscall_enter_from_user_mode+0x20/0x290 [ 307.525999][T10677] __x64_sys_socket+0x6f/0xb0 [ 307.530708][T10677] do_syscall_64+0x2d/0x70 [ 307.535264][T10677] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 307.541206][T10677] RIP: 0033:0x45d5b9 [ 307.545120][T10677] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:27:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f00000000c0)={0xfffffffffffffff3}) 20:27:40 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10fcc1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) write$UHID_CREATE2(r0, 0x0, 0x7ffffffff000) 20:27:40 executing program 5: userfaultfd(0x180000) [ 307.564737][T10677] RSP: 002b:00007f0403c9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 307.573182][T10677] RAX: ffffffffffffffda RBX: 0000000000033540 RCX: 000000000045d5b9 [ 307.581171][T10677] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 307.589156][T10677] RBP: 00007f0403c9bca0 R08: 0000000000000000 R09: 0000000000000000 [ 307.597228][T10677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 307.605212][T10677] R13: 00007ffd2317f3af R14: 00007f0403c9c9c0 R15: 000000000118cf4c 20:27:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x40000}, 0x0) 20:27:40 executing program 4 (fault-call:4 fault-nth:4): mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, 0x0) 20:27:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4040ae77, 0x0) 20:27:40 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 20:27:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 20:27:40 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreq(r0, 0x10d, 0xbf, 0x0, &(0x7f0000000180)=0x300) 20:27:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20:27:40 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x8906, 0x0) [ 307.972036][T10722] FAULT_INJECTION: forcing a failure. [ 307.972036][T10722] name failslab, interval 1, probability 0, space 0, times 0 20:27:40 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffcd9, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c000100000000000000000007"], 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 20:27:40 executing program 2: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 308.057181][T10722] CPU: 0 PID: 10722 Comm: syz-executor.4 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 308.067234][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.077304][T10722] Call Trace: [ 308.080614][T10722] dump_stack+0x198/0x1fd [ 308.084970][T10722] should_fail.cold+0x5/0x14 [ 308.089581][T10722] should_failslab+0x5/0xf [ 308.094017][T10722] slab_pre_alloc_hook.constprop.0+0xf4/0x200 [ 308.100119][T10722] kmem_cache_alloc+0x46/0x3a0 [ 308.104909][T10722] ? lock_is_held_type+0xbb/0xf0 [ 308.109871][T10722] __d_alloc+0x2a/0x950 [ 308.114054][T10722] d_alloc_pseudo+0x19/0x70 [ 308.118582][T10722] alloc_file_pseudo+0xc6/0x250 [ 308.123452][T10722] ? alloc_file+0x5a0/0x5a0 [ 308.128109][T10722] ? do_raw_spin_unlock+0x171/0x230 [ 308.133447][T10722] ? _raw_spin_unlock+0x24/0x40 [ 308.138313][T10722] ? __alloc_fd+0x28d/0x600 [ 308.142837][T10722] sock_alloc_file+0x4f/0x190 [ 308.147532][T10722] __sys_socket+0x13d/0x200 [ 308.152049][T10722] ? move_addr_to_kernel+0x70/0x70 [ 308.157176][T10722] ? syscall_enter_from_user_mode+0x20/0x290 [ 308.163168][T10722] ? check_preemption_disabled+0x50/0x130 [ 308.168908][T10722] ? syscall_enter_from_user_mode+0x20/0x290 [ 308.174913][T10722] __x64_sys_socket+0x6f/0xb0 [ 308.179609][T10722] do_syscall_64+0x2d/0x70 [ 308.184042][T10722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 308.189941][T10722] RIP: 0033:0x45d5b9 [ 308.193850][T10722] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.213462][T10722] RSP: 002b:00007f0403c9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 308.221892][T10722] RAX: ffffffffffffffda RBX: 0000000000033540 RCX: 000000000045d5b9 [ 308.229875][T10722] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 308.237857][T10722] RBP: 00007f0403c9bca0 R08: 