[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.147' (ECDSA) to the list of known hosts. 2020/07/20 18:48:56 fuzzer started 2020/07/20 18:48:56 dialing manager at 10.128.0.26:44663 2020/07/20 18:48:56 syscalls: 3069 2020/07/20 18:48:56 code coverage: enabled 2020/07/20 18:48:56 comparison tracing: enabled 2020/07/20 18:48:56 extra coverage: enabled 2020/07/20 18:48:56 setuid sandbox: enabled 2020/07/20 18:48:56 namespace sandbox: enabled 2020/07/20 18:48:56 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/20 18:48:56 fault injection: enabled 2020/07/20 18:48:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/20 18:48:56 net packet injection: enabled 2020/07/20 18:48:56 net device setup: enabled 2020/07/20 18:48:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/20 18:48:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/20 18:48:56 USB emulation: enabled 18:51:29 executing program 0: syzkaller login: [ 212.562788][ T6855] IPVS: ftp: loaded support on port[0] = 21 18:51:30 executing program 1: [ 212.709674][ T6855] chnl_net:caif_netlink_parms(): no params data found [ 212.808322][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.817496][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.825834][ T6855] device bridge_slave_0 entered promiscuous mode [ 212.836867][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.844099][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.853469][ T6855] device bridge_slave_1 entered promiscuous mode [ 212.887250][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.900513][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.934266][ T6855] team0: Port device team_slave_0 added [ 212.942896][ T6855] team0: Port device team_slave_1 added [ 212.967478][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.976311][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.998767][ T7009] IPVS: ftp: loaded support on port[0] = 21 [ 213.006003][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.024612][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.031592][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.059999][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 18:51:30 executing program 2: [ 213.225643][ T6855] device hsr_slave_0 entered promiscuous mode [ 213.286727][ T7033] IPVS: ftp: loaded support on port[0] = 21 [ 213.322372][ T6855] device hsr_slave_1 entered promiscuous mode 18:51:30 executing program 3: [ 213.633508][ T7009] chnl_net:caif_netlink_parms(): no params data found [ 213.716197][ T7176] IPVS: ftp: loaded support on port[0] = 21 [ 213.827836][ T7033] chnl_net:caif_netlink_parms(): no params data found 18:51:31 executing program 4: [ 213.958309][ T6855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.033744][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.041040][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.063848][ T7009] device bridge_slave_0 entered promiscuous mode [ 214.105398][ T6855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.170262][ T7328] IPVS: ftp: loaded support on port[0] = 21 [ 214.175066][ T6855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.214989][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.226252][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.235820][ T7009] device bridge_slave_1 entered promiscuous mode 18:51:31 executing program 5: [ 214.273673][ T6855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.405499][ T7009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.425722][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.438980][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.448763][ T7033] device bridge_slave_0 entered promiscuous mode [ 214.460990][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.469060][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.478510][ T7033] device bridge_slave_1 entered promiscuous mode [ 214.499045][ T7009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.596607][ T7380] IPVS: ftp: loaded support on port[0] = 21 [ 214.600948][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.636484][ T7009] team0: Port device team_slave_0 added [ 214.667549][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.702847][ T7033] team0: Port device team_slave_0 added [ 214.710247][ T7009] team0: Port device team_slave_1 added [ 214.741046][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.749135][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.777244][ T7009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.794187][ T7033] team0: Port device team_slave_1 added [ 214.843864][ T7176] chnl_net:caif_netlink_parms(): no params data found [ 214.888293][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.896872][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.923644][ T7009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.996518][ T7328] chnl_net:caif_netlink_parms(): no params data found [ 215.010099][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.018345][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.044923][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.093750][ T7009] device hsr_slave_0 entered promiscuous mode [ 215.142182][ T7009] device hsr_slave_1 entered promiscuous mode [ 215.181943][ T7009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.189823][ T7009] Cannot create hsr debugfs directory [ 215.214592][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.221564][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.248676][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.365416][ T7033] device hsr_slave_0 entered promiscuous mode [ 215.422582][ T7033] device hsr_slave_1 entered promiscuous mode [ 215.462034][ T7033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.469599][ T7033] Cannot create hsr debugfs directory [ 215.475345][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.482647][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.490327][ T7176] device bridge_slave_0 entered promiscuous mode [ 215.501585][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.508889][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.517123][ T7176] device bridge_slave_1 entered promiscuous mode [ 215.582108][ T7176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.623150][ T7176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.816444][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.827932][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.838974][ T7328] device bridge_slave_0 entered promiscuous mode [ 215.865078][ T7176] team0: Port device team_slave_0 added [ 215.877418][ T7009] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.951617][ T7176] team0: Port device team_slave_1 added [ 215.958659][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.965959][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.974457][ T7328] device bridge_slave_1 entered promiscuous mode [ 215.986801][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.995670][ T7380] chnl_net:caif_netlink_parms(): no params data found [ 216.005813][ T7009] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.089162][ T7009] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.148534][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.156629][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.183104][ T7176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.199448][ T7328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.216454][ T7009] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.278453][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.285783][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.311971][ T7176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.325405][ T7328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.367040][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.422641][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.432362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.451013][ T7328] team0: Port device team_slave_0 added [ 216.480194][ T7328] team0: Port device team_slave_1 added [ 216.495116][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.504468][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.514227][ T3896] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.521431][ T3896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.565600][ T7176] device hsr_slave_0 entered promiscuous mode [ 216.632475][ T7176] device hsr_slave_1 entered promiscuous mode [ 216.672034][ T7176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.679622][ T7176] Cannot create hsr debugfs directory [ 216.709716][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.718361][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.728001][ T7380] device bridge_slave_0 entered promiscuous mode [ 216.739342][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.748893][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.756702][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.786503][ T7328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.801448][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.809002][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.835807][ T7328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.853451][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.860540][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.872769][ T7380] device bridge_slave_1 entered promiscuous mode [ 216.915894][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.925078][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.934341][ T3896] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.941395][ T3896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.014892][ T7328] device hsr_slave_0 entered promiscuous mode [ 217.083452][ T7328] device hsr_slave_1 entered promiscuous mode [ 217.142517][ T7328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.150101][ T7328] Cannot create hsr debugfs directory [ 217.157265][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.169332][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.185557][ T7033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.245221][ T7033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.305269][ T7033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.366965][ T7033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.425195][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.463191][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.494539][ T7380] team0: Port device team_slave_0 added [ 217.538834][ T7380] team0: Port device team_slave_1 added [ 217.556534][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.565849][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.606216][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.615013][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.623962][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.638836][ T6855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.649883][ T6855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.690794][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.699934][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.711067][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.720121][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.729108][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.739845][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.749769][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.779572][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.795424][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.803140][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.830555][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.906329][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.967051][ T7380] device hsr_slave_0 entered promiscuous mode [ 218.022356][ T7380] device hsr_slave_1 entered promiscuous mode [ 218.052541][ T7380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.060126][ T7380] Cannot create hsr debugfs directory [ 218.097132][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.104672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.239363][ T7176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.281238][ T7176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.349807][ T7009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.394907][ T7176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.434055][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.443377][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.467238][ T7009] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.483354][ T7176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.524995][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.535325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.543982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.553682][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.562899][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.569991][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.602414][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.610549][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.622831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.631184][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.638766][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.647007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.655996][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.664466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.687429][ T6855] device veth0_vlan entered promiscuous mode [ 218.699531][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.708115][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.752021][ T6855] device veth1_vlan entered promiscuous mode [ 218.772812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.781054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.790810][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.800985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.810834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.820234][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.828952][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.837685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.849186][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.869510][ T7009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.883875][ T7009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.912994][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.921283][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.938442][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.948018][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.962556][ T7328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.019118][ T7328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.064176][ T7328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.105562][ T7328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.197504][ T7380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.267299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.276495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.288190][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.313155][ T7380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.354394][ T7380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.439721][ T6855] device veth0_macvtap entered promiscuous mode [ 219.449012][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.458271][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.466966][ T2484] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.474113][ T2484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.481928][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.489605][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.497262][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.506361][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.515488][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.525437][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.534527][ T2484] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.541589][ T2484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.550395][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.558994][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.576067][ T7380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.653932][ T7009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.681702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.713061][ T6855] device veth1_macvtap entered promiscuous mode [ 219.725820][ T7176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.733296][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.741263][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.790026][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.805174][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.816393][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.830851][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.864747][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.876142][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.885880][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.895500][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.904859][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.913992][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.924390][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.933272][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.946673][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.971620][ T7033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.985698][ T7033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.997380][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.007147][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.016735][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.025692][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.033682][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.042000][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.065635][ T7176] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.108009][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.118119][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.127201][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.134356][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.142643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.150805][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.202553][ T7009] device veth0_vlan entered promiscuous mode [ 220.215403][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.241413][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.251659][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.260162][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.268298][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.276545][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.284652][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.293993][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.302999][ T3896] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.310111][ T3896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.318242][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.339078][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.412891][ T7009] device veth1_vlan entered promiscuous mode [ 220.430553][ T7328] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.438724][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.449136][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.458314][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.467651][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.476313][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.485344][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.582230][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.596901][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.605748][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.621218][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.631445][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.647234][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.674753][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.681828][ T8090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.705077][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 18:51:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x11, &(0x7f0000000580)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}, 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x2e, &(0x7f00000006c0)=@string={0x2e, 0x3, "83f60ab3b8ad51c48b1943dfaa5ee6564f465808a0686210c0b1694014f6188215825408fa5f0587dfd989dd"}}]}) [ 220.718747][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.729890][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.745713][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.760217][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.767383][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.782218][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.790792][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.810361][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.823439][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.848579][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.856983][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.890130][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.924811][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.933020][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.940720][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.950002][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.960375][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.969605][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.979414][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.987847][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.999406][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.021657][ T7009] device veth0_macvtap entered promiscuous mode [ 221.032433][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 221.058733][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.068562][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.076828][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.085011][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.095044][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.103976][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.114240][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.129244][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.137862][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.146801][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.155662][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.177055][ T7033] device veth0_vlan entered promiscuous mode [ 221.188441][ T7009] device veth1_macvtap entered promiscuous mode [ 221.206520][ T7176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.217119][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.226773][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.235163][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.246442][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.255425][ T2484] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.262579][ T2484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.270305][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.279649][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.288479][ T2484] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.295610][ T2484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.304832][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.320754][ T7033] device veth1_vlan entered promiscuous mode [ 221.332104][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.357356][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.367478][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.376512][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.394903][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.405622][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.420314][ T7009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.433646][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 