[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.210' (ECDSA) to the list of known hosts. 2020/12/15 00:27:38 fuzzer started 2020/12/15 00:27:39 dialing manager at 10.128.0.26:35303 2020/12/15 00:27:39 syscalls: 3466 2020/12/15 00:27:39 code coverage: enabled 2020/12/15 00:27:39 comparison tracing: enabled 2020/12/15 00:27:39 extra coverage: enabled 2020/12/15 00:27:39 setuid sandbox: enabled 2020/12/15 00:27:39 namespace sandbox: enabled 2020/12/15 00:27:39 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/15 00:27:39 fault injection: enabled 2020/12/15 00:27:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/15 00:27:39 net packet injection: enabled 2020/12/15 00:27:39 net device setup: enabled 2020/12/15 00:27:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/15 00:27:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/15 00:27:39 USB emulation: enabled 2020/12/15 00:27:39 hci packet injection: enabled 2020/12/15 00:27:39 wifi device emulation: enabled 00:32:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') read$char_usb(r0, &(0x7f0000000180)=""/4096, 0x1000) 00:32:10 executing program 1: syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') 00:32:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') read$char_usb(r0, &(0x7f0000000180)=""/4096, 0x1000) 00:32:11 executing program 3: rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) 00:32:11 executing program 4: migrate_pages(0x0, 0xaa, 0x0, &(0x7f0000000040)=0x1) 00:32:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) syzkaller login: [ 341.701648][ T8518] IPVS: ftp: loaded support on port[0] = 21 [ 341.872334][ T8520] IPVS: ftp: loaded support on port[0] = 21 [ 342.020917][ T8518] chnl_net:caif_netlink_parms(): no params data found [ 342.208675][ T8522] IPVS: ftp: loaded support on port[0] = 21 [ 342.255982][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.263702][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.272932][ T8518] device bridge_slave_0 entered promiscuous mode [ 342.283255][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.304362][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.314006][ T8518] device bridge_slave_1 entered promiscuous mode [ 342.413818][ T8518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.437375][ T8518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.439921][ T8524] IPVS: ftp: loaded support on port[0] = 21 [ 342.528487][ T8520] chnl_net:caif_netlink_parms(): no params data found [ 342.580400][ T8518] team0: Port device team_slave_0 added [ 342.624165][ T8518] team0: Port device team_slave_1 added [ 342.703540][ T8526] IPVS: ftp: loaded support on port[0] = 21 [ 342.792274][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.800803][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.827482][ T8518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.861773][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.868812][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.896468][ T8518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.930988][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.940830][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.950223][ T8520] device bridge_slave_0 entered promiscuous mode [ 342.959388][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 342.982619][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.990338][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.998763][ T8520] device bridge_slave_1 entered promiscuous mode [ 343.028302][ T8518] device hsr_slave_0 entered promiscuous mode [ 343.037005][ T8518] device hsr_slave_1 entered promiscuous mode [ 343.092373][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.124001][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.251439][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.261033][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.270157][ T8522] device bridge_slave_0 entered promiscuous mode [ 343.281720][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.290209][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.298778][ T8522] device bridge_slave_1 entered promiscuous mode [ 343.309504][ T8520] team0: Port device team_slave_0 added [ 343.319487][ T8520] team0: Port device team_slave_1 added [ 343.359920][ T8524] chnl_net:caif_netlink_parms(): no params data found [ 343.449405][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.462945][ T8690] IPVS: ftp: loaded support on port[0] = 21 [ 343.567777][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.577444][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.590606][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.617602][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.645655][ T8516] Bluetooth: hci0: command 0x0409 tx timeout [ 343.672378][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.679654][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.706102][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.756505][ T8526] chnl_net:caif_netlink_parms(): no params data found [ 343.796033][ T8522] team0: Port device team_slave_0 added [ 343.839930][ T8522] team0: Port device team_slave_1 added [ 343.887043][ T8644] Bluetooth: hci1: command 0x0409 tx timeout [ 343.887515][ T8520] device hsr_slave_0 entered promiscuous mode [ 343.900490][ T8520] device hsr_slave_1 entered promiscuous mode [ 343.907837][ T8520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.915913][ T8520] Cannot create hsr debugfs directory [ 343.930837][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.940170][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.948653][ T8524] device bridge_slave_0 entered promiscuous mode [ 343.958259][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.965474][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.973311][ T8524] device bridge_slave_1 entered promiscuous mode [ 344.021722][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.031065][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.057483][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.072740][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.080272][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.106651][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.133726][ T3897] Bluetooth: hci2: command 0x0409 tx timeout [ 344.186549][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.235557][ T8522] device hsr_slave_0 entered promiscuous mode [ 344.242952][ T8522] device hsr_slave_1 entered promiscuous mode [ 344.249864][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.257513][ T8522] Cannot create hsr debugfs directory [ 344.278154][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.336800][ T8518] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.362030][ T8518] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.364720][ T3897] Bluetooth: hci3: command 0x0409 tx timeout [ 344.411855][ T8518] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.428804][ T8518] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.459420][ T8524] team0: Port device team_slave_0 added [ 344.469340][ T8690] chnl_net:caif_netlink_parms(): no params data found [ 344.492507][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.501901][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.513316][ T8526] device bridge_slave_0 entered promiscuous mode [ 344.527647][ T8524] team0: Port device team_slave_1 added [ 344.533663][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.540899][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.549296][ T8526] device bridge_slave_1 entered promiscuous mode [ 344.604784][ T3014] Bluetooth: hci4: command 0x0409 tx timeout [ 344.660777][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.670658][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.679105][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.705141][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.720787][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.728555][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.754592][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.789158][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.823943][ T8526] team0: Port device team_slave_0 added [ 344.857661][ T8526] team0: Port device team_slave_1 added [ 344.920069][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.927586][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.954686][ T8526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.968867][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.975896][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.002290][ T8526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.044189][ T8524] device hsr_slave_0 entered promiscuous mode [ 345.051134][ T8524] device hsr_slave_1 entered promiscuous mode [ 345.058196][ T8524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.066713][ T8524] Cannot create hsr debugfs directory [ 345.080249][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.089897][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.099200][ T8690] device bridge_slave_0 entered promiscuous mode [ 345.132083][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.142706][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.151305][ T8690] device bridge_slave_1 entered promiscuous mode [ 345.167465][ T8520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.188140][ T8526] device hsr_slave_0 entered promiscuous mode [ 345.197258][ T8526] device hsr_slave_1 entered promiscuous mode [ 345.203910][ T8526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.212796][ T8526] Cannot create hsr debugfs directory [ 345.267556][ T8520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.278066][ T8520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.301274][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.329553][ T8520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.363359][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.404380][ T8516] Bluetooth: hci5: command 0x0409 tx timeout [ 345.417450][ T8522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.432934][ T8522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.474550][ T8522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.498113][ T8522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.530067][ T8690] team0: Port device team_slave_0 added [ 345.569896][ T8690] team0: Port device team_slave_1 added [ 345.604821][ T8518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.672130][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.679230][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.708560][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.724464][ T8644] Bluetooth: hci0: command 0x041b tx timeout [ 345.759721][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.766994][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.793645][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.818437][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.827525][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.840408][ T8518] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.904017][ T8690] device hsr_slave_0 entered promiscuous mode [ 345.911706][ T8690] device hsr_slave_1 entered promiscuous mode [ 345.918619][ T8690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.927935][ T8690] Cannot create hsr debugfs directory [ 345.946110][ T8524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.964477][ T9003] Bluetooth: hci1: command 0x041b tx timeout [ 346.002093][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.011427][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.021378][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.028859][ T8644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.039398][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.048954][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.057583][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.064856][ T8644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.073395][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.099203][ T8524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.114157][ T8524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.136001][ T8524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.153879][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.164098][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.173255][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.185931][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.216630][ T8644] Bluetooth: hci2: command 0x041b tx timeout [ 346.250723][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.260879][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.270190][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.279383][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.288294][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.355245][ T8518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.370563][ T8518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.378599][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.388062][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.403250][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.413339][ T8526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.428803][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.454775][ T9003] Bluetooth: hci3: command 0x041b tx timeout [ 346.456360][ T8526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.489933][ T8526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.502720][ T8526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.556550][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.573191][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.580933][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.589230][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.597654][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.606282][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.613745][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 346.630881][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.644084][ T8518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.686074][ T9003] Bluetooth: hci4: command 0x041b tx timeout [ 346.712483][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.721234][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.736306][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.743353][ T8516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.756587][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.768901][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.779762][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.786893][ T8516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.795669][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.804628][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.813582][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.822158][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.829330][ T8516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.875171][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.883105][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.898538][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.909668][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.921695][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.931415][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.938565][ T9516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.946469][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.979317][ T8690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 346.990656][ T8690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.006664][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.019414][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.029932][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.042964][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.052108][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.061028][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.070097][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.079972][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.088848][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.104349][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.112900][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.127853][ T8690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.147487][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.164991][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.173697][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.182714][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.192774][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.220693][ T8690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.250439][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.262508][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.271378][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.281188][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.289980][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.299145][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.308177][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.317269][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.333470][ T8518] device veth0_vlan entered promiscuous mode [ 347.344905][ T8520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.357960][ T8522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.378516][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.388615][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.397778][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.408140][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.417117][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.485387][ T8644] Bluetooth: hci5: command 0x041b tx timeout [ 347.492547][ T8518] device veth1_vlan entered promiscuous mode [ 347.501722][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 347.512953][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.522141][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.530972][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.538130][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.547147][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.555988][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.566636][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.573702][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.581639][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.590336][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.623058][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.643948][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 347.654305][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.662887][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.670959][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.679452][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.693889][ T8526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.728998][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.746660][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.755962][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.766781][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.775644][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.783256][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.791997][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.825662][ T8644] Bluetooth: hci0: command 0x040f tx timeout [ 347.831881][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.841839][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.851796][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.860959][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.869865][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.878514][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.893076][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.937128][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.948484][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.957831][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.967198][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.976136][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.985337][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.994300][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.001351][ T8516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.009230][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.018193][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.026889][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.033967][ T8516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.045167][ T9783] Bluetooth: hci1: command 0x040f tx timeout [ 348.059163][ T8520] device veth0_vlan entered promiscuous mode [ 348.074065][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.096384][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.106446][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.115082][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.123213][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.133260][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.142141][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.152555][ T8518] device veth0_macvtap entered promiscuous mode [ 348.161852][ T8520] device veth1_vlan entered promiscuous mode [ 348.196215][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.212777][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.220564][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.233879][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.242788][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.252019][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.260431][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.270337][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.278240][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.294768][ T8644] Bluetooth: hci2: command 0x040f tx timeout [ 348.322576][ T8522] device veth0_vlan entered promiscuous mode [ 348.339647][ T8518] device veth1_macvtap entered promiscuous mode [ 348.373388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.381239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.391895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.400689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.417767][ T8690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.442713][ T8522] device veth1_vlan entered promiscuous mode [ 348.467235][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.503626][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.512261][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.524946][ T9783] Bluetooth: hci3: command 0x040f tx timeout [ 348.535935][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.554928][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.563339][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.589805][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.598790][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.631971][ T8520] device veth0_macvtap entered promiscuous mode [ 348.653727][ T8526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.667203][ T8526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.679066][ T8518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.701125][ T8518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.712470][ T8520] device veth1_macvtap entered promiscuous mode [ 348.722628][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.733061][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.741422][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.750362][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.759132][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.768438][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.774477][ T9783] Bluetooth: hci4: command 0x040f tx timeout [ 