0000000000000000 R09: 0000000000000000 [ 308.245842][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 308.253825][T10722] R13: 00007ffd2317f3af R14: 00007f0403c9c9c0 R15: 000000000118cf4c 20:27:40 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xd50, 0x0, {0x1, @sdr}}) 20:27:40 executing program 0: setresuid(0xee00, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r1, 0xb3b5e43e2d665541, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 308.380559][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 20:27:40 executing program 4 (fault-call:4 fault-nth:5): mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:40 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x8903, &(0x7f0000000080)) 20:27:40 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x63, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}}, 0x0) 20:27:40 executing program 2: add_key(&(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 20:27:41 executing program 3: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001380)=[{0x0, 0x1100}, {0x0}, {&(0x7f0000001240)=""/198, 0xc6}], 0x3}, 0x0) 20:27:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002300)={0x1, 0x0, [{0x560}]}) 20:27:41 executing program 2: r0 = socket(0x2, 0x2, 0x0) getsockname$tipc(r0, 0x0, &(0x7f00000001c0)) 20:27:41 executing program 1: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x541b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}) [ 308.600840][T10755] FAULT_INJECTION: forcing a failure. [ 308.600840][T10755] name failslab, interval 1, probability 0, space 0, times 0 20:27:41 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)={0x0, r0/1000+60000}) [ 308.696632][T10755] CPU: 0 PID: 10755 Comm: syz-executor.4 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 308.706593][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.716665][T10755] Call Trace: [ 308.719978][T10755] dump_stack+0x198/0x1fd [ 308.724338][T10755] should_fail.cold+0x5/0x14 [ 308.728958][T10755] should_failslab+0x5/0xf [ 308.733399][T10755] slab_pre_alloc_hook.constprop.0+0xf4/0x200 [ 308.739503][T10755] kmem_cache_alloc+0x46/0x3a0 [ 308.744292][T10755] ? lock_is_held_type+0xbb/0xf0 [ 308.749259][T10755] __d_alloc+0x2a/0x950 [ 308.753456][T10755] d_alloc_pseudo+0x19/0x70 [ 308.757992][T10755] alloc_file_pseudo+0xc6/0x250 [ 308.762874][T10755] ? alloc_file+0x5a0/0x5a0 [ 308.767425][T10755] ? do_raw_spin_unlock+0x171/0x230 [ 308.772739][T10755] ? _raw_spin_unlock+0x24/0x40 [ 308.777619][T10755] ? __alloc_fd+0x28d/0x600 [ 308.782151][T10755] sock_alloc_file+0x4f/0x190 [ 308.786854][T10755] __sys_socket+0x13d/0x200 [ 308.791377][T10755] ? fput_many+0x2f/0x1a0 20:27:41 executing program 2: r0 = socket(0x15, 0x5, 0x0) bind$isdn_base(r0, 0x0, 0x0) 20:27:41 executing program 1: capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f00000001c0)) [ 308.795731][T10755] ? move_addr_to_kernel+0x70/0x70 [ 308.800868][T10755] ? syscall_enter_from_user_mode+0x20/0x290 [ 308.806874][T10755] ? check_preemption_disabled+0x50/0x130 [ 308.812620][T10755] ? syscall_enter_from_user_mode+0x20/0x290 [ 308.818630][T10755] __x64_sys_socket+0x6f/0xb0 [ 308.823341][T10755] do_syscall_64+0x2d/0x70 [ 308.827799][T10755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 308.833710][T10755] RIP: 0033:0x45d5b9 [ 308.837662][T10755] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.857380][T10755] RSP: 002b:00007f0403c9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 308.865819][T10755] RAX: ffffffffffffffda RBX: 0000000000033540 RCX: 000000000045d5b9 [ 308.873815][T10755] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 308.881809][T10755] RBP: 00007f0403c9bca0 R08: 0000000000000000 R09: 0000000000000000 20:27:41 executing program 2: r0 = socket(0xa, 0x6, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) [ 308.889804][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 308.897806][T10755] R13: 00007ffd2317f3af R14: 00007f0403c9c9c0 R15: 000000000118cf4c 20:27:41 executing