[ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 50.087536][ T4891] systemd-udevd (4891) used greatest stack depth: 22960 bytes left [ 50.100281][ T4833] systemd-udevd (4833) used greatest stack depth: 21840 bytes left [ 50.116303][ T4854] systemd-udevd (4854) used greatest stack depth: 21488 bytes left Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.51' (ECDSA) to the list of known hosts. 2020/06/26 16:48:47 fuzzer started 2020/06/26 16:48:48 dialing manager at 10.128.0.26:45395 2020/06/26 16:48:48 syscalls: 3118 2020/06/26 16:48:48 code coverage: enabled 2020/06/26 16:48:48 comparison tracing: enabled 2020/06/26 16:48:48 extra coverage: enabled 2020/06/26 16:48:48 setuid sandbox: enabled 2020/06/26 16:48:48 namespace sandbox: enabled 2020/06/26 16:48:48 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/26 16:48:48 fault injection: enabled 2020/06/26 16:48:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/26 16:48:48 net packet injection: enabled 2020/06/26 16:48:48 net device setup: enabled 2020/06/26 16:48:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/26 16:48:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/26 16:48:48 USB emulation: enabled 16:50:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x96, &(0x7f0000000340)="5e1c9d7b6b4cf0cb7a7dbab2cc345645a44d3e8339175db77d54f099df3ab0abb3ee76126990a5edd5df14a6708241a25da569229663a2335fef2bd0fa58aea992780f08cc3b81f827f23aba446e82af97341a354640e7e513bfa12b40e1a93aa2efcf3f5faea8ac5f5963eeab5515345938172e9558983080e9c790a0a6bc04c419062f13c9652a3b826258ea1285247665dfbbe507"}}], 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) syzkaller login: [ 176.919966][ T6815] IPVS: ftp: loaded support on port[0] = 21 16:50:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b415bcee079e65199615607676f8f9fc0ebf8b0b16d6f2c59957600b03eb13e22", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 177.074121][ T6815] chnl_net:caif_netlink_parms(): no params data found [ 177.194850][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.203163][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.215400][ T6815] device bridge_slave_0 entered promiscuous mode [ 177.228129][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.235489][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.245406][ T6815] device bridge_slave_1 entered promiscuous mode [ 177.279711][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.292280][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.332945][ T6815] team0: Port device team_slave_0 added [ 177.334832][ T6945] IPVS: ftp: loaded support on port[0] = 21 [ 177.343713][ T6815] team0: Port device team_slave_1 added [ 177.383955][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.392291][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.421348][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.439013][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1 16:50:48 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x58}}, 0x0) [ 177.449062][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.479347][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.590474][ T6815] device hsr_slave_0 entered promiscuous mode [ 177.657573][ T6815] device hsr_slave_1 entered promiscuous mode 16:50:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) [ 177.745199][ T6997] IPVS: ftp: loaded support on port[0] = 21 [ 178.123361][ T6945] chnl_net:caif_netlink_parms(): no params data found [ 178.174646][ T7134] IPVS: ftp: loaded support on port[0] = 21 [ 178.189285][ T6997] chnl_net:caif_netlink_parms(): no params data found [ 178.280889][ T6815] netdevsim netdevsim0 netdevsim0: renamed from eth0 16:50:49 executing program 4: syz_open_dev$rtc(0x0, 0x0, 0x40081) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) [ 178.367123][ T6815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.440447][ T6815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.562146][ T6815] netdevsim netdevsim0 netdevsim3: renamed from eth3 16:50:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x44, &(0x7f0000000340)="5e1c9d7b6b4cf0cb7a7dbab2cc345645a44d3e8339175db77d54f099df3ab0abb3ee76126990a5edd5df14a6708241a25da569229663a2335fef2bd0fa58aea992780f08"}}], 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 178.658740][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.670458][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.679407][ T6945] device bridge_slave_0 entered promiscuous mode [ 178.724992][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.733462][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.742287][ T6945] device bridge_slave_1 entered promiscuous mode [ 178.801541][ T7293] IPVS: ftp: loaded support on port[0] = 21 [ 178.803640][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.820092][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.856993][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.864085][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.873203][ T6997] device bridge_slave_0 entered promiscuous mode [ 178.885574][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.893046][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.901334][ T6997] device bridge_slave_1 entered promiscuous mode [ 178.952656][ T7320] IPVS: ftp: loaded support on port[0] = 21 [ 178.971917][ T6945] team0: Port device team_slave_0 added [ 179.024555][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.040550][ T6945] team0: Port device team_slave_1 added [ 179.078244][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.105023][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.112961][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.141096][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.156635][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.163677][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.191289][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.226576][ T6997] team0: Port device team_slave_0 added [ 179.232710][ T7134] chnl_net:caif_netlink_parms(): no params data found [ 179.263017][ T6997] team0: Port device team_slave_1 added [ 179.399876][ T6945] device hsr_slave_0 entered promiscuous mode [ 179.476142][ T6945] device hsr_slave_1 entered promiscuous mode [ 179.515937][ T6945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.523754][ T6945] Cannot create hsr debugfs directory [ 179.539894][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.547101][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.573510][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.586612][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.593566][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.619727][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.839577][ T6997] device hsr_slave_0 entered promiscuous mode [ 179.906529][ T6997] device hsr_slave_1 entered promiscuous mode [ 179.945882][ T6997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.953652][ T6997] Cannot create hsr debugfs directory [ 179.990633][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.998170][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.007486][ T7134] device bridge_slave_0 entered promiscuous mode [ 180.015138][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 180.060371][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.067970][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.079858][ T7134] device bridge_slave_1 entered promiscuous mode [ 180.163512][ T7134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.184345][ T7320] chnl_net:caif_netlink_parms(): no params data found [ 180.224075][ T7134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.322938][ T7134] team0: Port device team_slave_0 added [ 180.332373][ T7134] team0: Port device team_slave_1 added [ 180.406826][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.414506][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.423641][ T7320] device bridge_slave_0 entered promiscuous mode [ 180.444496][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.451741][ T6945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.508762][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.515887][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.542175][ T7134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.559856][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.567310][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.575256][ T7320] device bridge_slave_1 entered promiscuous mode [ 180.599077][ T6945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.650645][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.657868][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.684369][ T7134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.790086][ T7134] device hsr_slave_0 entered promiscuous mode [ 180.866158][ T7134] device hsr_slave_1 entered promiscuous mode [ 180.905876][ T7134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.913547][ T7134] Cannot create hsr debugfs directory [ 180.920456][ T6945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.983328][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.991330][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.999970][ T7293] device bridge_slave_0 entered promiscuous mode [ 181.013972][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.021851][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.034896][ T7293] device bridge_slave_1 entered promiscuous mode [ 181.052418][ T6945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.110580][ T7320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.121582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.135267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.156853][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.182212][ T7320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.242652][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.267636][ T7320] team0: Port device team_slave_0 added [ 181.297459][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.306383][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.314821][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.322166][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.330286][ T6997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.359640][ T7320] team0: Port device team_slave_1 added [ 181.373193][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.403162][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.416673][ T6997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.454956][ T6997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.527216][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.534371][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.561752][ T7320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.573475][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.583973][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.593026][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.600364][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.608238][ T6997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.664369][ T7293] team0: Port device team_slave_0 added [ 181.678689][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.690647][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.721715][ T7320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.747531][ T7293] team0: Port device team_slave_1 added [ 181.784457][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.797518][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.825890][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.863864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.889388][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.897353][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.925394][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.988810][ T7320] device hsr_slave_0 entered promiscuous mode [ 182.036634][ T7320] device hsr_slave_1 entered promiscuous mode [ 182.075748][ T7320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.084029][ T7320] Cannot create hsr debugfs directory [ 182.091673][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.113471][ T7134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.183279][ T7134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.228995][ T7134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.293304][ T7134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.362106][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.371617][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.381363][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.391012][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.459587][ T7293] device hsr_slave_0 entered promiscuous mode [ 182.486208][ T7293] device hsr_slave_1 entered promiscuous mode [ 182.525939][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.533722][ T7293] Cannot create hsr debugfs directory [ 182.556436][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.621379][ T6815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.634326][ T6815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.660341][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.671016][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.680418][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.689443][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.729864][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.845042][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.853610][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.909976][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.924935][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.990995][ T7293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.049529][ T7293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.135441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.144101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.153344][ T7293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.192163][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.222732][ T7320] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.258072][ T7293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.308413][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.319674][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.333653][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.343793][ T7320] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.393468][ T7320] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.453396][ T7320] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.513558][ T6815] device veth0_vlan entered promiscuous mode [ 183.525281][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.535485][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.544856][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.552119][ T2478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.560111][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.569005][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.577822][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.586328][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.594152][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.603998][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.612956][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.620225][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.631936][ T6997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.657538][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.666477][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.674787][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.690194][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.699617][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.732866][ T6815] device veth1_vlan entered promiscuous mode [ 183.746605][ T7134] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.772677][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.784719][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.796383][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.805280][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.819743][ T6997] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.851482][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.859617][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.868955][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.880300][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.889881][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.898722][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.909480][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.918744][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.925911][ T2478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.945090][ T6945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.960453][ T6945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.001667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.010449][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.021700][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.030255][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.037630][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.046648][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.055025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.064179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.075400][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.084376][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.091518][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.100201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.109603][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.149340][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.157990][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.168343][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.177992][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.185077][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.194218][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.203541][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.215363][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.257438][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.277114][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.291375][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.300462][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.313880][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.321864][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.330091][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.339607][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.356095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.365085][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.375476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.384854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.394915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.437785][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.447453][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.457002][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.468971][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.478397][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.487335][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.496279][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.504627][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.514237][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.532709][ T7134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.554576][ T6997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.574424][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.596939][ T6815] device veth0_macvtap entered promiscuous mode [ 184.604489][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.613922][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.629270][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.679156][ T6815] device veth1_macvtap entered promiscuous mode [ 184.694443][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.722584][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.748500][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.757720][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.767561][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.775400][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.784045][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.792254][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.805390][ T6945] device veth0_vlan entered promiscuous mode [ 184.819923][ T7134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.837206][ T7320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.850765][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.860064][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.869093][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.878705][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.887763][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.932246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.945290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.954982][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.963353][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.971773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.981146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.990141][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.997559][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.005168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.012881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.020629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.030339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.042916][ T6945] device veth1_vlan entered promiscuous mode [ 185.056223][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.090714][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.099142][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.109968][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.118966][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.127902][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.137278][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.146088][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.154836][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.163862][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.173246][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.195057][ T7320] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.224647][ T6997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.232497][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.244578][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.253304][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.261784][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.270005][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.279978][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.383437][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.392409][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.403612][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.411512][ T2478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.420594][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.429529][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.499833][ T7293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.524877][ T6945] device veth0_macvtap entered promiscuous mode [ 185.537885][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.550438][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.560609][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.671888][ T7134] device veth0_vlan entered promiscuous mode [ 185.699709][ T6945] device veth1_macvtap entered promiscuous mode [ 185.745840][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.754987][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.779047][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.791787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.801156][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.808525][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.817165][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.825602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.834088][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.843935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.865439][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.883145][ T7134] device veth1_vlan entered promiscuous mode [ 185.911319][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.930188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.942308][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.952921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.963790][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.978847][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.990075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.002264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.020043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.035784][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.044513][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.062773][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.081394][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.094159][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.126256][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.140833][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.172871][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.185197][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.201073][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.210377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.225187][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.234232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.248189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.259355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.270527][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.289886][ T7134] device veth0_macvtap entered promiscuous mode [ 186.302965][ T7134] device veth1_macvtap entered promiscuous mode [ 186.324271][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.334300][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.343364][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.353284][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.362486][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.371064][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.401148][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.411355][ T6997] device veth0_vlan entered promiscuous mode [ 186.431061][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.439486][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.449233][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.458477][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.485349][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.502116][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.512982][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.527723][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.541102][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.554304][ T6997] device veth1_vlan entered promiscuous mode [ 186.586339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.594654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.604408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.613493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.622736][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.631327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.644010][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.657026][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.666967][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.677911][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.689429][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.762341][ T7293] device veth0_vlan entered promiscuous mode [ 186.774881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.787129][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.796794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.806636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.884811][ T7320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.957704][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.974093][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.982458][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.002932][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.080735][ T6997] device veth0_macvtap entered promiscuous mode [ 187.093801][ T7293] device veth1_vlan entered promiscuous mode 16:50:58 executing program 1: [ 187.197288][ T6997] device veth1_macvtap entered promiscuous mode 16:50:58 executing program 1: 16:50:58 executing program 1: [ 187.305726][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.314237][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.337128][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 16:50:58 executing program 1: [ 187.370208][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.403231][ T7293] device veth0_macvtap entered promiscuous mode 16:50:58 executing program 1: [ 187.437204][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.470205][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.489158][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.512464][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:50:58 executing program 1: [ 187.533865][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.555008][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.601357][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.627314][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.676909][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.706862][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.717201][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.749918][ T7293] device veth1_macvtap entered promiscuous mode [ 187.763474][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.936341][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.953149][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.966079][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.977972][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.995455][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.007515][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.019734][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.027870][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.047126][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.057162][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.067452][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.077985][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.122572][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.135225][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.146046][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.157711][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.167705][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.178232][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.188282][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.199742][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.211793][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.228910][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.241542][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.254604][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.265876][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.275955][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.286815][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.296762][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.308515][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.318982][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.329550][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.341258][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.390271][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.400519][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.428461][ T7320] device veth0_vlan entered promiscuous mode [ 188.468196][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.483643][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.613142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.625361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.650149][ T7320] device veth1_vlan entered promiscuous mode 16:50:59 executing program 0: 16:50:59 executing program 1: 16:50:59 executing program 2: 16:50:59 executing program 3: [ 188.865170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.878426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.924280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.948913][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.970524][ T7320] device veth0_macvtap entered promiscuous mode [ 188.985420][ C0] hrtimer: interrupt took 78902 ns 16:50:59 executing program 4: [ 189.044569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.075664][ T7320] device veth1_macvtap entered promiscuous mode [ 189.143726][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.172658][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.184378][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.205756][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.226404][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.255434][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.276056][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.295901][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.315762][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.336393][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.367618][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.405559][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.415056][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.437389][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.457844][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.478892][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.491088][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.502207][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.513543][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.525142][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.536113][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.546608][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.558412][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.570033][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.579560][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.589364][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:51:00 executing program 5: 16:51:00 executing program 1: 16:51:00 executing program 0: 16:51:00 executing program 3: 16:51:00 executing program 2: 16:51:00 executing program 4: 16:51:00 executing program 3: 16:51:00 executing program 0: 16:51:00 executing program 4: 16:51:00 executing program 1: 16:51:00 executing program 2: 16:51:00 executing program 5: 16:51:00 executing program 1: 16:51:00 executing program 0: 16:51:01 executing program 2: 16:51:01 executing program 4: 16:51:01 executing program 5: 16:51:01 executing program 3: 16:51:01 executing program 1: 16:51:01 executing program 0: 16:51:01 executing program 2: 16:51:01 executing program 4: 16:51:01 executing program 3: 16:51:01 executing program 5: 16:51:01 executing program 0: 16:51:01 executing program 1: 16:51:01 executing program 2: 16:51:01 executing program 4: 16:51:01 executing program 3: 16:51:01 executing program 5: 16:51:01 executing program 1: 16:51:01 executing program 0: 16:51:01 executing program 4: 16:51:01 executing program 3: 16:51:01 executing program 2: 16:51:01 executing program 1: 16:51:01 executing program 5: 16:51:01 executing program 0: 16:51:01 executing program 5: 16:51:01 executing program 3: 16:51:01 executing program 2: 16:51:01 executing program 1: 16:51:01 executing program 4: 16:51:01 executing program 0: 16:51:01 executing program 5: 16:51:01 executing program 4: 16:51:01 executing program 3: 16:51:01 executing program 1: 16:51:01 executing program 2: 16:51:01 executing program 0: 16:51:01 executing program 5: 16:51:01 executing program 2: 16:51:01 executing program 4: 16:51:01 executing program 3: 16:51:02 executing program 1: 16:51:02 executing program 0: 16:51:02 executing program 5: 16:51:02 executing program 2: 16:51:02 executing program 3: 16:51:02 executing program 1: 16:51:02 executing program 4: 16:51:02 executing program 0: 16:51:02 executing program 2: 16:51:02 executing program 5: 16:51:02 executing program 3: 16:51:02 executing program 1: 16:51:02 executing program 4: 16:51:02 executing program 0: 16:51:02 executing program 5: 16:51:02 executing program 2: 16:51:02 executing program 1: 16:51:02 executing program 3: 16:51:02 executing program 4: 16:51:02 executing program 0: 16:51:02 executing program 2: 16:51:02 executing program 5: 16:51:02 executing program 3: 16:51:02 executing program 1: 16:51:02 executing program 0: 16:51:02 executing program 4: 16:51:02 executing program 5: 16:51:02 executing program 2: 16:51:02 executing program 3: 16:51:02 executing program 1: 16:51:02 executing program 0: 16:51:02 executing program 