221.449792][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.461632][ T7009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.475002][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.484245][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.494382][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.502693][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 221.518461][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.561384][ T17] usb 1-1: language id specifier not provided by device, defaulting to English [ 221.570947][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.580572][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.590783][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.600051][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.659090][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.668902][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.678391][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.702739][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.711813][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.726427][ T17] usb 1-1: Product: syz [ 221.730615][ T17] usb 1-1: Manufacturer: 댊궸쑑ᦋ庪囦䙏ࡘ梠ၢ뇀䁩舘舕ࡔ忺蜅򇶉 [ 221.741434][ T17] usb 1-1: SerialNumber: syz [ 221.755444][ T7176] device veth0_vlan entered promiscuous mode [ 221.770244][ T7328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.791522][ T7380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.805537][ T7380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.811121][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 221.823836][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.832185][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.841760][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.860435][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.870725][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.879722][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.888639][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.897297][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.969641][ T7176] device veth1_vlan entered promiscuous mode [ 222.017919][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.035755][ T8090] usb 1-1: USB disconnect, device number 2 [ 222.038777][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 18:51:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x4bfb, 0x0) [ 222.071337][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.081169][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.100053][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.118735][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.135195][ T7033] device veth0_macvtap entered promiscuous mode [ 222.183481][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.196144][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.240113][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.273377][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.311002][ T7033] device veth1_macvtap entered promiscuous mode [ 222.338643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.356560][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.375356][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.416858][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.473995][ T7328] device veth0_vlan entered promiscuous mode [ 222.511833][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.529799][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.589047][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.620093][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:51:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) read$fb(r2, &(0x7f0000000180)=""/213, 0xd5) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xbbf1, 0x80) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) geteuid() setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x90, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x12}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0224fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 222.641594][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.661012][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.685386][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.705025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.724104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.731952][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.748679][ T8140] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 222.761187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.776800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.788327][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.805858][ T7328] device veth1_vlan entered promiscuous mode [ 222.836726][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.848689][ T8141] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 222.864047][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.881802][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.899886][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.925834][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.961061][ T8140] device  entered promiscuous mode [ 222.985805][ T8141] device  left promiscuous mode [ 223.046198][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.058660][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.087868][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.115988][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.172167][ T7176] device veth0_macvtap entered promiscuous mode [ 223.204741][ T8140] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 18:51:40 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x8800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x13, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x10001) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x100) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)=0x80000000000000) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'vxcan1\x00', {0x2, 0x4e24, @local}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = open(&(0x7f0000000100)='./file1\x00', 0x164142, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x184, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f82ded3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80ce}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fd5cc0b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21bc68be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c44d66a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c9af2f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ed99594}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4500228a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a6f16ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e98}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4135}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ba1a323}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1da6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d50}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3779b878}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dde6b18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39c5f0d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x184}, 0x1, 0x0, 0x0, 0x8800}, 0x4000811) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="08030000", @ANYRES16=r4, @ANYBLOB="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"], 0x308}, 0x1, 0x0, 0x0, 0x800}, 0x44002) [ 223.224474][ T8141] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 223.254365][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.273661][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.295872][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.323570][ T7380] device veth0_vlan entered promiscuous mode [ 223.344409][ T8140] device  entered promiscuous mode [ 223.405363][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.421414][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.456698][ T7380] device veth1_vlan entered promiscuous mode [ 223.478846][ T8141] device  left promiscuous mode [ 223.563481][ T7176] device veth1_macvtap entered promiscuous mode [ 223.587990][ T7328] device veth0_macvtap entered promiscuous mode [ 223.607794][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.615863][ T8090] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 223.633779][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.654409][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.670539][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.690170][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.706925][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 18:51:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 223.742370][ T7328] device veth1_macvtap entered promiscuous mode [ 223.861475][ T7380] device veth0_macvtap entered promiscuous mode [ 223.873153][ T8090] usb 2-1: Using ep0 maxpacket: 8 [ 223.888421][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.907082][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.938848][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.945896][ C1] hrtimer: interrupt took 48266 ns [ 223.978822][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.992949][ T8090] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 224.019730][ T8090] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 224.042252][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.059732][ T8090] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 224.075423][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:51:41 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) sendfile(r2, r0, 0x0, 0x4000000000010046) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r6, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xaaa0}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x92}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x5c}}, 0x48001) [ 224.091553][ T8090] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.113676][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.130775][ T8090] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 224.142697][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.166522][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.185001][ T8090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.206068][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.241492][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.254131][ T8149] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 224.261301][ T8149] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 224.305740][ T7380] device veth1_macvtap entered promiscuous mode [ 224.333233][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.344564][ T8090] hub 2-1:1.0: bad descriptor, ignoring hub 18:51:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xfffd, 0x20, @local, 0x5}, 0x1c) sendmsg$inet6(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x1}], 0x1}, 0x4008060) [ 224.350582][ T8090] hub: probe of 2-1:1.0 failed with error -5 [ 224.368315][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.392009][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.425037][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.457005][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.493040][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.525570][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.560490][ T8149] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 224.576340][ T8149] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 224.586773][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.627095][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.634969][ T8172] syz-executor.2 (8172) used greatest stack depth: 22624 bytes left [ 224.657626][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.671443][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.699331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.730540][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.762292][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.789951][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.824470][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.857841][ T8090] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 18:51:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 18:51:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000240)) sendmmsg$inet(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/403], 0x30}}], 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000500)=[{{&(0x7f0000000340)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/62, 0x3e}], 0x3, &(0x7f0000000840)=""/4096, 0x1000}, 0x6}], 0x1, 0x100, &(0x7f0000000580)={r6, r7+10000000}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000005c0)={&(0x7f0000001840)={0x1370, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x100c, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x328, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, "c7b411a10dce07f0"}, @NL80211_BAND_5GHZ={0xe3, 0x1, "b1c293b8d28f85a1289bb4089c2089587da90f6bf6aaa331acdb20b2ed8e3e88d72bb5e1b8a9fab94f5b0e36cafccda4aa3e94db8e6f287c9def0f8563baa6d9f5638dbaeb6a3b09a732b837e994092785942c8091697991ac1fd6dfb69ea2266e84ae71e2e85f3f2e1ad1f335b921cf60ce91e2d232410fa6c94ebeae277478a4acc350efb9480d90ca26e195b9ec3b2ad6df1711f003f745d09594b200bc58052987bb9cda7789ba22d5f754b631389eb14102941ad12091c022995fc23e095b3c8e8d941b26d603b3ebdea56abf9e6613f9d4b755db368e1a2f55bd40da"}, @NL80211_BAND_60GHZ={0xe9, 0x2, "6f58a7a6afec127bfe0302e36e24cdb72b2631caa205f2733323f48b5845c31674272fb119b4ec6b8fbc57c70d84e8e08d4cc732147e321ac16fd7b97a790de41e1785fc269afd4cd4fd1960181683898b3c21fdf8e0123c4e5b88a88b8b5fc28323c8bef678eb42ef3166b13ae65f294153dd97cd38930a4913c4ef1b9dbcae5cf9cb814c24ee2cc5ccf0b36f067807eecc20eb9634f0d404b2371b4d8f2a6c05f2db310f4de380c21498e8c4174b4d3652418aa8e8c8d59915ff87333a2e4780edeb02226ea9ea49c53a912ec1aaf0b26586e74f51b4ccb3251bf6771dac06613b456c98"}, @NL80211_BAND_60GHZ={0x3d, 0x2, "5ea931fba68bb260746b49a8852f23b6c3e2112cb4bc78abd2e5291e9cc08cff1ed16ec97c91754b1d1027fe5bab1a988b5a1ed7bc6fe4d385"}, @NL80211_BAND_60GHZ={0x57, 0x2, "e102999bae9b1869f6cafb9a27aff95ecfdca0c1ec5fe0e9b3a683782eb0437674a5444b673ca8b15720452811e4121b6288b66790220aadfe14c66ccb6bca386a906f409c00cf512bb81446218c95cee22845"}, @NL80211_BAND_6GHZ={0x7f, 0x3, "794bd5d5b393a2916eff879467528da6a7a1fe127d6b4da41c6951be2202a81c7bfacdffeca1a85c75af291d99948190cb4195b19d269c09fc757f02b6893ffa7342dfd25cdec19b94b3b4cc98c1129a0ad80125478d6f33bf3f9fa4934ff193a1b942866eed8285e9875af0de4770e20eba5733b66873d0e621fa"}, @NL80211_BAND_2GHZ={0x2e, 0x0, "9a4ddf61716b4d8da3fa221cb8b4bd7b6879dc1f58189129a58d0aa3f31a2f6ef2077cb58ce4b84acc5c"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1370}, 0x1, 0x0, 0x0, 0x20000085}, 0x8000) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x400001, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x8) pidfd_send_signal(r9, 0xa, &(0x7f0000000280)={0x3, 0x800, 0x3}, 0x0) [ 224.876739][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.918174][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.970849][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.025126][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.045627][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.064062][ T8149] udc-core: couldn't find an available UDC or it's busy [ 225.071058][ T8149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.092562][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.133786][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.151339][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.175214][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.191145][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.243548][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.297734][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.350181][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.374538][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.389393][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.408199][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.445499][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.623150][ T8121] usb 2-1: USB disconnect, device number 2 [ 225.651285][ T8121] usblp0: removed [ 225.675925][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.693273][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.707728][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.724846][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.735850][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.747573][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.759027][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.770444][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.780462][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.790975][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.802308][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.853755][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.865984][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.882254][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 18:51:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 225.902086][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.919938][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.939998][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.950903][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.968937][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.979737][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.999009][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.011627][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.036252][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.073961][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.116509][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.143359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:51:43 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000280)=""/225) socket$pptp(0x18, 0x1, 0x2) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x80, 0x1f, 0x1, 0x9, 0x81, 0x0, 0x3, 0x5, 0x4, 0x47, 0xc1, 0x8, 0x7, 0xf8}, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x4}], 0x1) [ 226.323816][ T8090] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 226.387900][ T8213] udc-core: couldn't find an available UDC or it's busy [ 226.397150][ T8213] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:51:44 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000000000069078ac141400ac1414aa8903f90000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000091780000"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="010002005dfb92bcf877a1d99fb7c2f437dec3cca9b89016b9ce419a74a1ca34cd9a7f9f9c3d3ad2221859fc79eece42fc80ad33c6d3c9e1f9efb381b063964580eb4a9b0fb9e09c9c8af89e823595805dc624817b9a753be6591095ff6c3a9d43f6e059053c4f33583bf4d5555b8b2a6e4ac1278820972aae6262d1baca7b2ae097ff9b1dec9aa9e73950f9a427eec1dce35cc73868d08e4fc39a0474db692fde4766b4289442fd11ad8303fea60b8ad96b2b866f4a03532fcf1f91ff4d39a51a2d6226ff8e9b54f46991", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7d, &(0x7f0000000080)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x5a}, 0x8) 18:51:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRESOCT], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001500)=""/165, 0xa5}], 0x1}, 0x40000103) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x75b383, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0xfffffffffffffffe, 0x4044041) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000300)="fb5d77f559c6e5ecb7e7cc90c26241678dedfe815c8075fcc4cdaa25f8241b11417f2933217b0ef748122083b1918025dbb4cfba4a59917e0fb06aaac3499132c06f1caac0e42c914bc811eda3807110399e2d42d398990449945890ec5529af47bf214307") getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x40000000, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @mcast1, 0x9}}, 0x24) 18:51:44 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r3) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', r4) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r4) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r5) keyctl$link(0x8, r3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x22, 0x4, 0xfd092a6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6c38c6f0199907437aeba9082"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ceph\x00', 0x4020, 0x0) 18:51:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x5, 0x4, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5, 0x0, 0x3}}, 0x20) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000003c0)=""/4096, 0x1000) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000500)={0x0, 0x23, 0x3c}, &(0x7f0000000640)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f00000006c0)="d4841db97ce225b955265288fce34317d7370800bf4900cf7569be657d7e930b61da09", &(0x7f0000000700)=""/60) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000002800310f00"/20, @ANYRES32=r6, @ANYBLOB="000900000000ffff000000000b0001006367726f75700000580002005400010050000000070001007c74000028000280240001006e61740000000000000000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x88}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000100)={0x1}) 18:51:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x14b842, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x100010, 0xffffffffffffffff, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000005) [ 226.685476][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:44 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="030002080000009824121efdef66f226d598a5b45874729900e9015d72d208dec34d4f8b101cca6c24c422cabd238c886de715c4c60000f004049ee62165d1364cbe9c97a4762e1764faf7555a0d5818335a183e720596a1cae7"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0x800) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045009, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) 18:51:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x0, 0x0, 0x3017, 0x8a, 0xe6f, {0x6, 0x10000}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x56) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000), 0x10) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r1, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0xfffffe59) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000000180)={0x0, &(0x7f0000000040)=""/26, &(0x7f0000000080)}) 18:51:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) connect(r2, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400141, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) sendmmsg(r2, &(0x7f0000001540), 0x553, 0x0) [ 226.937584][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.982865][ T8257] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 226.996583][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.050779][ T8228] IPVS: ftp: loaded support on port[0] = 21 [ 227.089802][ T8247] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 227.119423][ T8262] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 227.249086][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000884) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="52019b1be2020a51a113b0f98c7b16c751b3b4a431e452b0c9d1be1502fde3d61bcc3cde8712cd1f37bd51700100831c9d3eef735adfd1e93882f6080577bda97f9732436b13f21c5589685f3397da381dda91888c893ac4e355e17272aaa31aa93a5119b73bb7282485069c025634b6252a7c344c82b697bb81a1135cac056682c794011e000000000000446b9f9bf2e319402d553a4068a211fe51be9fedb330fac99561914304482c6a969086ef119e1cf7a14f88665f036317c3d5668e81cb7772a4e3567094ce292cc6c07b96f47ba84a77226bb8c5629c1e22f707335bd16635437b65eb9dc89104e336176425d565760ea0f908e819f68bb6eb1acc0f0fb5f1587e143d5b2af0731a3b3a7495278aed7a2406de4e07b44bacf89c0e013b1b2628c6d7161639cb2c24fb5d98c285b4e503e3ce71564505f8acb8fa967887e413ec0fb424fed3ebfca40884ffa74364a19ac830d501b3d4cfc2978afc4841bb78dca7d984712a1d917187fe7d837dda607b18e546f0a50ea619eefa8b8575e4c328f5423367478531a046a85f6f0224f7b96412eb481e419dcc2a7b1e647715b3f5d887f9c533704d6ef4148c4d710fa51d3cd617f65fba946998d55813298a2f49e7d53b4c7997705e137f38a1db61acb9a365bfbf7adca9221e00000000000000", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) 18:51:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000140)) r1 