program 4 (fault-call:4 fault-nth:6): mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:41 executing program 1: r0 = socket(0x2b, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000001c0)) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000002240)) 20:27:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0xa, &(0x7f0000000100), 0x4) 20:27:41 executing program 0: io_uring_setup(0x29e, &(0x7f00000002c0)={0x0, 0xf50d, 0x3e}) 20:27:41 executing program 2: r0 = socket(0x29, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)) 20:27:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, {0x2, 0x4e24, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth1_to_team\x00', 0x400}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x6}, 0x2e, &(0x7f00000000c0)={0x0}}, 0x6800) 20:27:41 executing program 1: r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 20:27:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x5000}, 0x0) [ 309.226421][T10794] FAULT_INJECTION: forcing a failure. [ 309.226421][T10794] name failslab, interval 1, probability 0, space 0, times 0 [ 309.282799][T10794] CPU: 1 PID: 10794 Comm: syz-executor.4 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 309.292739][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.302823][T10794] Call Trace: [ 309.306146][T10794] dump_stack+0x198/0x1fd [ 309.310543][T10794] should_fail.cold+0x5/0x14 [ 309.315169][T10794] should_failslab+0x5/0xf [ 309.319612][T10794] slab_pre_alloc_hook.constprop.0+0xf4/0x200 [ 309.325706][T10794] kmem_cache_alloc+0x46/0x3a0 [ 309.330504][T10794] security_file_alloc+0x34/0x170 [ 309.335554][T10794] __alloc_file+0xd8/0x350 [ 309.340001][T10794] alloc_empty_file+0x6d/0x170 [ 309.344791][T10794] alloc_file+0x5e/0x5a0 [ 309.349057][T10794] alloc_file_pseudo+0x165/0x250 [ 309.354014][T10794] ? alloc_file+0x5a0/0x5a0 [ 309.358534][T10794] ? do_raw_spin_unlock+0x171/0x230 [ 309.363765][T10794] ? _raw_spin_unlock+0x24/0x40 [ 309.368643][T10794] ? __alloc_fd+0x28d/0x600 [ 309.373180][T10794] sock_alloc_file+0x4f/0x190 [ 309.378764][T10794] __sys_socket+0x13d/0x200 [ 309.383296][T10794] ? move_addr_to_kernel+0x70/0x70 [ 309.388433][T10794] ? syscall_enter_from_user_mode+0x20/0x290 [ 309.394522][T10794] ? check_preemption_disabled+0x50/0x130 [ 309.400265][T10794] ? syscall_enter_from_user_mode+0x20/0x290 [ 309.406269][T10794] __x64_sys_socket+0x6f/0xb0 [ 309.410971][T10794] do_syscall_64+0x2d/0x70 [ 309.415407][T10794] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 309.421319][T10794] RIP: 0033:0x45d5b9 [ 309.425232][T10794] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.444936][T10794] RSP: 002b:00007f0403c9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 309.453365][T10794] RAX: ffffffffffffffda RBX: 0000000000033540 RCX: 000000000045d5b9 [ 309.461338][T10794] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 309.469319][T10794] RBP: 00007f0403c9bca0 R08: 0000000000000000 R09: 0000000000000000 [ 309.477291][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 309.485251][T10794] R13: 00007ffd2317f3af R14: 00007f0403c9c9c0 R15: 000000000118cf4c 20:27:42 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x84, 0x16, 0x0, 0x0) 20:27:42 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8004e500, 0x0) 20:27:42 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x5450, 0x0) 20:27:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) 20:27:42 executing program 4 (fault-call:4 fault-nth:7): mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:27:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40881) 20:27:42 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x10, 0x1405, 0x1}, 0x10}}, 0x0) [ 309.831317][ T29] audit: type=1326 audit(1599337662.284:8): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 310.473693][ T29] audit: type=1326 audit(1599337662.924:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 365.173260][ T17] Bluetooth: hci0: command 0x0406 tx timeout [ 365.173423][ T2468] Bluetooth: hci1: command 0x0406 tx timeout [ 365.179349][ T17] Bluetooth: hci2: command 0x0406 tx timeout [ 365.193163][ T2468] Bluetooth: hci4: command 0x0406 tx timeout [ 365.199203][ T2468] Bluetooth: hci3: command 0x0406 tx timeout [ 365.203302][ T17] Bluetooth: hci5: command 0x0406 tx timeout [ 452.687652][ T1174] INFO: task syz-executor.0:10790 blocked for more than 143 seconds. [ 452.695767][ T1174] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 452.710045][ T1174] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.722178][ T1174] task:syz-executor.0 state:D stack:29800 pid:10790 ppid: 6886 flags:0x00004004 [ 452.734976][ T1174] Call Trace: [ 452.742019][ T1174] __schedule+0xea9/0x2230 [ 452.746483][ T1174] ? io_schedule_timeout+0x140/0x140 [ 452.755435][ T1174] schedule+0xd0/0x2a0 [ 452.763074][ T1174] schedule_timeout+0x1d8/0x250 [ 452.771739][ T1174] ? usleep_range+0x170/0x170 [ 452.776548][ T1174] ? lock_downgrade+0x830/0x830 [ 452.791402][ T1174] ? do_raw_spin_lock+0x120/0x2b0 [ 452.796453][ T1174] ? _raw_spin_unlock_irq+0x1f/0x80 [ 452.804038][ T1174] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 452.814751][ T1174] ? _raw_spin_unlock_irq+0x1f/0x80 [ 452.822395][ T1174] wait_for_completion+0x163/0x260 [ 452.832253][ T1174] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 452.841391][ T1174] io_uring_setup+0x1495/0x29a0 [ 452.846377][ T1174] ? io_sq_thread+0xe00/0xe00 [ 452.855886][ T1174] ? io_issue_sqe+0x5bb0/0x5bb0 [ 452.863291][ T1174] ? io_wake_function+0x2e0/0x2e0 [ 452.873175][ T1174] ? put_timespec64+0xcb/0x120 [ 452.880520][ T1174] ? ns_to_timespec64+0xc0/0xc0 [ 452.885399][ T1174] ? check_preemption_disabled+0x50/0x130 [ 452.901625][ T1174] ? syscall_enter_from_user_mode+0x20/0x290 [ 452.912198][ T1174] ? lockdep_hardirqs_on+0x53/0x100 [ 452.919837][ T1174] do_syscall_64+0x2d/0x70 [ 452.924267][ T1174] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 452.934870][ T1174] RIP: 0033:0x45d5b9 [ 452.941131][ T1174] Code: Bad RIP value. [ 452.945198][ T1174] RSP: 002b:00007f7337505c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 452.960810][ T1174] RAX: ffffffffffffffda RBX: 0000000000008540 RCX: 000000000045d5b9 [ 452.972388][ T1174] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000029e [ 452.983922][ T1174] RBP: 000000000118cf78 R08: 0000000000000000 R09: 0000000000000000 [ 452.996122][ T1174] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 453.006836][ T1174] R13: 00007fff4b9dbe4f R14: 00007f73375069c0 R15: 000000000118cf4c [ 453.023774][ T1174] INFO: task io_uring-sq:10792 blocked for more than 143 seconds. [ 453.031653][ T1174] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 453.038785][ T1174] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.047547][ T1174] task:io_uring-sq state:D stack:31120 pid:10792 ppid: 2 flags:0x00004000 [ 453.056762][ T1174] Call Trace: [ 453.060128][ T1174] __schedule+0xea9/0x2230 [ 453.064570][ T1174] ? io_schedule_timeout+0x140/0x140 [ 453.069949][ T1174] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 453.075753][ T1174] schedule+0xd0/0x2a0 [ 453.079945][ T1174] ? __do_sys_io_uring_enter+0x1940/0x1940 [ 453.085745][ T1174] schedule_preempt_disabled+0xf/0x20 [ 453.091276][ T1174] kthread+0x2ac/0x4a0 [ 453.095372][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 453.100582][ T1174] ret_from_fork+0x1f/0x30 [ 453.105059][ T1174] [ 453.105059][ T1174] Showing all locks held in the system: [ 453.113592][ T1174] 1 lock held by khungtaskd/1174: [ 453.120509][ T1174] #0: ffffffff89c67500 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 453.130435][ T1174] 2 locks held by in:imklog/6551: [ 453.135458][ T1174] #0: ffff8880a7d0db70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 453.144699][ T1174] #1: ffffffff89c67500 (rcu_read_lock){....