348.777514][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.791280][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.799471][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.809019][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.847710][ T8690] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.869547][ T8518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.880702][ T8518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.889645][ T8518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.898985][ T8518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.911311][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.922296][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.932396][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.942104][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.952072][ T9783] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.959317][ T9783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.970213][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.012599][ T8522] device veth0_macvtap entered promiscuous mode [ 349.024863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.033366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.043191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.052425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.062024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.071427][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.078572][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.087220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.096263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.105314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.114455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.122766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.130339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.149746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.157672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.168016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.199605][ T8526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.208611][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.219449][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.231389][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.242972][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.260933][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.273107][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.282397][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.298930][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.307530][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.316667][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.326646][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.335977][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.355440][ T8522] device veth1_macvtap entered promiscuous mode [ 349.379283][ T8690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.397562][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.438792][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.448015][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.459289][ T8520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.477582][ T8520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.496538][ T8520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.509085][ T8520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.565486][ T8524] device veth0_vlan entered promiscuous mode [ 349.574679][ T8644] Bluetooth: hci5: command 0x040f tx timeout [ 349.590260][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.603361][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.632075][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.662468][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.673059][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.693794][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.715472][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.727379][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.738309][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.748806][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.759635][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.773105][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.800026][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.808937][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.817548][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.828898][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.837966][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.847229][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.856581][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.864441][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.874309][ T8524] device veth1_vlan entered promiscuous mode [ 349.886522][ T8644] Bluetooth: hci0: command 0x0419 tx timeout [ 349.901807][ T8522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.910788][ T8522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.927867][ T8522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.936968][ T8522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.957456][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.025553][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 350.033787][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 350.038478][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.051651][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.065460][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.073468][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.083176][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.124647][ T9834] Bluetooth: hci1: command 0x0419 tx timeout [ 350.155362][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.193343][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.208563][ T8524] device veth0_macvtap entered promiscuous mode [ 350.238723][ T8526] device veth0_vlan entered promiscuous mode [ 350.256072][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.267381][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 350.292479][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 350.303178][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.312155][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.321464][ T8524] device veth1_macvtap entered promiscuous mode [ 350.354905][ T9847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.362937][ T9847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.375167][ T18] Bluetooth: hci2: command 0x0419 tx timeout [ 350.395085][ T8526] device veth1_vlan entered promiscuous mode [ 350.415146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.423905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.452746][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.517713][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 350.526548][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.547012][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.555652][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 350.584452][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 350.603765][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.614437][ T9783] Bluetooth: hci3: command 0x0419 tx timeout [ 350.621228][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 350.635853][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.646237][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 350.669577][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:32:21 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) [ 350.695224][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.744093][ T8690] device veth0_vlan entered promiscuous mode [ 350.755199][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.763040][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.801755][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.814995][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.843086][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.855413][ T18] Bluetooth: hci4: command 0x0419 tx timeout [ 350.878633][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.909025][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.927367][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.944654][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.956037][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.967734][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.981913][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 00:32:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x0, {0x0, 0x0, 0x7}}) [ 351.018520][ T8526] device veth0_macvtap entered promiscuous mode [ 351.035683][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.067234][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.085865][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 00:32:21 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') [ 351.110118][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.135115][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.146936][ T8690] device veth1_vlan entered promiscuous mode [ 351.170249][ T8524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.181292][ T8524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.190857][ T8524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.205131][ T8524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.230749][ T8526] device veth1_macvtap entered promiscuous mode [ 351.236621][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.297727][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.363112][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.371067][ T9847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.382957][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.393604][ T9847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:32:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f00000001c0)) [ 351.408302][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.430685][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.440949][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 00:32:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1) [ 351.496852][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 351.516687][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.549732][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 351.563106][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.585545][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 351.606150][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.621126][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 351.632493][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.646239][ T18] Bluetooth: hci5: command 0x0419 tx timeout [ 351.653708][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.668078][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 351.693924][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.703756][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 351.716552][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.727321][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 351.738182][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.748440][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 351.759464][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.778495][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.798833][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.813111][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.835917][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.854872][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:32:22 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9}) [ 351.883735][ T8526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.910484][ T8526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 00:32:22 executing program 1: pipe(&(0x7f00000041c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) dup2(r0, r1) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) [ 351.926683][ T8526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.949474][ T8526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:32:22 executing program 0: rt_sigaction(0x12, &(0x7f0000000080)={&(0x7f0000000000)="c4a2f9242d8c00000067660f381e5c460265470f54ab00000081f3430faec747ab360f55d8c4815975fb66410f6d45efc4e179e70e67f30f1efb", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) [ 351.993658][ T8690] device veth0_macvtap entered promiscuous mode [ 352.025919][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.035753][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.075802][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.137584][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.147188][ T8690] device veth1_macvtap entered promiscuous mode [ 352.187015][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.254804][ T8877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.262901][ T8877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.272947][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 352.292409][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.303643][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.322905][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 352.355620][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.373239][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 352.396560][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.416055][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 352.433704][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.457665][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 352.472788][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.492919][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 352.503609][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.531903][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.574323][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 352.582903][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.691446][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 352.714641][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.725760][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 352.738624][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.751097][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 352.762306][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.773386][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 352.793535][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.805271][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 352.816532][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.833544][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.868040][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.892659][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.913482][ T8690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.935916][ T8690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.952454][ T8690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 00:32:23 executing program 2: r0 = socket(0x1, 0x2, 0x0) io_setup(0x1ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 352.963307][ T8690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.987170][ T9499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.026076][ T9847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.035863][ T9499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.059480][ T9847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.096625][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.126428][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.135143][ T9847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.195419][ T9847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:32:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) [ 353.278118][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.305870][ T9499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.327002][ T9499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.391952][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.419424][ T9499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.428631][ T9499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:32:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountstats\x00') epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, &(0x7f0000000300), 0x8) [ 353.444256][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:32:24 executing program 5: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff6000/0x3000)=nil) 00:32:24 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001200)={0x0, 0x0, 0x8}, 0x10) 00:32:24 executing program 0: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5000002, 0xffffffffffffffff) 00:32:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:32:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) 00:32:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x801}, 0x14}}, 0x0) 00:32:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='mountstats\x00') read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) 00:32:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @local}}, 0x14) 00:32:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 00:32:24 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') read$char_usb(r1, 0x0, 0x0) 00:32:24 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f000000b540)='*', 0x1) 00:32:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000) 00:32:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2, 0x3, 0x801}, 0x14}}, 0x0) 00:32:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) bind(r0, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80) 00:32:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x801}, 0x14}}, 0x0) 00:32:24 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') 00:32:24 executing program 4: unshare(0x20400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:32:24 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 00:32:24 executing program 0: mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1a032, 0xffffffffffffffff, 0x0) 00:32:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') read$char_usb(r0, 0x0, 0x0) 00:32:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) read$char_usb(r0, 0x0, 0x0) 00:32:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') read$char_usb(r0, &(0x7f0000000180)=""/4096, 0x1000) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 00:32:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x2, 0x1, 0x801}, 0x14}}, 0x0) 00:32:25 executing program 0: rt_sigaction(0x33, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) 00:32:25 executing program 4: inotify_init() pselect6(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, &(0x7f00000003c0), 0x0) 00:32:25 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 00:32:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@ipv4_delrule={0x24, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x10}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}}, 0x0) 00:32:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001200)=@add_del={0x2, 0x0}) 00:32:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)=0x23) 00:32:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 00:32:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') read$char_usb(r0, &(0x7f0000000180)=""/4096, 0x1000) read$FUSE(r0, 0x0, 0x0) 00:32:25 executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080)={[0x8000]}, 0x8) 00:32:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {}, [@nested={0x4}, @nested={0x4, 0xa}]}, 0x1c}}, 0x0) 00:32:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc0}}, {{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'lo\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 355.400559][T10094] x_tables: duplicate underflow at hook 3 00:32:25 executing program 3: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005) 00:32:25 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) 00:32:25 executing program 1: socket$inet6(0xa, 0x3, 0x87) 00:32:25 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='numa_maps\x00') 00:32:25 executing program 0: unshare(0x20400) r0 = epoll_create(0x9) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 00:32:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@ipv4_delrule={0x2c, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x10}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) 00:32:25 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000000b380)='net/mcfilter\x00') readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/224, 0xe0}, {0x0}], 0x2) 00:32:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:32:26 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000000000)) 00:32:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x22) 00:32:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x9, 0x6, 0x101}, 0x14}}, 0x0) 00:32:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:32:26 executing program 1: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000680)='{&-\xedK$%\x00') 00:32:26 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = semget(0x3, 0x4, 0x700) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x1000, 0x800}, {0x3, 0x9}, {0x3, 0x8000, 0x1800}], 0x3, &(0x7f00000000c0)={r1, r2+10000000}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x8, 0x101, 0x1, 0x9, 0x73, 0x80, 0xfff, 0xfff7, 0x101]) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005) 00:32:26 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x1, 0x0) 00:32:26 executing program 3: pipe(&(0x7f00000041c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "cc40ad08b32070b3f01ce2a89983db30c481faf73ff0c8303f0033da19bca2e97b75f8b095e597b9a834ea205e9c4bdf839da7d14e18fcc42111c7e30d43f960943777ef289f100c1b07b6850b3ff6005b0be55c23d097c3382bd4121193ea4073f93eb098f2dce015d5cc46c7d09672214e1d157ee6ce0e7cc00c5c5cf27bc9b42335e19784b2fce1946d84fd1f1987c456d7c9f9f57dc36a331742d6aeac4e3d74f8c38620c59eab7e15e8ad8eb7f099c934e9638bb63453daa291b08c53b9268c0ffa87346e391f29d0c13fe31a5b44d8b45e91c7b1cae37a114763ba036c7ba056350a4f5abaaff52fef456d8771a4d60e67504d821cb796d6e79c7bf1e813b83759f5c11417e36ba4c7e3594e90be6fe93131d971af5c5c9233ca42e3359c165f5970009b6d15babcdb08c00fa6ce64f8bc1ecefad4f4dee0087006d49e6806420c804f512a88a28dda2c1e4dd842380f6e944539afc33d05bc71b3e0e0b4936d986282b99ec333596c62ee5722ac71b4bcf3471383342a386c795b7ee17bb5082821e02f3e04d9095eb592f5f6a2e31ab59d2c369b68597119c4c2325ef779d66380dcc2bde3aaad99e8658c5d8f0c89c7e9aa33756a26d09457c695c88f363134075aede64897c34ad8e9004676d62028123c3994dbbade75fd438676b1a7da8b2047f4d3df46a5b483cc15115230a62798244ae4a95ff522e2b32e7acfb66da3c20c3e47716bd62f45e8cc5cf06b3f54fb63505a76823b8733488152ef2384a021afb7ea773dcfb06f1cfd3c0176ca7c8aa1522bca36d2610687b8fe9585d195fde77e53e9172cdf49a03dd603830a18240b7fcfda701ac5063acb1a18ef41c28e05f82acba6e59f3f4ce3a461ae8bad882bb2f99ef70e732804d8d297a4214aa28a01bcb71e4a9709c53a017e228757411ea4514fcbbd17a2aff28a2e1ad24254ad3851a21fdf7d59bbc28d6addd6fa33179ffbe8b7bdbe2dd2a6ff57cdbd22bac68b494b376d9765ed39b716ac4bb01ad56969a755f3203c53b2b56aabb8b7acc5391a28493fdc9417cb4bcd8971d3809e0a5e06f6887b632f1a52854af32d475dc2f662bf47a3b19aa4c744049fd02e7941912213fd86bb99a2f3e90065c6886a9d6f8447437a6a4da4c52aa3821567d27a9a658985336a728879dd57abd5cbe55b0221fa2518ce8ef95dd4a3ec21e3800435eac0fec95b3b88508f3bdc00da3923623a7f37fe1f54ca8a8a0220739b00b455865ed9b0e223827fbbc107fbad2498c7b35bd3163337aba737906040199c5ff59a9827bb9ddd63a208c02f07a692482cf3dda6e935f08734c33d8867878e5dfc8ea7db5030399b7621d875387cedb5632e42241fad84f452700b8ab169ce49bf7384a3e7f2e4ceb46c1fd56d904a136d43b1b4a9b3324a5598846155e3e360a1749a62049ec776c3c4a3ecf1b0425bee08b39070e1ef8da95f0e12ddd77bd32d1d33549f6a476233fe7538a72b1b5f8929e65dd570bce018c909287703c2fe792a63bc40bef1c4556d042ea25d5ca559e00a3e08ff8083daaa837f44f916c90561171c08cbfc08c8144247af2e22c875a1c1f044b1279779bbcf8fd8632a9499e476066b47a1a6b9ae0fa3412253ea2c92560e48ccdf5f83f5863d929c005063fe86bcd99eec36402c09265e2797f0490cc777705bdbb4672612d953122562239d0da3ac24010a9f240400176d80b829a274471b9d13ddfd25ac85fe642fe6545a3db54d