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r2, r1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x5}, 0x0, 0x0, &(0x7f0000000380)={0x1, 0x6, 0x3, 0x7}, &(0x7f00000003c0)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x3}}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffff8}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x222400, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x500000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x2, "2d7364401516c441c1b530ee01932758f376a72eae76dde81f9d317e77a0c782", 0x32314d59}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 18:51:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000884) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) 18:51:45 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r3) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', r4) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r4) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r5) keyctl$link(0x8, r3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x22, 0x4, 0xfd092a6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6c38c6f0199907437aeba9082"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ceph\x00', 0x4020, 0x0) [ 227.670257][ T8283] IPVS: ftp: loaded support on port[0] = 21 [ 227.881391][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:45 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$midi(r2, &(0x7f0000000080)="d7", 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 228.275891][ T8317] IPVS: ftp: loaded support on port[0] = 21 [ 228.585835][ T8330] IPVS: ftp: loaded support on port[0] = 21 18:51:46 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r3) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', r4) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r4) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r5) keyctl$link(0x8, r3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x22, 0x4, 0xfd092a6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6c38c6f0199907437aeba9082"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ceph\x00', 0x4020, 0x0) 18:51:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002600010000000000cde56fad7e48777d", @ANYRES32=r6, @ANYBLOB="010000000000080000000000"], 0x24}, 0x8}, 0x0) r7 = geteuid() r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f00000002c0)) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f00000000c0)={0xfffff801, 0x1, {r9}, {0x0}, 0xabc, 0xffffffff}) socket(0x1, 0xa, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newroute={0x40, 0x18, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x5, 0xfd, 0x0, 0x0, 0x7, 0x400}, [@RTA_IIF={0x8, 0x3, r6}, @RTA_UID={0x8, 0x19, r7}, @RTA_UID={0x8, 0x19, r10}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x4, 0x1}}]}, 0x40}}, 0x0) 18:51:46 executing program 2: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xd9054, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x81, 0x80000001, 0xfffffffd}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x88a0}, 0x4c041) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3c1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4004040) [ 229.025316][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 229.061019][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/netfilter\x00') fcntl$notify(r2, 0x402, 0xb1c661d318500c4f) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) getdents64(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) dup2(r4, 0xffffffffffffffff) [ 230.829203][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:51:49 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="030002080000009824121efdef66f226d598a5b45874729900e9015d72d208dec34d4f8b101cca6c24c422cabd238c886de715c4c60000f004049ee62165d1364cbe9c97a4762e1764faf7555a0d5818335a183e720596a1cae7"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0x800) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045009, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) 18:51:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[r0]}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000500)=""/198, 0xc6}], 0x2}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffff8}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) 18:51:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x2, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x84}, 0x8) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) 18:51:49 executing program 5: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x3f, 0x9, 0x6, 0xff, 0x3, 0x1, 0x3, 0x5a, 0x9, 0x9, 0x7f, 0x5, 0x3f, 0x5}, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgget$private(0x0, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) [ 232.129422][ T8419] IPVS: ftp: loaded support on port[0] = 21 18:51:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x1083c0, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280)=0x7fff, &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000440)={r3, 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227d, &(0x7f0000000180)) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x1200000}, 0x16, 0x2) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000000c0)={r3, 0x1}) pwrite64(r1, &(0x7f00000001c0)="c294054630cf21a1dfc0e25015fc", 0xe, 0x0) socket$phonet(0x23, 0x2, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x73e000, 0x0}) 18:51:49 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="030002080000009824121efdef66f226d598a5b45874729900e9015d72d208dec34d4f8b101cca6c24c422cabd238c886de715c4c60000f004049ee62165d1364cbe9c97a4762e1764faf7555a0d5818335a183e720596a1cae7"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0x800) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045009, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) 18:51:49 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x3a8f7dc2ac1e8d0b, &(0x7f0000000040)={0xa, 0x4e33, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000005140)={0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000240)='W', 0x1, 0x4000001, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000000)) 18:51:50 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffff46, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c080) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x15735, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="0151040000000000200012800b000100aa67656e657665d4f4c3094606b72205000000000604000600080005", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="2e9b58852abf8dee320e9a8177201a64c6d1e1515692ffb95a19afa590ff50ec625a7bc7c6b0948631d484afd5cf019c37c2c1be0935b41423c447d0181d897cb096939a29dcab6305aa235f4d3b00fbdfe3969d666c50348162b74598e3795b935f511058e10a4fac3a597a1bc871181aa36c017cdc77ab8eeb63879674d26d5f16a0f7595ff628bb6287aa1ca55cc91e287b07c93cbd55b27ca85f7a9d7bf579450e1140ab9d467a3918d6580aa29d4d7c7b66d8bd7f66"], 0x50}}, 0x0) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) creat(&(0x7f0000000240)='./bus\x00', 0x0) 18:51:50 executing program 5: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x3f, 0x9, 0x6, 0xff, 0x3, 0x1, 0x3, 0x5a, 0x9, 0x9, 0x7f, 0x5, 0x3f, 0x5}, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgget$private(0x0, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 18:51:50 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x3f, 0x9, 0x6, 0xff, 0x3, 0x1, 0x3, 0x5a, 0x9, 0x9, 0x7f, 0x5, 0x3f, 0x5}, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgget$private(0x0, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) [ 232.999124][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.009583][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 18:51:50 executing program 5: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x3f, 0x9, 0x6, 0xff, 0x3, 0x1, 0x3, 0x5a, 0x9, 0x9, 0x7f, 0x5, 0x3f, 0x5}, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgget$private(0x0, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 18:51:50 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x3f, 0x9, 0x6, 0xff, 0x3, 0x1, 0x3, 0x5a, 0x9, 0x9, 0x7f, 0x5, 0x3f, 0x5}, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgget$private(0x0, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) [ 233.376514][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.396959][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.559591][ T8481] IPVS: ftp: loaded support on port[0] = 21 18:51:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227d, &(0x7f0000000180)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x0, r4}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x105042, 0x0) 18:51:51 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x8000, 0x0) dup2(r0, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x7c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xe2d}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x1) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001f5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 18:51:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803c43, 0x40100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x52820, 0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227d, &(0x7f0000000180)) sendfile(r0, r1, &(0x7f0000000200)=0xfe6d, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x430040, 0x0) accept4$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x4, 0x4, 0x2, 0x0, 0x4, 0x8, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4890) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, 0x7d, r4}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x102, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="040000090000000000000000003f92059798327da96d12cd287abb6c2846dc65bedfd65634d7546ac4eb049e1a6589e4c8a8a0fa67fe0800e92b128e3d00"/76, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB="00575965ac75ee2cc1b24f0643518bcd538e398108a4b7b104f70ce35d87ecdef3c34ddec99f0029a1f7baacd16a452646dd2d9b4e5052468a395a262f6386e3f01ab858c7fb09a35c281d5e4ae4d212bb27a3945a91a78448b0bd85c469bcf456dc5626e94294842a774b142dd8dd475aaa5846a225", @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) 18:51:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110700b04841691ee0436a287a9c8d000000000000001f00000093be75c962e4728c3041bfdb002f2ae0ac39eee2e6591b28ec32a9cfdca7a86704d9652dab61fcc61a931adf80d46e5e232c0e69763b58812cbdaedcf1387854cafef30f2bb882"], 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) r4 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r5 = geteuid() fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00820000", @ANYRES32=r5, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df717020475a2987318f5d14b44f6e905f49874900a7725d00c", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,dont_hash,\x00']) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000a10200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000c10000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r9 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r10 = geteuid() fsetxattr$system_posix_acl(r9, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="13825000", @ANYRES32=r10, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df717020475a2987318f5d14b44f6e905f49874900a7725d00c", @ANYRESDEC=r10, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,dont_hash,\x00']) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [{0x2, 0x0, r5}, {0x2, 0x2, r10}], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x5}, {0x20, 0x5}}, 0x3c, 0x2) [ 234.242931][ T8544] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 18:51:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x20000) close(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x20004) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, 0x0) 18:51:53 executing program 2: r0 = socket(0x1e, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r2, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045003, &(0x7f0000000000)=0x500) 18:51:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002240)="f4c07ffb69b43db58c192ae931fd09e08b0a17a167c9b3416365b25b28196b77d38224f18bc08bb671e7ca417ada124f4ddcfcf686947966db558edbed2d3358485b1862a1134ae2210957feba5265f1f737690f35ccf8ac21fb91421b0aedf685061e50161bd2ee6b84c4d6759a5f15454b377879a01eb7880a7f8a1bc1f0976315a2ef48287332b31e0f35200e530979e127fa8908b4303ac92648ba88b362398bec0211505a9ad5cfe87f64a3e3a05f3156ba190237ec35b6cbf0662caa7dcd2337373af96fbec0", 