}-{1:2}, at: try_to_wake_up+0x52b/0x12b0 [ 453.154318][ T1174] [ 453.156637][ T1174] ============================================= [ 453.156637][ T1174] [ 453.165116][ T1174] NMI backtrace for cpu 1 [ 453.169674][ T1174] CPU: 1 PID: 1174 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 453.179112][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.189148][ T1174] Call Trace: [ 453.192439][ T1174] dump_stack+0x198/0x1fd [ 453.196745][ T1174] nmi_cpu_backtrace.cold+0x44/0xd7 [ 453.202001][ T1174] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 453.207607][ T1174] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 453.213617][ T1174] watchdog+0xd89/0xf30 [ 453.217793][ T1174] ? trace_sched_process_hang+0x2e0/0x2e0 [ 453.223486][ T1174] kthread+0x3b5/0x4a0 [ 453.227529][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 453.232615][ T1174] ret_from_fork+0x1f/0x30 [ 453.237244][ T1174] Sending NMI from CPU 1 to CPUs 0: [ 453.243045][ C0] NMI backtrace for cpu 0 [ 453.243052][ C0] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 453.243058][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.243062][ C0] Workqueue: events nsim_dev_trap_report_work [ 453.243069][ C0] RIP: 0010:lock_acquire+0x7/0xae0 [ 453.243082][ C0] Code: 24 08 e9 00 fb ff ff 48 c7 c7 f8 e9 bc 8a e8 d0 dd 5a 00 e9 3e fc ff ff 90 66 2e 0f 1f 84 00 00 00 00 00 41 57 41 56 41 89 d6 <41> 55 41 89 f5 41 54 41 89 cc 55 48 89 fd 53 44 89 c3 48 81 ec b8 [ 453.243085][ C0] RSP: 0018:ffffc90000d2fb40 EFLAGS: 00000246 [ 453.243094][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000002 [ 453.243099][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff89c67500 [ 453.243105][ C0] RBP: ffffc90000d2fbb8 R08: 0000000000000000 R09: 0000000000000000 [ 453.243110][ C0] R10: ffffed1013e77508 R11: 00000000410c905c R12: ffff88808ed72bc0 [ 453.243115][ C0] R13: ffff88809f3ba810 R14: 0000000000000000 R15: ffffffff88cbf600 [ 453.243121][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 453.243126][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.243132][ C0] CR2: 00007f7828999000 CR3: 00000000a1b4d000 CR4: 00000000001506f0 [ 453.243137][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.243143][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 453.243146][ C0] Call Trace: [ 453.243149][ C0] net_dm_hw_report+0x39/0x1e0 [ 453.243153][ C0] ? net_dm_cmd_trace+0xfc0/0xfc0 [ 453.243157][ C0] devlink_trap_report+0x39e/0x550 [ 453.243162][ C0] ? devlink_nl_cmd_trap_policer_set_doit+0x8e0/0x8e0 [ 453.243166][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 453.243170][ C0] nsim_dev_trap_report_work+0x879/0xbe0 [ 453.243174][ C0] process_one_work+0x94c/0x1670 [ 453.243177][ C0] ? lock_release+0x8f0/0x8f0 [ 453.243181][ C0] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 453.243185][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 453.243189][ C0] ? lockdep_hardirqs_off+0x96/0xd0 [ 453.243193][ C0] worker_thread+0x64c/0x1120 [ 453.243197][ C0] ? process_one_work+0x1670/0x1670 [ 453.243200][ C0] kthread+0x3b5/0x4a0 [ 453.243204][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 453.243208][ C0] ret_from_fork+0x1f/0x30 [ 453.246356][ T1174] Kernel panic - not syncing: hung_task: blocked tasks [ 453.473682][ T1174] CPU: 1 PID: 1174 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 453.483144][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.493171][ T1174] Call Trace: [ 453.496441][ T1174] dump_stack+0x198/0x1fd [ 453.500900][ T1174] panic+0x347/0x7c0 [ 453.504798][ T1174] ? __warn_printk+0xf3/0xf3 [ 453.509389][ T1174] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 453.514996][ T1174] ? preempt_schedule_thunk+0x16/0x18 [ 453.520344][ T1174] ? watchdog.cold+0x22d/0x24b [ 453.525177][ T1174] ? watchdog+0xc59/0xf30 [ 453.529482][ T1174] watchdog.cold+0x23e/0x24b [ 453.534062][ T1174] ? trace_sched_process_hang+0x2e0/0x2e0 [ 453.539768][ T1174] kthread+0x3b5/0x4a0 [ 453.543818][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 453.548907][ T1174] ret_from_fork+0x1f/0x30 [ 453.554882][ T1174] Kernel Offset: disabled [ 453.559211][ T1174] Rebooting in 86400 seconds..