2486568cf792562c3c6b8b01debd1bacac2de64cd7f376168c349b623900c85658a5bd786f6bc7b6021c3402c15317bbbf6155e0a09b9d2009503e44a6c672bd4388efe4771c30cda463c41f648bcbba8ca4fe79e04a26537c948507df1c069a2923714ac481c1d53c3cdc26c2693f5157893c91dfdfd8af4068bbac506986a2371ad209259eb1c7a1bc0d2cc5a9bbcea26fc44dccb41275286fb3ea899f47abde531b817921951843019a18e028f171b8eb66d15d30250b149dee4fb6188979bb55593cdba15b0877f802715e249e8b67974a0be4182a0adf2bcdda0a0b91d3abe32b43a20312b38d35889da2d50bc200ee8b95a144779c1721d63f877b25293f1f9399be2ca83223fdf79ab02d54e984cf2d8e1c57d26fc89b6026990678b98a10d0ee0d06fa1ca9d5618e3fdfeafd47dfda80b6f7d34f446018c3aa9ca447f45bd876b816d41a0ebfb36d87cae51f4137da60f001ce9a9bee2338a30872be9e5a586a98b6b8b69d8f01c9b894c5b9cd73780acf25d7a5b89dde51c1246ede18cd4d0135ccd089f29c56c360e0da6792c4c33217387b894375e92a601948261505a3c3c2055b3d9187f9dcd1e675b867be6ce48ba19999da417ac47c9d69af637c41d4d68cd38267baf6cf5af52089f93e3003c05be5551f40fd63897b2c6a8770605f4d2bc7592ca7a16f9bfa5043fb435ce71232dc76de21cf6d13a9405363a7a83aa444869af0024e699596c3f1099ea3891ffbbe44327460f5216c06f2d6bb105a9743b6fa07b8e56ded1176d4943e78f600e75a0d420cf8ff9ce38b0eff527fff84b70e40d0fd89ba38f1b8425bd258fd233d15384af5140eaa3c1709a598c3d1f2462d0a0526ef02f5beb41feb84a7305e0ecc44eb39f13bc980eb1e5f8aebe87696dbdac1ed9f9fa5d8df2e406daeed9dd3eddad930e1fc89d29d1def81a93b4f480520ec08944db52bd3d4ca137e830de858d7d2168fd9f9d7819edbd90830664d77d6d5b7683c2ebbeec0399f0e20b3af3b13ea22674738e09757a3cc4755a1712287112c6dc20d4449cfda4cbd2d145fa0efc8e0922a0ee3a62e9716c5d608a84a1f78783ab095041bf83eca79056aca4f9b37de5204811f0f7e4663db7e2a7b04353d35e6bf1ac0f76e8a21c6f472c24d9525d493ef797fe522b7bf821afa139ae743caa99bd4a8a58cfc8be72144fc532662a63c10365d1bf761ee6b162acb703835418fc43bfe269cd9d327e029c5b6f6a5664d89086e773f2fbc72b536592b76194dc7311bb47e32fe3a0aa1df4ae5203adab0493b4920d48a19e4660471edfb9a8d9d68c76ff2df54cae1993c1de2a00e0f40385528e9722f227d163ac59ff667d4e0476dbf914e1254e4d8563df22f73b30829609d9a078e86a143ed84382eb041e6c7271248291c67fe5f8d1dfa65fdfa57cddc556a5ed47d0f8032709d3277c2bd6311839c0ded03fb5078a2412460f23db64efeb47e757f9e50913d4cb7562dadacfaa1a909bd77679bd910d023763a996f3b472a7fdfeb8113203a1b7a3dc6432feac9c2e06614a6944dd68a79091338bc4515fb0934a4c58c65ca964328b110d2a7fa4e259604788b12e810a2ac9637b13042f1fd57ea2dbe23e0bfbdaf8bd33a9b7f420c7da8b3739c91666d82124c6314a7c27d847d398f58ee8ab61ec395e83bf48c7ba6e21707a41aaa38f0ae9b48a5de799878189cd4e06927e8c7fe1136f70a47d5f6d753db25060a8b2f590faac758ddf1d9fd3c5a6e3217b41c1352ad0240cbdb753c743e16da5e125e913d7099c52f38aac5a24da8933de66d92480cf9b02a347153011c698a486f49069bb63b922278e7f633619def7817dbc92f6c723cbfed1e83a051ffcd5137d9bd75e68c91f94dd505cc080dfc97e150e3fda6b4841605cb9d189573c12ae45acff1521390f859f72beaaf3d97f503f143c3cec1600e39d4adaa2f56b566cd227ab591f2b67895887183a306161e4dd89356517128b17c1e1edfa0807175e592427a4cb980a1facbffc2ad873778a9382bad210bba33bf086c9e7d8bac15ed5c5bd4cb4557ebed6a12f941d31453e0798072d646cc7b536b9ff8c699965fcd4e14871aa56f497792688c8934507d23d8f78b2b5e468adb2be39f1ca45453518ecc5c8ef7221455f459a379b004d5f99ffcfa05e08ca584028c5fdf6b8b344cf6adca9e34e3225957ef6a3be20981af44294e0975cde134cccbce8a9f901eeccae4f290090d444e74c0c78dd638fc0279c0859cf9d4bb16b4d3655a26076195dca7b1dafb1ee3eb83da1d4a0511f3a2a6173302d6af9ee65cf27c62517fbc56f62ffa11cd75de84b972fd3c6da36cbcfbd026b0339cbf360cef0d5db3d63a9488710291989ca790679f31ffdb9cebb2acd67264167c61070e7294108312b082bd70e8f23607c46764cdf8044822f03d9e6d2e7bc5947c81f2e29d0c2ae3b70076b031a31938c9d23d985d1ca659540e58214f2399e77bc71f45dc291a9bbeff36245a9fd221c40f586573f80a2f0a711523b59883839ebb380b6047935a3cc6a73a449fe359241d9c9f603f489273fb4a08e4c1a97cb91831aacb8f42ec94b00853d3166153bfba3209253cbcb7443bff1d91f4d0d5e8b98ae9fede68354b5a93b6301e62290c65db57210ded63edcf2725b3aa8a2553553f85f787d54e813ca942ce6f95f82785dc90541951ca96981f259b6c4e8c63fd075ac4fd0abedb467a70b6b3412de9943cd9f81a594bb88b788617b616afa1732d8035a5c1058046829d2885f40ed55832f922d2a87815a2c6803fa952454198150efd4eb9aef012b854ff20313e2a04f37686a42348318f93cd02a2cbcab5e7f11c39de8e1c3fe751d36e09a43ae247c6e2f263619345f62be345665a05e0cc7bf7e2ffa5201c67cce9effbef6e7109ce324c345ce63ab6461a118b6b5eac8fbd9566fad6a860c210d2228930f3f34b81bd3400dfc0106ca8937e315cec2eeb9ed225ca910f08d2085bac8917e52bdc122e62afe33e2eea578ebc10aa07ad0ff23a368c9821b0e47cf1c4e88ead7fab45a9c0da9056fdc566f74b433c762df450aa1bf3a970b6607c12b5a57a93dad7bdcfe89a3606c05406ff0db087fc439e68a1341e21bbe095322a6012d5f99b244d4bca3bb6b5a8265eb6a0fe3493f4324aae5c735164cf0bd1c0920c1f31c9fa0b134a6af2266bebe3df0433bdf17537f401d3397a5dddba00955e9b3f735b1c87231c147a79cfecbdc33884850542f1b95bf275761215026714d67c6e1f6d449a73fb2b21955ebbd4fa65b4906cf064ec6c3e761813e6b16778be2bc33531ea281ab10c542bb7b9e460f5bb71acba12905ee74f9b9dc046910333515220fb875012ca30f99b801ef6bdf42f0cb5a163e77376f6091f04d6259b2d9f6ace2549ae537a7f1f0b1dfaec61b36d6447c6b055103803c724070619390dad96fc315ffe76e7d7aaeeabb57e0d07867b624c65c0bcad50cf8161540b371e6fd994621ff58aae21820f8a07bae6d4eb38284fdaa945d3a08938f251692c2535f75c18d1c39ec8ae3ee7fdee316d2de198822fd055d0115529cd6ce65c9a934560a686b111ec1b2d8433e85540174c744ae0e7899dbcc8dd19fac0528ae6482d935b5d75eadb2d9aee8bb4dc83a6be28c1afb7835398c2b5d911a8160fd41b97f3ba70e4db721061bf4aa27a7e691b8af6781d220661f93f299412088c526a99f653f381f482c248e2e194ec2ad7698e5633ed777e33116f5116034c08e5b9e49e7ebe709634a7d2dd44d64bf0372699fe175ee2de144e50287fcd2ecc0eeae4615892486e8a1118c4d791b09a986b6999c5e7d031244078e7b3c1b4112b961e6ca63e5f94236b908efe6cb8e2c748c97786a3555a2c16464332f407f97fcf6299b8d394846a1f63f786fd5848b47062ac2451697bde91721ef4487900e613a7747359eca03d6b475bea2173e5694a1a42a444ef53450b3de865c81b7fa1"}, 0x1001) 00:32:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x4, 0x7, 0x801}, 0x14}}, 0x0) 00:32:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x1c) 00:32:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000100)=@generic, &(0x7f00000000c0)=0x80) 00:32:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) statx(r0, &(0x7f0000000100)='./file0\x00', 0x2800, 0x0, &(0x7f0000000140)) 00:32:26 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x38) 00:32:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 00:32:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @broadcast}, 0xc) 00:32:26 executing program 3: pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe, 0xffffffffffffffff) 00:32:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='children\x00') read$char_usb(r0, 0x0, 0x0) 00:32:26 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000002d40)='ns/net\x00') 00:32:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x19ca99ce582a3a08, 0x0, &(0x7f0000000040)) 00:32:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:32:26 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x1000081) 00:32:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x20048051) 00:32:26 executing program 5: unshare(0x20400) r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)) 00:32:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'bridge_slave_1\x00', 'tunl0\x00'}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00'}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3cb) 00:32:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 00:32:26 executing program 3: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f0000000500)=[{0x0, 0xf}, {}], 0x2) r1 = semget(0x3, 0x0, 0x0) semctl$GETNCNT(r1, 0x2, 0xe, 0x0) 00:32:26 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 00:32:27 executing program 0: r0 = socket(0x1, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x801) 00:32:27 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x802, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) [ 356.802738][T10178] x_tables: duplicate underflow at hook 3 00:32:27 executing program 1: r0 = mq_open(&(0x7f0000000000)='.h\x00', 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 00:32:27 executing program 3: pipe(&(0x7f00000041c0)={0xffffffffffffffff}) pipe(&(0x7f00000041c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000021c0)={0x20000010}) 00:32:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0xb, 0x101}, 0x14}}, 0x0) 00:32:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x3, 0x3, 0x801}, 0x14}}, 0x0) 00:32:27 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 00:32:27 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 00:32:27 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 00:32:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20400) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 00:32:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:32:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 00:32:27 executing program 0: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 00:32:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 00:32:27 executing program 1: r0 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) shmdt(r0) 00:32:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000002080)='net/ip_vs\x00') 00:32:27 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "c7a25e8ecd8664bc11cb8e7128c138c1e0cd2f7c6ca800df5081e6c1385a31ac52f23c41bfdb53ea6c98f1237df7dd46d256dfde646fefc499bbc6a12805d098"}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0) 00:32:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002400)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) 00:32:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@ipv4_delrule={0x1c, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x80}}, 0x1c}}, 0x0) 00:32:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:32:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:32:27 executing program 3: times(&(0x7f0000002b80)) 00:32:28 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40041, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xe4\xf3\xd2\xb6\x15\xd4\x00\x00\xb7\x89\x95\x82\x05Fu9/\xd4\xdf-t\xe2\xc9Z\xde0\x06*;Gt\x8eK^k\xcb\xc7\x95tm\x9f\xed\xe3\x86\xcb\xb3\x00\xab\x17\x97\x8e\n*n\xd3\x15\xdf\x855\xea\xa6\f_M\xf8-r\xe0:x\xf9\xc3\xd4\xe1\xddt\x90\xca~\xd7D\nw\xf0') openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x820ff68a6aaec8bd}, 0x20048010) r2 = socket(0x11, 0x800, 0xffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r3, r3) keyctl$unlink(0x9, r3, 0xfffffffffffffffc) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 00:32:28 executing program 0: pipe(&(0x7f0000002a00)={0xffffffffffffffff}) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) 00:32:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)=""/226, 0xe2) 00:32:28 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 00:32:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000000)="9a9b5065702b154d8b57417072d0e87a", 0x10) 00:32:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000340)) 00:32:28 executing program 0: pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'batadv0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:32:28 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') 00:32:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) [ 358.004297][ C1] hrtimer: interrupt took 64990 ns 00:32:28 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') 00:32:28 executing program 3: clock_adjtime(0x0, &(0x7f0000000100)={0xb82}) 00:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f00000002c0)=@un=@file={0x0, './file0\x00'}, 0x80) 00:32:28 executing program 0: socket(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000340)={0x9}, 0x0, 0x0, 0x0, 0x0) 00:32:28 executing program 5: accept4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) 00:32:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0xd, 0x6, 0x101}, 0x14}}, 0x0) 00:32:28 executing program 2: modify_ldt$write(0x1, &(0x7f0000000100)={0x91f}, 0x10) modify_ldt$write(0x1, &(0x7f0000000280), 0x10) 00:32:28 executing program 3: pkey_mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 00:32:28 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 00:32:28 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xa265) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) 00:32:28 executing program 5: r0 = socket(0x1, 0x1, 0x0) io_setup(0x1ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 00:32:29 executing program 4: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x3000)=nil) 00:32:29 executing program 3: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0) 00:32:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv4_delrule={0x30, 0x21, 0x9, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x30}}, 0x0) 00:32:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$char_usb(r0, 0x0, 0x0) 00:32:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x801}, 0x14}}, 0x0) 00:32:29 executing program 2: r0 = socket(0x2, 0xa, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) [ 358.950867][T10293] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 00:32:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:32:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0xc0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'lo\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:32:29 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='.