0xc9}], 0x1}}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000100)={r4, r2, 0x3, 0x79, &(0x7f0000000000)="119b8dce1aa790d61a99e4da18316da986db5f2e0ebe8851c2a5e1c50050d4d13b0e8c02bdb58252710935dc1c66a5fdbb0092ce9dbab3a1560849ba15a28738d2c0b2392c75570deb7ff24e8df873cc119bf21f47ae50d05d1b35dd5e79a656bdccab056be610ec88440b30753f0876f5736d393135c69e87", 0xe4, 0x0, 0xde, 0x8, 0x0, 0x1, 0x9, 'syz1\x00'}) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1870, 0x11, 0x0, 0x27) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 18:51:53 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x8000, 0x0) dup2(r0, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x7c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xe2d}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x1) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001f5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 18:51:53 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x8000, 0x0) dup2(r0, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x7c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xe2d}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x1) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001f5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 18:51:53 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x8000, 0x0) dup2(r0, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x7c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xe2d}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x1) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001f5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 18:51:53 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x40020, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x20018001) [ 236.293679][ T8090] usb 5-1: new high-speed USB device number 2 using dummy_hcd 18:51:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3bfd376e2900101008760400000f00000000000000000095a0636453b8c4fc957f4964649678e8ecbb90cb9202c9eeace0c2506af30769a0693466f720bb1a5a3d966ceeb2a0f55cb95beda43027d59fbb4c46b2c707c24c4968c9054653293ad102937e5438524fc72f8124", @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @private=0xa014101}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4, 0x2}}]}, 0x40}}, 0x40080) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 18:51:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x200, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000140), 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) dup(r4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080), 0x0, 0x80000, 0x0, r4}) 18:51:53 executing program 3: r0 = getpid() ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9015d30130000000002ca8472d208deb14d4f8bc28552a092b996429b24c403cabd238c886de706c4c6e1a7f4d5"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4], 0x1f000, 0x40240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8085) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) [ 236.533755][ T8090] usb 5-1: Using ep0 maxpacket: 8 18:51:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r6, @ANYBLOB="f1129d47b15ded3f00827d6d6641fd5c54d81c0e76f71db5db43c2dcb8b83e2ec1fa34410bdd909bbe0399152fe45e32b12c7ef32da4e26cb5f3f0feed6ca6957730f5a96d93d0e5c582fbef46c784ee5176e91311bd07a8e3c6a5ae4710e21ab44755ac5dee99bc19fe0b0b93adcb13cadaf1a32d0000060310f6000000000000000004000000000000000000"], 0x44}}, 0x0) 18:51:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x381400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x20, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc2}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000200)={0x80000000, 0x7ff, 0x200, 0x8000, 0x4, 0x1f}) 18:51:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x98, 0x98, 0x0, 0x98, 0x140, 0x140, 0x140, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x7}, {0xffff}, {0xffff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)="bfc4925c68f03938d826e934b544a30b62b6aba4e9ab8df1fce79de0dfe2df16f4c812b853f5625eee5f5b57ad58e33bfc9ae4576a8036fa84a59d9e8ff9dd756bf6226c7399316764b68ea5a551dcf314bd220472b50aeba8c505cc95f97293b48b50084fbf891707208066447e6ba21c7df1a68616bca1b911c97220525ab58da5cb68b20466cebd779d1e5c14f2e6ec82068fb031bd6c2f21ec61e797b68681361958766b2da9ff33d101c9498f4f8e228cbc82c2f5ca56e53da63e3dec23e7e2ed8eb7d724c1dc8a6d726245534cbca6f138e5299acb8742fb4c19867579d2ad18460589dc1c9e56a81e405d2f05d5d9e80e0426aedfcd", 0xfffffffffffffeb4}, {&(0x7f0000000680)="6952af1948c67e329ba05e0b40153c7d276347731fd1a10cf66f178a4becefad563c76d1b249a946c57f416833cd75b3059e8d897dbe1d43e8d7fe21a99fcce395fe1165fa4a6e5632a9c5cb9b32468ac6ac513c1752f0a53b1bd09c76c9b7e144c7c0a063f30eba8fd8e62ca2d851a9d4e9a8ad4c3c5240a7a74971ae23d6d282bd7b387be2622b27adddcc6b100b664a4a0f4ef10e8c76788d980839142b85ac9f529e224e316a4d24f45baa36af1bf636753de8b2e3ee5003599be0296ea7c86107170f940ebac6911fae148b6daffffb92", 0xd3}, {&(0x7f0000000780)="2809e3755620227783491fe7838670d1a1aa2f286bc509a6926fb8d7189b4fd3e437826711b1ddb68d58c936b30ca285336c378fdf6409e63af718624aefa711bbf9e08a78a8fe75a7c762841172ed23e8c59945a127e6005cb7ca1e9f8db1bfe6b06e33121c118c12f74ec7195697934417fe6881851901b3b91294453ebe890f9c90a093b38fd50d40a687114525fe122b2df538dfde0ec1acce290b5147000000000000000083da93131e8290019d07", 0xb1}, {&(0x7f0000000300)="b9d2d5cb50acaf7fb426edd1", 0xc}, {&(0x7f0000000840)}, {&(0x7f0000000880)="7f3ec3bcf5535f64161770cab83f8216b4f511d73c0b368eef6b5858a38cd04bcd7f7a0ffd40fe7ea6dec23060f1f68e8e1a9c2c30fae2855072e82d78c4920396", 0x41}], 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="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", &(0x7f0000000100)=""/11, &(0x7f0000000180)="05d3e2f8110adde206a04d2e2a2396e27a7521eb496c74dc86614ce9f655d7b882964a8bd1ea754099d1dbcea3b78831e419c1238d455698028cc67452dcb7c89b56346c9b4bb2f6180ad9db840f6c435cb520f50cb112afa9840680a543eb76b22c4276529ef0efac0115c669e2a7fbcb283a0b54045cbc98b3d7f069fc92f29d687f660338acc096ea", &(0x7f0000000240)="3b6cca0178b2727c696483386451b46fdbe726859d5948061f81fc189ea6df80d1a4fe3c64574517e01b3ef237646dc41edbdaef934f5a479d87d98220d684b08e51bea59978e1def11c", 0x0, r4, 0x4}, 0x38) 18:51:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) signalfd(r0, &(0x7f0000000040), 0x8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020a00000524060001"], 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227d, &(0x7f0000000180)) dup(r1) 18:51:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x98, 0x98, 0x0, 0x98, 0x140, 0x140, 0x140, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x7}, {0xffff}, {0xffff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)="bfc4925c68f03938d826e934b544a30b62b6aba4e9ab8df1fce79de0dfe2df16f4c812b853f5625eee5f5b57ad58e33bfc9ae4576a8036fa84a59d9e8ff9dd756bf6226c7399316764b68ea5a551dcf314bd220472b50aeba8c505cc95f97293b48b50084fbf891707208066447e6ba21c7df1a68616bca1b911c97220525ab58da5cb68b20466cebd779d1e5c14f2e6ec82068fb031bd6c2f21ec61e797b68681361958766b2da9ff33d101c9498f4f8e228cbc82c2f5ca56e53da63e3dec23e7e2ed8eb7d724c1dc8a6d726245534cbca6f138e5299acb8742fb4c19867579d2ad18460589dc1c9e56a81e405d2f05d5d9e80e0426aedfcd", 0xfffffffffffffeb4}, {&(0x7f0000000680)="6952af1948c67e329ba05e0b40153c7d276347731fd1a10cf66f178a4becefad563c76d1b249a946c57f416833cd75b3059e8d897dbe1d43e8d7fe21a99fcce395fe1165fa4a6e5632a9c5cb9b32468ac6ac513c1752f0a53b1bd09c76c9b7e144c7c0a063f30eba8fd8e62ca2d851a9d4e9a8ad4c3c5240a7a74971ae23d6d282bd7b387be2622b27adddcc6b100b664a4a0f4ef10e8c76788d980839142b85ac9f529e224e316a4d24f45baa36af1bf636753de8b2e3ee5003599be0296ea7c86107170f940ebac6911fae148b6daffffb92", 0xd3}, {&(0x7f0000000780)="2809e3755620227783491fe7838670d1a1aa2f286bc509a6926fb8d7189b4fd3e437826711b1ddb68d58c936b30ca285336c378fdf6409e63af718624aefa711bbf9e08a78a8fe75a7c762841172ed23e8c59945a127e6005cb7ca1e9f8db1bfe6b06e33121c118c12f74ec7195697934417fe6881851901b3b91294453ebe890f9c90a093b38fd50d40a687114525fe122b2df538dfde0ec1acce290b5147000000000000000083da93131e8290019d07", 0xb1}, {&(0x7f0000000300)="b9d2d5cb50acaf7fb426edd1", 0xc}, {&(0x7f0000000840)}, {&(0x7f0000000880)="7f3ec3bcf5535f64161770cab83f8216b4f511d73c0b368eef6b5858a38cd04bcd7f7a0ffd40fe7ea6dec23060f1f68e8e1a9c2c30fae2855072e82d78c4920396", 0x41}], 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="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", &(0x7f0000000100)=""/11, &(0x7f0000000180)="05d3e2f8110adde206a04d2e2a2396e27a7521eb496c74dc86614ce9f655d7b882964a8bd1ea754099d1dbcea3b78831e419c1238d455698028cc67452dcb7c89b56346c9b4bb2f6180ad9db840f6c435cb520f50cb112afa9840680a543eb76b22c4276529ef0efac0115c669e2a7fbcb283a0b54045cbc98b3d7f069fc92f29d687f660338acc096ea", &(0x7f0000000240)="3b6cca0178b2727c696483386451b46fdbe726859d5948061f81fc189ea6df80d1a4fe3c64574517e01b3ef237646dc41edbdaef934f5a479d87d98220d684b08e51bea59978e1def11c", 0x0, r4, 0x4}, 0x38) 18:51:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2a, &(0x7f0000000080)=[{&(0x7f0000000140)="2e00000035000511d25a80648c63940d0124fc601003d0d8944e08c1a5000037153e370a0001313ae54a6e13800000000000000000000000ce63e94c94be87f928bc5aef4e9077c19e71376e0a755c06720920edfaad5e3ee7d009ba792655fdc05064c5682bd7c71d4841ceda2f85da6ade352d3ed26ad5a8122c22a80224153dd521f09dcdbb49c135955371c8a07aa26314535d26332a8629f51956882d12463bb060330c3835b7a95d02c94737620345da7d3734c5f819", 0x7a}, {&(0x7f0000000000)="e96ff043779dda2a7358d749838de94b9b5e4120d7f82c715b4821d9d75b85091df675bef2174350fbb2618591079609e378fdc7c450e7a16447146ae7a2d495455df458792e37a939964635ce08b74a12be6e93fe049f44ef10d09bf21bbea4"}], 0x1}, 0x0) 18:51:55 executing program 5: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x80002, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) getpid() r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x80000002, &(0x7f0000000100)={0x39}) clock_adjtime(0x3, 0x0) ptrace(0xffffffffffffffff, r1) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty=0x4c00}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @empty}, 0x38e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @remote={0xac, 0xa}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x204, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='wg1\x00', 0x3, 0xffffffffffffffff, 0xb7a5}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, {0x2, 0x4, @remote}, {0x2, 0x4e22, @broadcast}, 0x48, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x3, 0xfffffffffffffffc}) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000001240)={0x84, @local, 0x4e20, 0xfffffffd, 'fo\x00', 0x17, 0x1f, 0xd}, 0x2c) dup3(r3, r0, 0x80000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000000)={{{0x8}}, 0x1d7, 0x800006, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x29e}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="18c227b68dd8fda389ffff00000000000000000000000000500aff15d135a637e607e5752d16b350c42c0e003ae050f81fcad2c7693958d51af0b477cdb6a86f982d8988f3d43f86a2eae1da0000"], 0x18}}, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000300)=0x7841, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000240)={0x0, 'veth0_to_hsr\x00', {}, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) semget(0x3, 0x3, 0x200) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)=@in={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/268], 0x11c, 0x4048801}, 0x0) 18:51:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0x8f) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e21, 0x3, @loopback}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x2}}}, 0x5c) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) read$usbfs(0xffffffffffffffff, &(0x7f00000002c0)=""/103, 0x67) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x102, &(0x7f0000000440)={0x2, 0x4e1d, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(0xffffffffffffffff, 0xa05) sendfile(r0, r1, 0x0, 0x2000000eefffded) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) signalfd(r5, &(0x7f00000001c0)={[0x1]}, 