4: 16:51:02 executing program 5: 16:51:02 executing program 2: 16:51:02 executing program 3: 16:51:02 executing program 4: 16:51:02 executing program 1: 16:51:02 executing program 0: 16:51:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, 0x0) 16:51:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = gettid() tkill(r5, 0x1000000000016) 16:51:03 executing program 3: 16:51:03 executing program 4: 16:51:03 executing program 1: 16:51:03 executing program 0: 16:51:03 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:51:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) 16:51:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454ca, 0x400000) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioprio_get$uid(0x3, r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000002c0)=""/240) shmctl$SHM_UNLOCK(0x0, 0xc) 16:51:03 executing program 0: io_setup(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 16:51:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 16:51:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000700)=""/4096, 0x1000, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)=0xfffffffffffffe84) 16:51:03 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@ng, 0x2, 0x3) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 16:51:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) 16:51:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132320) sendto$packet(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="2f11b1bc69ac"}, 0x14) 16:51:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "e5c47215bc3b8ee09c57af02d35943a462b4b3fc607937f57e32c3f03e0878e2efa5174e714256540cb90e3b28a472"}, 0x3a) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x9) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a80)}], 0x1}, 0x0) 16:51:04 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 16:51:04 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000), 0xc, &(0x7f0000001080)={0x0, 0x1040}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = socket$inet6(0x10, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x5451, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x89a0, 0x0) 16:51:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) 16:51:04 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 16:51:04 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000700)="585ccbe4ed83b836c1a647c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a2937ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f612ffd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539ae11359e4e93c553e0cad0f792cff6eae3ee323e48af852e0f19f5537f", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) 16:51:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) 16:51:04 executing program 3: setrlimit(0x7, &(0x7f0000000240)) getrandom(&(0x7f00000012c0)=""/4134, 0x1026, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 16:51:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x2, &(0x7f0000000100)) 16:51:04 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000700)="585ccbe4ed83b836c1a647c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a2937ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f612ffd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539ae11359e4e93c553e0cad0f792cff6eae3ee323e48af852e0f19f5537f", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) 16:51:04 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454ca, 0x400000) ioprio_get$uid(0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000002c0)=""/240) shmctl$SHM_UNLOCK(0x0, 0xc) 16:51:05 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xc0002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x62}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000780)={0x0}, 0x2) 16:51:05 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="28158bc841ecce7803d5609276c8e2685d8770ceb30cfbef78e9bfac9f495ad9977c1cb5ad009c773e6c8b77d04932333bd318894326c4360f84a55e", 0x3c, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="00b4f5f8c3df185ea2796b2dcaf69ab8880df68a41e5ebe0bfbc0e7a9e2113772b8ae51750441793518f41d0a31fc63384a8870bdc8a22e66572d6a620e2bc91352e3e41b1a2ff2400b57f377ba9248afb", @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB="d7ed789cb565af6a710ff38d0dc6b5c61c9fc6fde57ce4a0fdbc764d0b8267c668e029d01a5ef68cd548b986d16599c9e93340075cbf1fefffdc164231b8298297511c73ff699416db3fe728a85c7d93c3c897937626096f3e1b4f1a9dc7b1891c41154130cd7c750595cb31ec1e5b03bc7b357bca20ae7afb00"/138], 0x70}}, 0x0) 16:51:05 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="00b4f5f8c3df185ea2796b2dcaf69ab8880df68a41e5ebe0bfbc0e7a9e2113772b8ae51750441793518f41d0a31fc63384a8870bdc8a22e66572d6a620", @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB="d7ed789cb565af6a710ff38d0dc6b5c61c9fc6fde57ce4a0fdbc764d0b8267c668e029d01a5ef68cd548b986d16599c9e93340075cbf1fefffdc164231b8298297511c73ff699416db3fe728a85c7d93c3c897937626096f3e1b4f1a9dc7b1891c41154130cd7c750595cb31ec1e5b03bc7b357bca20ae7afb00"/138], 0x70}}, 0x0) 16:51:05 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 16:51:05 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 16:51:05 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 16:51:05 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xc0002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x62}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000780)={0x0}, 0x2) 16:51:05 executing program 5: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000540)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 16:51:05 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0)=0x3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) connect(r4, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) [ 195.030245][ T8395] IPVS: ftp: loaded support on port[0] = 21 16:51:06 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 16:51:06 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 16:51:06 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 16:51:06 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) [ 195.718429][ T8395] IPVS: ftp: loaded support on port[0] = 21 16:51:07 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 16:51:07 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r0, r1, 0x0) 16:51:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000002c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000200)=""/179, 0xb3}, {0x0}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000640)=""/62, 0x3e}], 0x9, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/52, 0x34}], 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup3(r4, r3, 0x0) write$binfmt_misc(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="73797a3060d0ac9187f2087725fb7eea5061bf4c348c0fb5e1ad87edd0677ea5ecdb14726419e404ae324127ca4a8d42122ac10473564420acf3080c08"], 0xf2) [ 196.365545][ T162] tipc: TX() has been purged, node left! 16:51:07 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000700)="585ccbe4ed83b836c1a647c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a2937ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f612ffd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539ae11359e4e93c553e0cad0f792cff6eae3ee323e48af852e0f19f5537f", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x448680, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) 16:51:07 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0)=0x3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) connect(r4, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 16:51:07 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 