\x00'}, 0x10) 00:32:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002800)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@nested={0x5, 0x2, 0x0, 0x1, [@generic="fc"]}]}, 0x1c}}, 0x0) 00:32:29 executing program 5: r0 = socket(0x1, 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) 00:32:29 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20080, 0x0) [ 359.137039][T10299] x_tables: duplicate underflow at hook 3 00:32:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:32:29 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0xc0843, 0x0) 00:32:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@ipv4_delrule={0x28, 0x21, 0x9, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 00:32:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 00:32:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:32:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000180)='syz1\x00') 00:32:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002800)={0x18, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) 00:32:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001200)=@add_del={0x2, &(0x7f00000011c0)='veth0\x00'}) 00:32:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x5, 0x1, 0x801}, 0x14}}, 0x0) 00:32:29 executing program 2: unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00') read$FUSE(r0, 0x0, 0x0) 00:32:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$char_usb(r0, 0x0, 0x0) 00:32:29 executing program 0: timer_create(0x0, &(0x7f0000002040)={0x0, 0x8}, &(0x7f0000002080)) 00:32:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@dev}, 0x14) 00:32:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x2, 0x2, 0xd8, 0x7ff}, {0x0, 0x2, 0x1f, 0x7}, {0x1f, 0xf7, 0x4, 0x2d7e59db}, {0x2, 0x6, 0x0, 0x7ff}, {0x0, 0xce, 0x6, 0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x1, 0x7fff}) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @dev={0xfe, 0x80, [0x8, 0x2, 0x3, 0x3, 0x0, 0x4, 0x7, 0xc, 0x14, 0xb, 0x3, 0x8, 0x6]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002500), 0x1}, 0x4880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @dev={0xfe, 0x80, [0x8, 0x2, 0x3, 0x3, 0x0, 0x4, 0x7, 0xc, 0x14, 0xb, 0x3, 0x8, 0x6], 0xe3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="080004", @ANYRES32=r7, @ANYBLOB='\b\x00\v', @ANYRES32, @ANYBLOB="08000b00290300040038bec50a4c6c2e3bd4e885000000000000000095c47910ec10b8d2ab1b66c3129b72d2c2a63a9576c16eb0", @ANYRES64=r8, @ANYBLOB="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"], 0x70}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x4, 0x7f, 0x6, 0xf68f, 0x20, @private1={0xfc, 0x1, [], 0x1}, @private0, 0x1, 0x8, 0x6f, 0x3}}) connect$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x6, r2, 0x1, 0x63, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)) ioctl$PIO_FONTX(r0, 0x4b66, &(0x7f0000000040)={0x1201, 0x42, &(0x7f0000000080)="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"}) 00:32:30 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x22060400) r0 = gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x4, 0x2, 0x5, r1}, &(0x7f00000002c0)=0x10) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x87a0, 0x6, @private1, @private0, 0x10, 0x7800, 0x9, 0x2}}) bind(0xffffffffffffffff, &(0x7f0000000180)=@can={0x1d, r2}, 0x80) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r3, &(0x7f0000004200)='t', 0xfff0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x1, 0x3}) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) 00:32:30 executing program 2: perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:32:30 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x0) 00:32:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000140)={0x80, 0xed6a}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c6]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000180)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:32:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x138, 0x0, 0x800, 0xffffffff, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000000}, 0x41) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 360.000421][T10350] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:32:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x2, 'veth0_virt_wifi\x00'}) [ 360.065477][ T36] audit: type=1800 audit(1607992350.355:2): pid=10355 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15818 res=0 errno=0 00:32:30 executing program 2: io_setup(0xffff, &(0x7f0000000000)=0x0) io_destroy(r0) [ 360.114235][T10353] IPVS: ftp: loaded support on port[0] = 21 00:32:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000001940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 00:32:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000000)) 00:32:30 executing program 3: mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1b131, 0xffffffffffffffff, 0x0) 00:32:30 executing program 1: mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4, 0x1b031, 0xffffffffffffffff, 0x0) [ 360.414536][ T36] audit: type=1800 audit(1607992350.705:3): pid=10355 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15818 res=0 errno=0 00:32:30 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 00:32:31 executing program 3: getrusage(0x0, &(0x7f0000000100)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 00:32:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:32:31 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100), 0x8) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) 00:32:31 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') 00:32:31 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 00:32:31 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x22060400) r0 = gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x4, 0x2, 0x5, r1}, &(0x7f00000002c0)=0x10) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x87a0, 0x6, @private1, @private0, 0x10, 0x7800, 0x9, 0x2}}) bind(0xffffffffffffffff, &(0x7f0000000180)=@can={0x1d, r2}, 0x80) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r3, &(0x7f0000004200)='t', 0xfff0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x1, 0x3}) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) 00:32:31 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 00:32:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x4, 0x4) 00:32:31 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 360.887961][ T36] audit: type=1800 audit(1607992351.175:4): pid=10414 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15834 res=0 errno=0 00:32:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)) 00:32:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001380)={0x0, 0x0}, 0x10) 00:32:31 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x22060400) r0 = gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x4, 0x2, 0x5, r1}, &(0x7f00000002c0)=0x10) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x87a0, 0x6, @private1, @private0, 0x10, 0x7800, 0x9, 0x2}}) bind(0xffffffffffffffff, &(0x7f0000000180)=@can={0x1d, r2}, 0x80) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r3, &(0x7f0000004200)='t', 0xfff0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x1, 0x3}) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) 00:32:31 executing program 5: mq_open(&(0x7f0000000000)='.h\x00', 0x0, 0x0, 0x0) 00:32:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x77359400}) 00:32:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'tunl0\x00'}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3cb) 00:32:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) 00:32:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) [ 361.282246][ T36] audit: type=1800 audit(1607992351.565:5): pid=10434 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15821 res=0 errno=0 00:32:31 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) 00:32:31 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') 00:32:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000380)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, r1}, 0xc) 00:32:31 executing program 4: unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00') sendmsg$nl_netfilter(r0, 0x0, 0x0) 00:32:31 executing program 5: pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000), 0x8) pipe2$9p(&(0x7f00000015c0), 0x0) 00:32:31 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x22060400) r0 = gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x4, 0x2, 0x5, r1}, &(0x7f00000002c0)=0x10) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x87a0, 0x6, @private1, @private0, 0x10, 0x7800, 0x9, 0x2}}) bind(0xffffffffffffffff, &(0x7f0000000180)=@can={0x1d, r2}, 0x80) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r3, &(0x7f0000004200)='t', 0xfff0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x1, 0x3}) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) [ 361.600027][T10452] x_tables: duplicate underflow at hook 3 [ 361.653008][T10460] ptrace attach of "/root/syz-executor.0"[10459] was attempted by "/root/syz-executor.0"[10460] [ 361.683180][ T36] audit: type=1800 audit(1607992351.965:6): pid=10459 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15834 res=0 errno=0 00:32:32 executing program 1: semop(0x0, &(0x7f0000000000)=[{0x0, 0x1000}], 0x1) 00:32:32 executing program 3: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 00:32:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000380)='./file0\x00') 00:32:32 executing program 4: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f0000000500)=[{0x3, 0xf}, {}], 0x2) 00:32:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0)) 00:32:32 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f000000b380)='net/mcfilter\x00') 00:32:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 00:32:32 executing program 2: mmap$perf(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6, 0x1a032, 0xffffffffffffffff, 0x0) 00:32:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') read$char_usb(r0, &(0x7f0000000180)=""/4096, 0x1000) r1 = dup(r0) read$eventfd(r1, 0x0, 0x0) 00:32:32 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:32:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 00:32:32 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:32:32 executing program 3: rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f00000000c0)) 00:32:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/netlink\x00') write$FUSE_BMAP(r0, 0x0, 0x0) 00:32:32 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') write$FUSE_DIRENT(r0, 0x0, 0x0) 00:32:32 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') 00:32:32 executing program 2: getresgid(0x0, 0x0, &(0x7f00000002c0)) 00:32:32 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000240)="d9", 0x1}], 0x3}, 0x0) 00:32:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 00:32:32 executing program 4: semop(0x0, &(0x7f0000000000)=[{0x1}, {0x0, 0x0, 0x1800}], 0x2) 00:32:32 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:32:32 