0x8) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r6, 0x227d, &(0x7f0000000180)) r7 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r4, r0, r6, r7, r8], 0x5) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc050565d, &(0x7f0000000040)={0x0, 0x5, 0x4, 0x800, 0x9, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "da6a5eda"}, 0x0, 0x2, @fd, 0x80000001}) 18:51:57 executing program 5: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x80002, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) getpid() r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x80000002, &(0x7f0000000100)={0x39}) clock_adjtime(0x3, 0x0) ptrace(0xffffffffffffffff, r1) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty=0x4c00}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @empty}, 0x38e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @remote={0xac, 0xa}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x204, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='wg1\x00', 0x3, 0xffffffffffffffff, 0xb7a5}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, {0x2, 0x4, @remote}, {0x2, 0x4e22, @broadcast}, 0x48, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x3, 0xfffffffffffffffc}) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000001240)={0x84, @local, 0x4e20, 0xfffffffd, 'fo\x00', 0x17, 0x1f, 0xd}, 0x2c) dup3(r3, r0, 0x80000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000000)={{{0x8}}, 0x1d7, 0x800006, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x29e}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="18c227b68dd8fda389ffff00000000000000000000000000500aff15d135a637e607e5752d16b350c42c0e003ae050f81fcad2c7693958d51af0b477cdb6a86f982d8988f3d43f86a2eae1da0000"], 0x18}}, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000300)=0x7841, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000240)={0x0, 'veth0_to_hsr\x00', {}, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) semget(0x3, 0x3, 0x200) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)=@in={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/268], 0x11c, 0x4048801}, 0x0) [ 236.653644][ T8090] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.653663][ T8090] usb 5-1: config 0 has no interface number 0 [ 236.653706][ T8090] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 236.653771][ T8090] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 236.653832][ T8090] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 236.653891][ T8090] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 236.653910][ T8090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.656995][ T8090] usb 5-1: config 0 descriptor?? [ 236.675858][ T8578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 236.675987][ T8578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 237.158064][ T8640] SET target dimension over the limit! [ 237.176175][ T8648] SET target dimension over the limit! [ 237.338131][ T8657] SET target dimension over the limit! [ 237.483475][ T2517] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 237.504360][ T8663] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.504547][ T8663] openvswitch: netlink: Flow key attr not present in new flow. [ 237.723553][ T2517] usb 3-1: Using ep0 maxpacket: 8 [ 237.873727][ T2517] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.873750][ T2517] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.873792][ T2517] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.033797][ T2517] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.033820][ T2517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.033836][ T2517] usb 3-1: Product: syz [ 238.033851][ T2517] usb 3-1: Manufacturer: syz [ 238.033866][ T2517] usb 3-1: SerialNumber: syz [ 238.086958][ T2517] usb 3-1: bad CDC descriptors [ 238.291577][ T2517] usb 3-1: USB disconnect, device number 2 [ 238.563951][ T2483] usb 5-1: USB disconnect, device number 2 [ 239.364145][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 239.613588][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 239.736392][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 239.736412][ T17] usb 5-1: config 0 has no interface number 0 [ 239.736452][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 239.736472][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 239.736494][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 239.736525][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 239.736543][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.738782][ T17] usb 5-1: config 0 descriptor?? [ 239.756200][ T8578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 239.756351][ T8578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 239.909255][ T17] usb 5-1: USB disconnect, device number 3 [ 267.527098][ T0] NOHZ: local_softirq_pending 08 [ 284.809165][ T0] NOHZ: local_softirq_pending 08 [ 327.692641][ T0] NOHZ: local_softirq_pending 08 [ 391.048174][ T1150] INFO: task syz-executor.0:8608 blocked for more than 143 seconds. [ 391.048208][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 391.048214][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.048222][ T1150] syz-executor.0 D27656 8608 6855 0x00000004 [ 391.048247][ T1150] Call Trace: [ 391.048357][ T1150] __schedule+0x91f/0x2250 [ 391.048385][ T1150] ? io_schedule_timeout+0x140/0x140 [ 391.048410][ T1150] schedule+0xd0/0x2a0 [ 391.048430][ T1150] schedule_preempt_disabled+0xf/0x20 [ 391.048446][ T1150] __mutex_lock+0x3e2/0x10d0 [ 391.048463][ T1150] ? lock_downgrade+0x820/0x820 [ 391.048481][ T1150] ? do_fb_ioctl+0x15e/0x6c0 [ 391.048503][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 391.048516][ T1150] ? find_held_lock+0x2d/0x110 [ 391.048535][ T1150] ? tomoyo_path_number_perm+0x1fa/0x4d0 [ 391.048560][ T1150] ? trace_hardirqs_on+0x5f/0x220 [ 391.048581][ T1150] do_fb_ioctl+0x15e/0x6c0 [ 391.048597][ T1150] ? tomoyo_path_number_perm+0x244/0x4d0 [ 391.048614][ T1150] ? fb_set_suspend+0x1a0/0x1a0 [ 391.048630][ T1150] ? tomoyo_execute_permission+0x470/0x470 [ 391.048654][ T1150] ? __might_fault+0x11f/0x1d0 [ 391.048681][ T1150] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 391.048697][ T1150] ? do_vfs_ioctl+0x27d/0x1090 [ 391.048713][ T1150] ? generic_block_fiemap+0x60/0x60 [ 391.048729][ T1150] ? __might_fault+0x190/0x1d0 [ 391.048743][ T1150] ? _copy_to_user+0x126/0x160 [ 391.048765][ T1150] ? __fget_files+0x294/0x400 [ 391.048787][ T1150] fb_ioctl+0xdd/0x130 [ 391.048804][ T1150] ? do_fb_ioctl+0x6c0/0x6c0 [ 391.048817][ T1150] ksys_ioctl+0x11a/0x180 [ 391.048834][ T1150] __x64_sys_ioctl+0x6f/0xb0 [ 391.048848][ T1150] ? lockdep_hardirqs_on+0x6a/0xe0 [ 391.048864][ T1150] do_syscall_64+0x60/0xe0 [ 391.048902][ T1150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 391.048915][ T1150] RIP: 0033:0x45c1d9 [ 391.048921][ T1150] Code: Bad RIP value. [ 391.048930][ T1150] RSP: 002b:00007f40acbffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.048945][ T1150] RAX: ffffffffffffffda RBX: 0000000000011dc0 RCX: 000000000045c1d9 [ 391.048954][ T1150] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000008 [ 391.048963][ T1150] RBP: 000000000078bfe0 R08: 0000000000000000 R09: 0000000000000000 [ 391.048972][ T1150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 391.048981][ T1150] R13: 0000000000c9fb6f R14: 00007f40acc009c0 R15: 000000000078bfac [ 391.049008][ T1150] INFO: task syz-executor.0:8614 blocked for more than 143 seconds. [ 391.049016][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 391.049022][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.049029][ T1150] syz-executor.0 D28752 8614 6855 0x00000004 [ 391.049051][ T1150] Call Trace: [ 391.049071][ T1150] __schedule+0x91f/0x2250 [ 391.049095][ T1150] ? io_schedule_timeout+0x140/0x140 [ 391.049119][ T1150] schedule+0xd0/0x2a0 [ 391.049138][ T1150] schedule_preempt_disabled+0xf/0x20 [ 391.049154][ T1150] __mutex_lock+0x3e2/0x10d0 [ 391.049170][ T1150] ? get_fb_info.part.0+0x18/0x80 [ 391.049186][ T1150] ? fb_open+0xd3/0x430 [ 391.049207][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 391.049227][ T1150] ? __mutex_unlock_slowpath+0xe2/0x610 [ 391.049248][ T1150] ? lock_downgrade+0x820/0x820 [ 391.049266][ T1150] ? kobject_get_unless_zero+0x15a/0x1e0 [ 391.049295][ T1150] fb_open+0xd3/0x430 [ 391.049314][ T1150] ? get_fb_info.part.0+0x80/0x80 [ 391.049327][ T1150] chrdev_open+0x266/0x770 [ 391.049342][ T1150] ? cdev_device_add+0x210/0x210 [ 391.049362][ T1150] ? security_file_open+0x1f5/0x3f0 [ 391.049382][ T1150] do_dentry_open+0x501/0x1290 [ 391.049397][ T1150] ? cdev_device_add+0x210/0x210 [ 391.049418][ T1150] path_openat+0x1bb9/0x2750 [ 391.049442][ T1150] ? path_lookupat+0x830/0x830 [ 391.049465][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 391.049485][ T1150] do_filp_open+0x17e/0x3c0 [ 391.049502][ T1150] ? may_open_dev+0xf0/0xf0 [ 391.049525][ T1150] ? do_raw_spin_lock+0x120/0x2b0 [ 391.049539][ T1150] ? rwlock_bug.part.0+0x90/0x90 [ 391.049568][ T1150] ? _raw_spin_unlock+0x24/0x40 [ 391.049927][ T1150] ? __alloc_fd+0x28d/0x600 [ 391.049950][ T1150] do_sys_openat2+0x16f/0x3b0 [ 391.049965][ T1150] ? __might_fault+0x190/0x1d0 [ 391.049979][ T1150] ? build_open_flags+0x650/0x650 [ 391.049991][ T1150] ? _copy_to_user+0x126/0x160 [ 391.050011][ T1150] ? put_timespec64+0xcb/0x120 [ 391.050028][ T1150] ? ns_to_timespec64+0xc0/0xc0 [ 391.050046][ T1150] __x64_sys_openat+0x13f/0x1f0 [ 391.050061][ T1150] ? __ia32_sys_open+0x1c0/0x1c0 [ 391.050077][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 391.050094][ T1150] ? do_syscall_64+0x1c/0xe0 [ 391.050110][ T1150] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 391.050130][ T1150] do_syscall_64+0x60/0xe0 [ 391.050147][ T1150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 391.050158][ T1150] RIP: 0033:0x45c1d9 [ 391.050163][ T1150] Code: Bad RIP value. [ 391.050172][ T1150] RSP: 002b:00007f40acbdec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.050186][ T1150] RAX: ffffffffffffffda RBX: 0000000000020f00 RCX: 000000000045c1d9 [ 391.050195][ T1150] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 391.050204][ T1150] RBP: 000000000078c088 R08: 0000000000000000 R09: 0000000000000000 [ 391.050213][ T1150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 391.050223][ T1150] R13: 0000000000c9fb6f R14: 00007f40acbdf9c0 R15: 000000000078c04c [ 391.050249][ T1150] INFO: task syz-executor.0:8658 blocked for more than 143 seconds. [ 391.050257][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 391.050263][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.050270][ T1150] syz-executor.0 D27496 8658 6855 0x00000004 [ 391.050304][ T1150] Call Trace: [ 391.050324][ T1150] __schedule+0x91f/0x2250 [ 391.050348][ T1150] ? io_schedule_timeout+0x140/0x140 [ 391.050373][ T1150] schedule+0xd0/0x2a0 [ 391.050392][ T1150] schedule_preempt_disabled+0xf/0x20 [ 391.050407][ T1150] __mutex_lock+0x3e2/0x10d0 [ 391.050424][ T1150] ? get_fb_info.part.0+0x18/0x80 [ 391.050440][ T1150] ? fb_open+0xd3/0x430 [ 391.050462][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 391.050481][ T1150] ? __mutex_unlock_slowpath+0xe2/0x610 [ 391.050503][ T1150] ? lock_downgrade+0x820/0x820 [ 391.050520][ T1150] ? kobject_get_unless_zero+0x15a/0x1e0 [ 391.050542][ T1150] fb_open+0xd3/0x430 [ 391.050560][ T1150] ? get_fb_info.part.0+0x80/0x80 [ 391.050573][ T1150] chrdev_open+0x266/0x770 [ 391.050589][ T1150] ? cdev_device_add+0x210/0x210 [ 391.050608][ T1150] ? security_file_open+0x1f5/0x3f0 [ 391.050628][ T1150] do_dentry_open+0x501/0x1290 [ 391.050643][ T1150] ? cdev_device_add+0x210/0x210 [ 391.050665][ T1150] path_openat+0x1bb9/0x2750 [ 391.050691][ T1150] ? path_lookupat+0x830/0x830 [ 391.050706][ T1150] ? cache_grow_end+0x46/0x170 [ 391.050728][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 391.050749][ T1150] do_filp_open+0x17e/0x3c0 [ 391.050765][ T1150] ? may_open_dev+0xf0/0xf0 [ 391.050787][ T1150] ? do_raw_spin_lock+0x120/0x2b0 [ 391.050802][ T1150] ? rwlock_bug.part.0+0x90/0x90 [ 391.050823][ T1150] ? _raw_spin_unlock+0x24/0x40 [ 391.050837][ T1150] ? __alloc_fd+0x28d/0x600 [ 391.050859][ T1150] do_sys_openat2+0x16f/0x3b0 [ 391.050873][ T1150] ? __might_fault+0x190/0x1d0 [ 391.050887][ T1150] ? build_open_flags+0x650/0x650 [ 391.050899][ T1150] ? _copy_to_user+0x126/0x160 [ 391.050918][ T1150] ? put_timespec64+0xcb/0x120 [ 391.050935][ T1150] ? ns_to_timespec64+0xc0/0xc0 [ 391.050953][ T1150] __x64_sys_openat+0x13f/0x1f0 [ 391.050968][ T1150] ? __ia32_sys_open+0x1c0/0x1c0 [ 391.050983][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 391.051000][ T1150] ? do_syscall_64+0x1c/0xe0 [ 391.051016][ T1150] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 391.051036][ T1150] do_syscall_64+0x60/0xe0 [ 391.051053][ T1150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 391.051064][ T1150] RIP: 0033:0x45c1d9 [ 391.051069][ T1150] Code: Bad RIP value. [ 391.051077][ T1150] RSP: 002b:00007f40acb9cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.051091][ T1150] RAX: ffffffffffffffda RBX: 0000000000020f00 RCX: 000000000045c1d9 [ 391.051100][ T1150] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 391.051109][ T1150] RBP: 000000000078c1c8 R08: 0000000000000000 R09: 0000000000000000 [ 391.051118][ T1150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c18c [ 391.051127][ T1150] R13: 0000000000c9fb6f R14: 00007f40acb9d9c0 R15: 000000000078c18c [ 391.051152][ T1150] INFO: task syz-executor.0:8660 blocked for more than 143 seconds. [ 391.051161][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 391.051167][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.051173][ T1150] syz-executor.0 D28752 8660 6855 0x00004004 [ 391.051195][ T1150] Call Trace: [ 391.051215][ T1150] __schedule+0x91f/0x2250 [ 391.051238][ T1150] ? io_schedule_timeout+0x140/0x140 [ 391.051263][ T1150] schedule+0xd0/0x2a0 [ 391.051289][ T1150] schedule_preempt_disabled+0xf/0x20 [ 391.051305][ T1150] __mutex_lock+0x3e2/0x10d0 [ 391.051321][ T1150] ? get_fb_info.part.0+0x18/0x80 [ 391.051337][ T1150] ? fb_open+0xd3/0x430 [ 391.051359][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 391.051378][ T1150] ? __mutex_unlock_slowpath+0xe2/0x610 [ 391.051400][ T1150] ? lock_downgrade+0x820/0x820 [ 391.051417][ T1150] ? kobject_get_unless_zero+0x15a/0x1e0 [ 391.051439][ T1150] fb_open+0xd3/0x430 [ 391.051457][ T1150] ? get_fb_info.part.0+0x80/0x80 [ 391.051470][ T1150] chrdev_open+0x266/0x770 [ 391.051485][ T1150] ? cdev_device_add+0x210/0x210 [ 391.051504][ T1150] ? security_file_open+0x1f5/0x3f0 [ 391.051524][ T1150] do_dentry_open+0x501/0x1290 [ 391.051540][ T1150] ? cdev_device_add+0x210/0x210 [ 391.051562][ T1150] path_openat+0x1bb9/0x2750 [ 391.051588][ T1150] ? path_lookupat+0x830/0x830 [ 391.051610][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 391.051631][ T1150] do_filp_open+0x17e/0x3c0 [ 391.051647][ T1150] ? may_open_dev+0xf0/0xf0 [ 391.051669][ T1150] ? do_raw_spin_lock+0x120/0x2b0 [ 391.051684][ T1150] ? rwlock_bug.part.0+0x90/0x90 [ 391.051705][ T1150] ? _raw_spin_unlock+0x24/0x40 [ 391.051718][ T1150] ? __alloc_fd+0x28d/0x600 [ 391.051741][ T1150] do_sys_openat2+0x16f/0x3b0 [ 391.051754][ T1150] ? __might_fault+0x190/0x1d0 [ 391.051768][ T1150] ? build_open_flags+0x650/0x650 [ 391.051780][ T1150] ? _copy_to_user+0x126/0x160 [ 391.051800][ T1150] ? put_timespec64+0xcb/0x120 [ 391.051816][ T1150] ? ns_to_timespec64+0xc0/0xc0 [ 391.051834][ T1150] __x64_sys_openat+0x13f/0x1f0 [ 391.051849][ T1150] ? __ia32_sys_open+0x1c0/0x1c0 [ 391.051865][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 391.051881][ T1150] ? do_syscall_64+0x1c/0xe0 [ 391.051898][ T1150] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 391.051918][ T1150] do_syscall_64+0x60/0xe0 [ 391.051934][ T1150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 391.051945][ T1150] RIP: 0033:0x45c1d9 [ 391.051950][ T1150] Code: Bad RIP value. [ 391.051958][ T1150] RSP: 002b:00007f40acb5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.051972][ T1150] RAX: ffffffffffffffda RBX: 0000000000020f00 RCX: 000000000045c1d9 [ 391.051981][ T1150] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 391.051990][ T1150] RBP: 000000000078c308 R08: 0000000000000000 R09: 0000000000000000 [ 391.051999][ T1150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c2cc [ 391.052008][ T1150] R13: 0000000000c9fb6f R14: 00007f40acb5b9c0 R15: 000000000078c2cc [ 391.052031][ T1150] [ 391.052031][ T1150] Showing all locks held in the system: [ 391.052045][ T1150] 1 lock held by khungtaskd/1150: [ 391.052050][ T1150] #0: ffffffff89bc11c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 391.052102][ T1150] 1 lock held by in:imklog/6518: [ 391.052107][ T1150] #0: ffff8880a78798f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 391.052146][ T1150] 2 locks held by syz-executor.0/8603: [ 391.052155][ T1150] 1 lock held by syz-executor.0/8608: [ 391.052160][ T1150] #0: ffff888218882078 (&fb_info->lock){+.+.}-{3:3}, at: do_fb_ioctl+0x15e/0x6c0 [ 391.052195][ T1150] 1 lock held by syz-executor.0/8614: [ 391.052200][ T1150] #0: ffff888218882078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 391.052234][ T1150] 1 lock held by syz-executor.0/8658: [ 391.052239][ T1150] #0: ffff888218882078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 391.052280][ T1150] 1 lock held by syz-executor.0/8660: [ 391.052286][ T1150] #0: ffff888218882078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 391.052316][ T1150] [ 391.052321][ T1150] ============================================= [ 391.052321][ T1150] [ 391.052333][ T1150] NMI backtrace for cpu 1 [ 391.052347][ T1150] CPU: 1 PID: 1150 Comm: khungtaskd Not tainted 5.8.0-rc6-syzkaller #0 [ 391.052356][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.052360][ T1150] Call Trace: [ 391.052375][ T1150] dump_stack+0x18f/0x20d [ 391.052393][ T1150] nmi_cpu_backtrace.cold+0x70/0xb1 [ 391.052410][ T1150] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 391.052424][ T1150] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 391.052439][ T1150] watchdog+0xd7d/0x1000 [ 391.052456][ T1150] ? reset_hung_task_detector+0x30/0x30 [ 391.052472][ T1150] kthread+0x3b5/0x4a0 [ 391.052486][ T1150] ? __kthread_bind_mask+0xc0/0xc0 [ 391.052499][ T1150] ? __kthread_bind_mask+0xc0/0xc0 [ 391.052517][ T1150] ret_from_fork+0x1f/0x30 [ 391.052539][ T1150] Sending NMI from CPU 1 to CPUs 0: [ 391.053388][ C0] NMI backtrace for cpu 0 [ 391.053395][ C0] CPU: 0 PID: 8603 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 391.053401][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.053406][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 391.053418][ C0] Code: 84 00 00 00 00 00 48 8b 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 cc fe ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 ae fe ff ff 0f 1f 40 00 66 2e 0f 1f [ 391.053422][ C0] RSP: 0018:ffffc900017f7080 EFLAGS: 00000246 [ 391.053430][ C0] RAX: 0000000000040000 RBX: 0000000000000050 RCX: ffffffff83c67044 [ 391.053435][ C0] RDX: 0000000000040000 RSI: 0000000000000050 RDI: 0000000000000000 [ 391.053441][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880a39fbd1f [ 391.053446][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880000a0050 [ 391.053451][ C0] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000f3049e1c [ 391.053457][ C0] FS: 00007f40acc21700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 391.053462][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.053467][ C0] CR2: 00007f619f0d7008 CR3: 000000008aecd000 CR4: 00000000001406f0 [ 391.053473][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.053478][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 391.053481][ C0] Call Trace: [ 391.053485][ C0] vga16fb_fillrect+0x9b4/0x193b [ 391.053489][ C0] bit_clear_margins+0x2d5/0x4a0 [ 391.053492][ C0] ? bit_bmove+0x210/0x210 [ 391.053496][ C0] ? vga16fb_update_fix+0x4a0/0x4a0 [ 391.053500][ C0] fbcon_clear_margins+0x1d5/0x230 [ 391.053504][ C0] fbcon_switch+0xb6e/0x16c0 [ 391.053507][ C0] ? fbcon_scroll+0x3600/0x3600 [ 391.053511][ C0] ? fbcon_cursor+0x52b/0x650 [ 391.053515][ C0] ? kmalloc_array.constprop.0+0x20/0x20 [ 391.053519][ C0] ? is_console_locked+0x5/0x10 [ 391.053523][ C0] ? fbcon_set_origin+0x26/0x50 [ 391.053526][ C0] redraw_screen+0x2ae/0x770 [ 391.053530][ C0] ? vga16fb_update_fix+0x4a0/0x4a0 [ 391.053533][ C0] ? vc_init+0x440/0x440 [ 391.053537][ C0] ? fbcon_set_palette+0x3a8/0x490 [ 391.053541][ C0] fbcon_modechanged+0x575/0x710 [ 391.053545][ C0] fbcon_update_vcs+0x3a/0x50 [ 391.053548][ C0] fb_set_var+0xae8/0xd60 [ 391.053552][ C0] ? fb_blank+0x190/0x190 [ 391.053557][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 391.053562][ C0] ? __raw_callee_save___kvm_vcpu_is_preempted+0x20/0x20 [ 391.053565][ C0] ? mark_lock+0xbc/0x1710 [ 391.053569][ C0] ? mark_held_locks+0x9f/0xe0 [ 391.053573][ C0] ? fb_videomode_to_var+0xf/0x610 [ 391.053577][ C0] ? display_to_var+0x67/0x7b0 [ 391.053581][ C0] fbcon_switch+0x52c/0x16c0 [ 391.053585][ C0] ? fbcon_scroll+0x3600/0x3600 [ 391.053589][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 391.053593][ C0] ? con_is_visible+0x61/0x140 [ 391.053597][ C0] ? con_is_visible+0x9f/0x140 [ 391.053601][ C0] ? fbcon_set_origin+0x26/0x50 [ 391.053605][ C0] redraw_screen+0x2ae/0x770 [ 391.053609][ C0] ? vga16fb_update_fix+0x4a0/0x4a0 [ 391.053612][ C0] ? vc_init+0x440/0x440 [ 391.053617][ C0] ? fbcon_set_palette+0x3a8/0x490 [ 391.053620][ C0] fbcon_modechanged+0x575/0x710 [ 391.053624][ C0] fbcon_update_vcs+0x3a/0x50 [ 391.053628][ C0] fb_set_var+0xae8/0xd60 [ 391.053632][ C0] ? fb_blank+0x190/0x190 [ 391.053636][ C0] ? lock_release+0x8d0/0x8d0 [ 391.053640][ C0] ? preempt_schedule_common+0x59/0xc0 [ 391.053644][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 391.053648][ C0] ? do_fb_ioctl+0x2f2/0x6c0 [ 391.053652][ C0] ? lock_acquire+0x270/0xad0 [ 391.053656][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 391.053661][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 391.053665][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 391.053668][ C0] do_fb_ioctl+0x33f/0x6c0 [ 391.053672][ C0] ? fb_set_suspend+0x1a0/0x1a0 [ 391.053677][ C0] ? tomoyo_execute_permission+0x470/0x470 [ 391.053681][ C0] ? enqueue_hrtimer+0x152/0x3f0 [ 391.053685][ C0] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 391.053689][ C0] ? do_vfs_ioctl+0x27d/0x1090 [ 391.053693][ C0] ? __fget_files+0x294/0x400 [ 391.053696][ C0] fb_ioctl+0xdd/0x130 [ 391.053700][ C0] ? do_fb_ioctl+0x6c0/0x6c0 [ 391.053704][ C0] ksys_ioctl+0x11a/0x180 [ 391.053708][ C0] __x64_sys_ioctl+0x6f/0xb0 [ 391.053712][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 391.053715][ C0] do_syscall_64+0x60/0xe0 [ 391.053720][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 391.053723][ C0] RIP: 0033:0x45c1d9 [ 391.053727][ C0] Code: Bad RIP value. [ 391.053731][ C0] RSP: 002b:00007f40acc20c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.053741][ C0] RAX: ffffffffffffffda RBX: 000000000000d440 RCX: 000000000045c1d9 [ 391.053747][ C0] RDX: 00000000200001c0 RSI: 0000000000004601 RDI: 0000000000000007 [ 391.053753][ C0] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 391.053758][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 391.053764][ C0] R13: 0000000000c9fb6f R14: 00007f40acc219c0 R15: 000000000078bf0c [ 391.053775][ T1150] Kernel panic - not syncing: hung_task: blocked tasks [ 391.053790][ T1150] CPU: 1 PID: 1150 Comm: khungtaskd Not tainted 5.8.0-rc6-syzkaller #0 [ 391.053797][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.053801][ T1150] Call Trace: [ 391.053816][ T1150] dump_stack+0x18f/0x20d [ 391.053833][ T1150] panic+0x2e3/0x75c [ 391.053847][ T1150] ? __warn_printk+0xf3/0xf3 [ 391.053863][ T1150] ? cpumask_next+0x3c/0x40 [ 391.053875][ T1150] ? printk_safe_flush+0xd6/0x120 [ 391.053887][ T1150] ? watchdog.cold+0x5/0x16b [ 391.053898][ T1150] ? watchdog+0xa82/0x1000 [ 391.053913][ T1150] watchdog.cold+0x16/0x16b [ 391.053930][ T1150] ? reset_hung_task_detector+0x30/0x30 [ 391.053944][ T1150] kthread+0x3b5/0x4a0 [ 391.053956][ T1150] ? __kthread_bind_mask+0xc0/0xc0 [ 391.053968][ T1150] ? __kthread_bind_mask+0xc0/0xc0 [ 391.053984][ T1150] ret_from_fork+0x1f/0x30 [ 391.055204][ T1150] Kernel Offset: disabled [ 393.231127][ T1150] Rebooting in 86400 seconds..