16:51:07 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0)=0x3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) connect(r4, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 16:51:07 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000700)="585ccbe4ed83b836c1a647c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a2937ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f612ffd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539ae11359e4e93c553e0cad0f792cff6eae3ee323e48af852e0f19f5537f", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x448680, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) 16:51:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(0xffffffffffffffff) [ 197.193183][ T8463] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 16:51:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840000002c00250d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000ffff00000a0001006261736963"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 16:51:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840000002c00250d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000ffff00000a0001006261736963"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 16:51:08 executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="00b4f5f8c3df185ea2796b2dcaf69ab8880df68a41e5ebe0bfbc0e7a9e2113772b8ae51750441793518f41d0a31fc63384a8870bdc8a22e66572d6a620e2bc91352e3e41b1a2ff2400b57f377ba9248afb", @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB="d7ed789cb565af6a710ff38d0dc6b5c61c9fc6fde57ce4a0fdbc764d0b8267c668e029d01a5ef68cd548b986d16599c9e93340075cbf1fefffdc164231b8298297511c73ff699416db3fe728a85c7d93c3c897937626096f3e1b4f1a9dc7b1891c41154130cd7c750595cb31ec1e5b03bc7b357bca20ae7afb00"/138], 0x70}}, 0x0) 16:51:08 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="28158bc841ecce7803d5609276c8e2685d8770ceb30cfbef78e9bfac9f495ad9977c1cb5ad009c773e6c8b77d04932333bd318894326c4360f84a55e", 0x3c, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="00b4f5f8c3df185ea2796b2dcaf69ab8880df68a41e5ebe0bfbc0e7a9e2113772b8ae51750441793518f41d0a31fc63384a8870bdc8a22e66572d6a620e2bc91352e3e41b1a2ff2400b57f377ba9248a", @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB="d7ed789cb565af6a710ff38d0dc6b5c61c9fc6fde57ce4a0fdbc764d0b8267c668e029d01a5ef68cd548b986d16599c9e93340075cbf1fefffdc164231b8298297511c73ff699416db3fe728a85c7d93c3c897937626096f3e1b4f1a9dc7b1891c41154130cd7c750595cb31ec1e5b03bc7b357bca20ae7afb00"/138], 0x70}}, 0x0) [ 197.466942][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.485569][ T8496] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.543836][ T8498] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.565655][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.596223][ T8496] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.677998][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.690992][ T8498] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.722278][ T8506] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.792314][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.842731][ T8506] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 16:51:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840000002c00250d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000ffff00000a0001006261736963"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 16:51:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000002c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000200)=""/179, 0xb3}, {0x0}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000640)=""/62, 0x3e}], 0x9, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/52, 0x34}], 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup3(r4, r3, 0x0) write$binfmt_misc(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="73797a3060d0ac9187f2087725fb7eea5061bf4c348c0fb5e1ad87edd0677ea5ecdb14726419e404ae324127ca4a8d42122ac10473564420acf3080c08"], 0xf2) 16:51:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840000002c00250d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000ffff00000a0001006261736963"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 16:51:10 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="28158bc841ecce7803d5609276c8e2685d8770ceb30cfbef78e9bfac9f495ad9977c1cb5ad009c773e6c8b77d04932333bd318894326c4360f84a55e", 0x3c, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="00b4f5f8c3df185ea2796b2dcaf69ab8880df68a41e5ebe0bfbc0e7a9e2113772b8ae51750441793518f41d0a31fc63384a8870bdc8a22e66572d6a620e2bc91352e3e41b1a2ff2400b57f377ba9248a", @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB="d7ed789cb565af6a710ff38d0dc6b5c61c9fc6fde57ce4a0fdbc764d0b8267c668e029d01a5ef68cd548b986d16599c9e93340075cbf1fefffdc164231b8298297511c73ff699416db3fe728a85c7d93c3c897937626096f3e1b4f1a9dc7b1891c41154130cd7c750595cb31ec1e5b03bc7b357bca20ae7afb00"/138], 0x70}}, 0x0) 16:51:10 executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="00b4f5f8c3df185ea2796b2dcaf69ab8880df68a41e5ebe0bfbc0e7a9e2113772b8ae51750441793518f41d0a31fc63384a8870bdc8a22e66572d6a620e2bc91352e3e41b1a2ff2400b57f377ba9248afb", @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB="d7ed789cb565af6a710ff38d0dc6b5c61c9fc6fde57ce4a0fdbc764d0b8267c668e029d01a5ef68cd548b986d16599c9e93340075cbf1fefffdc164231b8298297511c73ff699416db3fe728a85c7d93c3c897937626096f3e1b4f1a9dc7b1891c41154130cd7c750595cb31ec1e5b03bc7b357bca20ae7afb00"/138], 0x70}}, 0x0) 16:51:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) 16:51:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840000002c00250d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000ffff00000a0001006261736963"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 16:51:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000002c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000200)=""/179, 0xb3}, {0x0}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000640)=""/62, 0x3e}], 0x9, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/52, 0x34}], 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup3(r4, r3, 0x0) write$binfmt_misc(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="73797a3060d0ac9187f2087725fb7eea5061bf4c348c0fb5e1ad87edd0677ea5ecdb14726419e404ae324127ca4a8d42122ac10473564420acf3080c08"], 0xf2) 16:51:10 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) dup3(r0, r1, 0x0) 16:51:11 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(r0, 0x0) [ 200.447537][ T8552] debugfs: Directory 'loop0' with parent 'block' already present! 