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x3}}) 00:32:32 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 00:32:32 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000040)="7b8c37b198f3df28", 0x8, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 00:32:33 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) rt_sigreturn() 00:32:33 executing program 2: socket(0x25, 0x1, 0x2) 00:32:33 executing program 1: fchmodat(0xffffffffffffffff, 0x0, 0x2f5cbbd5b97d2130) 00:32:33 executing program 5: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) rt_sigreturn() 00:32:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:32:33 executing program 0: fchownat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x500) 00:32:33 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) 00:32:33 executing program 5: pipe2$9p(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r0, &(0x7f0000001e00)={0x18}, 0x18) 00:32:33 executing program 4: socket$inet6(0x1c, 0x0, 0xfb) 00:32:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 00:32:33 executing program 1: r0 = socket(0x28, 0x1, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2}, 0xc, &(0x7f0000000180)={0x0, 0x7ffff000}}, 0x0) 00:32:33 executing program 5: getresgid(&(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:32:33 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x140, 0x0) 00:32:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 00:32:33 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 00:32:33 executing program 2: r0 = socket(0x28, 0x1, 0x0) bind$phonet(r0, &(0x7f0000000040), 0x10) 00:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 00:32:33 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x4, 0x0) read$midi(r0, 0x0, 0x0) 00:32:33 executing program 2: getitimer(0x0, &(0x7f0000000700)) 00:32:33 executing program 5: getresuid(&(0x7f0000003080), 0x0, 0x0) 00:32:33 executing program 3: r0 = socket(0xa, 0x5, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xa, 0x0, 0x0, 0xc0fe}, 0x200000cc, &(0x7f0000000180)={0x0, 0x7c}}, 0x0) 00:32:34 executing program 4: socket(0x1e, 0x4, 0x0) 00:32:34 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:34 executing program 2: clone3(&(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresuid(&(0x7f0000003080), &(0x7f00000030c0), &(0x7f0000003100)) 00:32:34 executing program 5: bpf$PROG_LOAD(0x17, 0x0, 0x0) 00:32:34 executing program 3: semop(0x0, &(0x7f0000000100)=[{0x0, 0x2}, {0x0, 0x0, 0x1000}], 0x2) 00:32:34 executing program 1: io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 00:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000580)=@un=@file={0x0, './file0\x00'}, 0x80) 00:32:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='setgroups\x00') pipe(&(0x7f00000041c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000004c0)) 00:32:34 executing program 5: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 00:32:34 executing program 2: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x30, &(0x7f0000000140)={@empty, @local, @val={@void}, {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @current}, {@random, @current}}}}}, 0x0) 00:32:34 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:34 executing program 3: r0 = socket(0x10, 0x2, 0x0) bind$phonet(r0, &(0x7f0000000000), 0x10) 00:32:34 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x20, 0x102) write$midi(r0, 0x0, 0x0) 00:32:34 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000040)={"1d91a9e0acb4549ad9cf2b2d2d88fc24593a9a39cb5727c5785dc2278f09"}) 00:32:34 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') 00:32:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x17}, 0x40) 00:32:35 executing program 3: clone3(&(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[0x0], 0x1}, 0x58) getresuid(&(0x7f0000003080), &(0x7f00000030c0), &(0x7f0000003100)) 00:32:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:32:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:32:35 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) clone3(&(0x7f0000002bc0)={0x2000100, 0x0, 0x0, 0x0, {0x2}, &(0x7f0000001ac0)=""/149, 0x95, 0x0, &(0x7f0000002b80)=[r0], 0x1}, 0x58) 00:32:35 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x80}) 00:32:35 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$qrtr(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x38) 00:32:35 executing program 5: syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x2, 0xe4202) 00:32:35 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 00:32:35 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40010003) 00:32:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 00:32:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x101200) read$midi(r0, 0x0, 0x5d) [ 365.551317][T10656] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 00:32:35 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:35 executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x440, 0x0, 0x15}, 0x18) 00:32:36 executing program 2: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x44202) 00:32:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dbbc48ef6edd8c56a50104ad3279f641", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:32:36 executing program 3: r0 = socket(0xa, 0x5, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 00:32:36 executing program 5: r0 = socket(0x29, 0x5, 0x0) sendmsg$qrtr(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e5", 0x1}], 0x1}, 0x38) 00:32:36 executing program 4: r0 = socket(0xa, 0x2, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x6300}, 0x200000cc, &(0x7f0000000180)={0x0, 0x7c}}, 0x0) 00:32:36 executing program 5: add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='^', 0x1, 0xfffffffffffffffd) 00:32:36 executing program 3: shmget$private(0x0, 0x4000, 0x54000aa0, &(0x7f0000ffc000/0x4000)=nil) 00:32:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000000c0), 0x4fe7d7245727f908) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'pids'}]}, 0x6) 00:32:36 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:36 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x13a) 00:32:36 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(0xfffffffffffffffd) 00:32:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) 00:32:36 executing program 3: r0 = socket(0x29, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'wg2\x00'}) 00:32:36 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1000000010, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)={0x1}) 00:32:36 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x13a) 00:32:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 00:32:36 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) 00:32:37 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000016c0)={&(0x7f00000015c0), 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14}, 0x14}}, 0x0) 00:32:37 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) 00:32:37 executing program 1: eventfd2(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0) 00:32:37 executing program 2: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/157) 00:32:37 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x10, 0x0) 00:32:37 executing program 3: r0 = socket(0x18, 0x800, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7c}}, 0x0) 00:32:37 executing program 1: r0 = socket(0xa, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 00:32:37 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x0, 0xffffff7f}, 0x200000cc, &(0x7f0000000180)={0x0, 0x7c}}, 0x0) getsockname(r0, 0x0, &(0x7f0000007f40)) 00:32:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:32:37 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f00000073c0)='/proc/self\x00', 0x0, 0x0) 00:32:37 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:37 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) 00:32:37 executing program 1: pselect6(0x40, &(0x7f0000001000), 0x0, &(0x7f0000001080)={0xfffffffffffff862}, 0x0, 0x0) 00:32:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 367.392029][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:32:37 executing program 2: syz_io_uring_setup(0x2a14, &(0x7f00000001c0)={0x0, 0xabcf, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:32:37 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, 0x0}, 0x38) [ 367.610771][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 367.649602][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:32:37 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'wg0\x00'}) 00:32:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:32:38 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 367.884285][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:32:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @mcast2, @loopback}}) [ 368.075090][T10781] kvm [10778]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702111 00:32:38 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) [ 368.150313][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 368.219999][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 368.257120][T10781] kvm [10778]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0 00:32:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:32:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:32:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:32:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:32:39 executing program 2: r0 = socket(0x10, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) [ 368.874748][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 368.880355][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 368.890201][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:32:39 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.914885][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:32:39 executing program 2: r0 = socket(0x18, 0x0, 0x0) getpeername$qrtr(r0, 0x0, &(0x7f0000000200)) 00:32:39 executing program 5: r0 = socket(0xa, 0x5, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2}, 0x200000cc, &(0x7f0000000180)={0x0, 0x7c}}, 0x0) 00:32:39 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x18, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 00:32:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 369.312031][T10814] kvm [10813]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702111 00:32:39 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f0000001080), &(0x7f00000010c0)={0x77359400}, &(0x7f0000001140)={&(0x7f0000001100)={[0x10000]}, 0x8}) [ 369.387061][T10814] kvm [10813]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0 00:32:39 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 00:32:39 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="c0", 0x1, 0xfffffffffffffffb) 00:32:39 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) 00:32:40 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:32:40 executing program 5: pselect6(0x40, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000003c0), 0x0) 00:32:40 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001680)={'ip6gre0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 00:32:40 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x20000404) 00:32:40 executing program 5: r0 = syz_usb_connect$uac1(0x0, 0xb2, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406b1201014000010217010902a00003010580000904000000010100000a2401000000020102082407000000057009040100000102000009040101010102000109240201c1010120ad0a24020202000400008609050109080006037f0725018301018009040200000102000909040201010102011f0e240201070400007f6879538c6c092402020400010080072401040602100824020100000000090582090800050022072501a5"], &(0x7f0000000100)=ANY=[@ANYBLOB="9eb4e483e594dfe37454657b91089bd64d5d4d64b5ab79098d"]) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 00:32:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 370.110407][T10843] kvm [10841]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702111 00:32:40 executing program 3: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0) 00:32:40 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_to_bond\x00'}) [ 370.195592][T10843] kvm [10841]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0 00:32:40 executing program 2: r0 = socket(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0x1}}, 0x26) 00:32:40 executing program 3: pselect6(0x40, &(0x7f0000001000), &(0x7f0000001040), 0x0, &(0x7f00000010c0)={0x77359400}, &(0x7f0000001140)={&(0x7f0000001100)={[0x10000]}, 0x8}) 00:32:40 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_to_bond\x00'}) 00:32:40 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 370.564447][ T9834] usb 6-1: new high-speed USB device number 2 using dummy_hcd 00:32:41 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_to_bond\x00'}) 00:32:41 executing program 2: r0 = socket(0xa, 0x2, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xa, 0x0, 0x0, 0x2}, 0x200000cc, &(0x7f0000000180)={0x0, 0x7c}}, 0x0) 00:32:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback, 0x57fd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:32:41 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000001480000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000800000019b1179287"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 370.976217][ T9834] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 371.010637][ T9834] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 371.050957][ T9834] usb 6-1: config 1 has no interface number 1 [ 371.091508][ T9834] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 371.225328][T10885] kvm [10883]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702111 [ 371.384545][ T9834] usb 6-1: string descriptor 0 read error: -22 [ 371.391176][ T9834] usb 6-1: New USB device found, idVendor=126b, idProduct=0101, bcdDevice= 0.40 [ 371.400564][ T9834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=23 [ 371.459306][ T9834] ================================================================================ [ 371.480305][ T9834] UBSAN: shift-out-of-bounds in sound/usb/format.c:44:17 [ 371.492604][ T9834] shift exponent 4098 is too large for 64-bit type 'long long unsigned int' [ 371.518696][ T9834] CPU: 1 PID: 9834 Comm: kworker/1:5 Not tainted 5.10.0-rc7-next-20201210-syzkaller #0 [ 371.528383][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.538460][ T9834] Workqueue: usb_hub_wq hub_event [ 371.543554][ T9834] Call Trace: [ 371.546846][ T9834] dump_stack+0x107/0x163 [ 371.551182][ T9834] ubsan_epilogue+0xb/0x5a [ 371.555608][ T9834] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 371.562385][ T9834] parse_audio_format_i.cold+0xba/0x3e2 [ 371.567935][ T9834] snd_usb_parse_audio_format+0x89/0x290 [ 371.573567][ T9834] __snd_usb_parse_audio_interface+0xce4/0x3cf0 [ 371.579845][ T9834] ? mutex_lock_io_nested+0xf60/0xf60 [ 371.585222][ T9834] ? __snd_usb_add_audio_stream+0xed0/0xed0 [ 371.591128][ T9834] ? __mutex_unlock_slowpath+0xe2/0x610 [ 371.596682][ T9834] snd_usb_parse_audio_interface+0x79/0x130 [ 371.602572][ T9834] ? snd_usb_add_audio_stream+0x30/0x30 [ 371.608114][ T9834] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 371.613829][ T9834] ? usb_ifnum_to_if+0x16d/0x1d0 [ 371.618765][ T9834] snd_usb_create_stream.isra.0+0x23a/0x530 [ 371.624660][ T9834] usb_audio_probe+0x93c/0x2ab0 [ 371.629514][ T9834] ? snd_usb_create_stream.isra.0+0x530/0x530 [ 371.635579][ T9834] ? mark_held_locks+0x9f/0xe0 [ 371.640347][ T9834] ? ktime_get_mono_fast_ns+0x181/0x220 [ 371.645887][ T9834] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 371.651692][ T9834] usb_probe_interface+0x315/0x7f0 [ 371.656801][ T9834] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 371.662175][ T9834] really_probe+0x2b1/0xe40 [ 371.666673][ T9834] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 371.672911][ T9834] driver_probe_device+0x285/0x3f0 [ 371.678023][ T9834] __device_attach_driver+0x216/0x2d0 [ 371.683393][ T9834] ? driver_allows_async_probing+0x170/0x170 [ 371.689364][ T9834] bus_for_each_drv+0x15f/0x1e0 [ 371.694211][ T9834] ? bus_for_each_dev+0x1d0/0x1d0 [ 371.699238][ T9834] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 371.705036][ T9834] ? lockdep_hardirqs_on+0x79/0x100 [ 371.710227][ T9834] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 371.716030][ T9834] __device_attach+0x228/0x4c0 [ 371.720790][ T9834] ? really_probe+0xe40/0xe40 [ 371.725465][ T9834] ? kobject_uevent_env+0x2bb/0x1680 [ 371.730755][ T9834] bus_probe_device+0x1e4/0x290 [ 371.735605][ T9834] device_add+0xbb2/0x1ce0 [ 371.740027][ T9834] ? devlink_add_symlinks+0x450/0x450 [ 371.745403][ T9834] ? kfree+0xdb/0x3c0 [ 371.749378][ T9834] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 371.755632][ T9834] usb_set_configuration+0x113c/0x1910 [ 371.761106][ T9834] usb_generic_driver_probe+0xba/0x100 [ 371.766561][ T9834] usb_probe_device+0xd9/0x2c0 [ 371.771341][ T9834] ? usb_driver_release_interface+0x180/0x180 [ 371.777412][ T9834] really_probe+0x2b1/0xe40 [ 371.781907][ T9834] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 371.788146][ T9834] driver_probe_device+0x285/0x3f0 [ 371.793256][ T9834] __device_attach_driver+0x216/0x2d0 [ 371.798629][ T9834] ? driver_allows_async_probing+0x170/0x170 [ 371.804605][ T9834] bus_for_each_drv+0x15f/0x1e0 [ 371.809453][ T9834] ? bus_for_each_dev+0x1d0/0x1d0 [ 371.814470][ T9834] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 371.820269][ T9834] ? lockdep_hardirqs_on+0x79/0x100 [ 371.825459][ T9834] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 371.831273][ T9834] __device_attach+0x228/0x4c0 [ 371.836035][ T9834] ? really_probe+0xe40/0xe40 [ 371.840708][ T9834] ? kobject_uevent_env+0x2bb/0x1680 [ 371.845992][ T9834] bus_probe_device+0x1e4/0x290 [ 371.850854][ T9834] device_add+0xbb2/0x1ce0 [ 371.855264][ T9834] ? devlink_add_symlinks+0x450/0x450 [ 371.860629][ T9834] ? kfree+0xdb/0x3c0 [ 371.864616][ T9834] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 371.870877][ T9834] usb_new_device.cold+0x725/0x1057 [ 371.876086][ T9834] ? hub_disconnect+0x510/0x510 [ 371.880932][ T9834] ? rwlock_bug.part.0+0x90/0x90 [ 371.885976][ T9834] ? _raw_spin_unlock_irq+0x1f/0x40 [ 371.891174][ T9834] hub_event+0x2348/0x42d0 [ 371.895619][ T9834] ? hub_port_debounce+0x3b0/0x3b0 [ 371.900737][ T9834] ? lock_release+0x710/0x710 [ 371.905409][ T9834] ? lock_downgrade+0x6d0/0x6d0 [ 371.910255][ T9834] ? do_raw_spin_lock+0x120/0x2b0 [ 371.915303][ T9834] process_one_work+0x98d/0x1630 [ 371.920246][ T9834] ? pwq_dec_nr_in_flight+0x320/0x320 [ 371.925619][ T9834] ? rwlock_bug.part.0+0x90/0x90 [ 371.930551][ T9834] ? _raw_spin_lock_irq+0x41/0x50 [ 371.935586][ T9834] worker_thread+0x64c/0x1120 [ 371.940279][ T9834] ? __kthread_parkme+0x13f/0x1e0 [ 371.945305][ T9834] ? process_one_work+0x1630/0x1630 [ 371.950500][ T9834] kthread+0x3b1/0x4a0 [ 371.954577][ T9834] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 371.960473][ T9834] ret_from_fork+0x1f/0x30 [ 372.091639][ T9834] ================================================================================ [ 372.103970][ T9834] Kernel panic - not syncing: panic_on_warn set ... [ 372.110674][ T9834] CPU: 1 PID: 9834 Comm: kworker/1:5 Not tainted 5.10.0-rc7-next-20201210-syzkaller #0 [ 372.120319][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.130641][ T9834] Workqueue: usb_hub_wq hub_event [ 372.135676][ T9834] Call Trace: [ 372.138955][ T9834] dump_stack+0x107/0x163 [ 372.143280][ T9834] panic+0x343/0x77f [ 372.147169][ T9834] ? __warn_printk+0xf3/0xf3 [ 372.151761][ T9834] ? ubsan_epilogue+0x3e/0x5a [ 372.156908][ T9834] ubsan_epilogue+0x54/0x5a [ 372.161419][ T9834] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 372.168195][ T9834] parse_audio_format_i.cold+0xba/0x3e2 [ 372.173750][ T9834] snd_usb_parse_audio_format+0x89/0x290 [ 372.179386][ T9834] __snd_usb_parse_audio_interface+0xce4/0x3cf0 [ 372.185648][ T9834] ? mutex_lock_io_nested+0xf60/0xf60 [ 372.191056][ T9834] ? __snd_usb_add_audio_stream+0xed0/0xed0 [ 372.196964][ T9834] ? __mutex_unlock_slowpath+0xe2/0x610 [ 372.202514][ T9834] snd_usb_parse_audio_interface+0x79/0x130 [ 372.208409][ T9834] ? snd_usb_add_audio_stream+0x30/0x30 [ 372.213954][ T9834] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 372.219670][ T9834] ? usb_ifnum_to_if+0x16d/0x1d0 [ 372.224607][ T9834] snd_usb_create_stream.isra.0+0x23a/0x530 [ 372.230500][ T9834] usb_audio_probe+0x93c/0x2ab0 [ 372.235354][ T9834] ? snd_usb_create_stream.isra.0+0x530/0x530 [ 372.241419][ T9834] ? mark_held_locks+0x9f/0xe0 [ 372.246174][ T9834] ? ktime_get_mono_fast_ns+0x181/0x220 [ 372.251713][ T9834] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 372.257529][ T9834] usb_probe_interface+0x315/0x7f0 [ 372.262662][ T9834] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 372.268055][ T9834] really_probe+0x2b1/0xe40 [ 372.272564][ T9834] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 372.278807][ T9834] driver_probe_device+0x285/0x3f0 [ 372.283947][ T9834] __device_attach_driver+0x216/0x2d0 [ 372.289314][ T9834] ? driver_allows_async_probing+0x170/0x170 [ 372.295283][ T9834] bus_for_each_drv+0x15f/0x1e0 [ 372.300126][ T9834] ? bus_for_each_dev+0x1d0/0x1d0 [ 372.305149][ T9834] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 372.310959][ T9834] ? lockdep_hardirqs_on+0x79/0x100 [ 372.316165][ T9834] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 372.321967][ T9834] __device_attach+0x228/0x4c0 [ 372.326736][ T9834] ? really_probe+0xe40/0xe40 [ 372.331411][ T9834] ? kobject_uevent_env+0x2bb/0x1680 [ 372.336729][ T9834] bus_probe_device+0x1e4/0x290 [ 372.341584][ T9834] device_add+0xbb2/0x1ce0 [ 372.345997][ T9834] ? devlink_add_symlinks+0x450/0x450 [ 372.351358][ T9834] ? kfree+0xdb/0x3c0 [ 372.355333][ T9834] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 372.361580][ T9834] usb_set_configuration+0x113c/0x1910 [ 372.367048][ T9834] usb_generic_driver_probe+0xba/0x100 [ 372.372498][ T9834] usb_probe_device+0xd9/0x2c0 [ 372.377270][ T9834] ? usb_driver_release_interface+0x180/0x180 [ 372.383328][ T9834] really_probe+0x2b1/0xe40 [ 372.387820][ T9834] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 372.394055][ T9834] driver_probe_device+0x285/0x3f0 [ 372.399164][ T9834] __device_attach_driver+0x216/0x2d0 [ 372.404527][ T9834] ? driver_allows_async_probing+0x170/0x170 [ 372.410507][ T9834] bus_for_each_drv+0x15f/0x1e0 [ 372.415356][ T9834] ? bus_for_each_dev+0x1d0/0x1d0 [ 372.420367][ T9834] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 372.426164][ T9834] ? lockdep_hardirqs_on+0x79/0x100 [ 372.431352][ T9834] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 372.437156][ T9834] __device_attach+0x228/0x4c0 [ 372.441914][ T9834] ? really_probe+0xe40/0xe40 [ 372.446597][ T9834] ? kobject_uevent_env+0x2bb/0x1680 [ 372.451877][ T9834] bus_probe_device+0x1e4/0x290 [ 372.456720][ T9834] device_add+0xbb2/0x1ce0 [ 372.461142][ T9834] ? devlink_add_symlinks+0x450/0x450 [ 372.466506][ T9834] ? kfree+0xdb/0x3c0 [ 372.470498][ T9834] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 372.476740][ T9834] usb_new_device.cold+0x725/0x1057 [ 372.481948][ T9834] ? hub_disconnect+0x510/0x510 [ 372.486793][ T9834] ? rwlock_bug.part.0+0x90/0x90 [ 372.491727][ T9834] ? _raw_spin_unlock_irq+0x1f/0x40 [ 372.496921][ T9834] hub_event+0x2348/0x42d0 [ 372.501358][ T9834] ? hub_port_debounce+0x3b0/0x3b0 [ 372.506480][ T9834] ? lock_release+0x710/0x710 [ 372.511150][ T9834] ? lock_downgrade+0x6d0/0x6d0 [ 372.515992][ T9834] ? do_raw_spin_lock+0x120/0x2b0 [ 372.521023][ T9834] process_one_work+0x98d/0x1630 [ 372.525963][ T9834] ? pwq_dec_nr_in_flight+0x320/0x320 [ 372.531355][ T9834] ? rwlock_bug.part.0+0x90/0x90 [ 372.536287][ T9834] ? _raw_spin_lock_irq+0x41/0x50 [ 372.541313][ T9834] worker_thread+0x64c/0x1120 [ 372.545992][ T9834] ? __kthread_parkme+0x13f/0x1e0 [ 372.551013][ T9834] ? process_one_work+0x1630/0x1630 [ 372.556207][ T9834] kthread+0x3b1/0x4a0 [ 372.560270][ T9834] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 372.566161][ T9834] ret_from_fork+0x1f/0x30 [ 372.571456][ T9834] Kernel Offset: disabled [ 372.575966][ T9834] Rebooting in 86400 seconds..