16:51:11 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) 16:51:11 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(r0, 0x0) 16:51:11 executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="00b4f5f8c3df185ea2796b2dcaf69ab8880df68a41e5ebe0bfbc0e7a9e2113772b8ae51750441793518f41d0a31fc63384a8870bdc8a22e66572d6a620e2bc91352e3e41b1a2ff2400b57f377ba9248afb", @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB="d7ed789cb565af6a710ff38d0dc6b5c61c9fc6fde57ce4a0fdbc764d0b8267c668e029d01a5ef68cd548b986d16599c9e93340075cbf1fefffdc164231b8298297511c73ff699416db3fe728a85c7d93c3c897937626096f3e1b4f1a9dc7b1891c41154130cd7c750595cb31ec1e5b03bc7b357bca20ae7afb00"/138], 0x70}}, 0x0) 16:51:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000002c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000200)=""/179, 0xb3}, {0x0}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000640)=""/62, 0x3e}], 0x9, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/52, 0x34}], 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup3(r4, r3, 0x0) write$binfmt_misc(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="73797a3060d0ac9187f2087725fb7eea5061bf4c348c0fb5e1ad87edd0677ea5ecdb14726419e404ae324127ca4a8d42122ac10473564420acf3080c08"], 0xf2) 16:51:12 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) gettid() ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x4, 0x0, "44499c81bdf79455e94b1daee8c7d3eb5d7777"}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000700)="585ccbe4ed83b836c1a647c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a2937ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f612ffd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539ae11359e4e93c553e0cad0f792cff6eae3ee323e48af852e0f19f5537f", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) 16:51:12 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="00b4f5f8c3df185ea2796b2dcaf69ab8880df68a41e5ebe0bfbc0e7a9e2113772b8ae51750441793518f41d0a31fc63384a8870bdc8a22e66572d6a620e2bc91352e3e41b1a2ff2400b57f377ba9248a", @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB="d7ed789cb565af6a710ff38d0dc6b5c61c9fc6fde57ce4a0fdbc764d0b8267c668e029d01a5ef68cd548b986d16599c9e93340075cbf1fefffdc164231b8298297511c73ff699416db3fe728a85c7d93c3c897937626096f3e1b4f1a9dc7b1891c41154130cd7c750595cb31ec1e5b03bc7b357bca20ae7afb"], 0x70}}, 0x0) 16:51:12 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0xd}}, 0x50) 16:51:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) 16:51:12 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r0, r1, 0x0) 16:51:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) 16:51:13 executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) 16:51:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 16:51:13 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) gettid() ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x4, 0x0, "44499c81bdf79455e94b1daee8c7d3eb5d7777"}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000700)="585ccbe4ed83b836c1a647c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a2937ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f612ffd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539ae11359e4e93c553e0cad0f792cff6eae3ee323e48af852e0f19f5537f", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) 16:51:13 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 16:51:13 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000294000/0x2000)=nil, &(0x7f0000061000/0xf000)=nil], 0x0, &(0x7f0000000100), 0x0) [ 203.455161][ T162] tipc: TX() has been purged, node left! 16:51:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000002c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000200)=""/179, 0xb3}, {0x0}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000640)=""/62, 0x3e}], 0x9, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/52, 0x34}], 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup3(r4, r3, 0x0) write$binfmt_misc(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="73797a3060d0ac9187f2087725fb7eea5061bf4c348c0fb5e1ad87edd0677ea5ecdb14726419e404ae324127ca4a8d42122ac10473564420acf3080c08"], 0xf2) 16:51:14 executing program 5: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) gettid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x7d, 0x0, {{0x500, 0xbf, 0x500, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0xfb) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x1, 0x3a74, 0x4, 0x6, "44499c81bdf79455e94b1daee8c7d3eb5d7777"}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5ba6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 16:51:14 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x8a, &(0x7f0000000040)="8f0001bdbf4ce34d66c7265014d0fa54dc557f565e0a728cd469b8344b76f0347c45860ba0a7d4226a8a6c329f4a23783d91ae1e6b653d6b58cbba9f6b5fa138e17eb144992a73baaee4a47ddef963c10ec17c5a2c7cfaa186b68d7551c4d940bc55fa8e50358bb08462bf736924a1ce4a03276e66decdd271f3114992b5f42df0cd8e3b3c500f733b7d") 16:51:14 executing program 4: r0 = socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 16:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00b4c4e3f0722a733f783f1fd6fe93c6bbcbaba4cf4b7db918b91921253757e9a3d9bf33701b4140996c0dc96af21a93ec071501e10efc8bf8c9522caf43f379202e335ce139bfe8bc9c6c2447369e06ffc8e02e84cd356a48d492a271e93c52288f637d7761dad07756a538cb7656e057513b7ff2df4a6cff20043fa9f2a5d87702c2436b821b5d96a59f95cc6a1f3f8acb1069f19d0a9f3a1ce31be52e12f47e25421912e4dfa1ef27ee1e9d835d8c673654bbe56700001381464835272ff78da329f2249f06dfe79de03d08a4a990a4305d50a9981de7e455bba27f5e29db3dc401f392cdf24ce64a27f5139de40751abda11f3b2055db3764874c684004ac25549f8b65c1628b7f7ee6d4a34e88b2907789fec8a669dcf89b9e51a996296eabf68fc44029cf473d9ab8f5b409b9cb59dce1b811e7b99521fbcd22450fa5de4929fed32fcfac9df5ff8e9a0a027b5e436d6ed3259b2ce1ce739159d7232bf91e3bea450c6f2c230a2fdd1c02af7d74c12fe9f2298c11516048766483e733c61c7fce2c2732267c2332ea803b481adc0955482d8ef78fc3584d49051ec1903096b1234730bc944e344d952b3fc589a0263a34951e0243203368a230060289adecb66d505cf5e0ce4059fb5d4225047a292406fb6a3146940368126ceb6ccbe2e6b38d3c5095675bc54a535df19341fbd82505e59de5f07bd8f716fc66d2759cd9a1981e67b000000000000000000000000802f8b1452f0e6451bc4dc24e60153d94abcb4b5653f16975c4827f62e8ff8f5e3019830426b68a27b3c906044252522b929a861b83705002afdc618bc5c0bcb18816be431150a80245d9fe989350a1c254691527b0031f0cf1d796d42b9a179b3b9000f40567b29b7abd0f062854ec07df72c6fdf6e9b1ca2aab15db56c8f5ee1e88c328d6a220b53326889d7f72ea13c4d168c0bb7"], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2c, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup3(r4, r3, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400, 0xe0, 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x6b}, 0x8) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/74) write$binfmt_misc(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="73797a3060d0ac9187f2087725fb7eea5061bf4c348c0fb5e1ad87edd0677ea5ecdb14726419e404ae324127ca4a8d42122ac10473564420acf3080c0800000000002b4b0614b1b8a27e45767dc9cf4895ddfac9dcc578d69adbb6cff18f501c9ce731808c2705d3e9041066fbdeed5ca00259b175d90ec4f5f8a13837ff8a068eac44c69a6430b6f7c984f7c3e5b95d5ae48b5c038f0c46"], 0xf2) 16:51:14 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 16:51:15 executing program 4: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0x2, 0x7d, 0x0, {{0x500, 0xbf, 0x500, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0xfb) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x1, 0x3a74, 0x4, 0x6, "44499c81bdf79455e94b1daee8c7d3eb5d7777"}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5ba6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) [ 204.255809][ T3687] usb 1-1: new high-speed USB device number 2 using dummy_hcd 16:51:15 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000fff}) 16:51:15 executing program 4: dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x100, 0x0, 0x6, 0x6}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="28158bc841ecce7803d5609276c8e2685d8770ceb30cfbef78e9bfac9f495ad9977c1cb5ad009c773e6c8b77d04932333bd318894326c4360f", 0x39, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB], 0x70}}, 0x0) [ 204.525092][ T3687] usb 1-1: Using ep0 maxpacket: 8 [ 204.645780][ T3687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 16:51:15 executing program 5: socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x81}, 0x1414, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000fff}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000003c0)=0x9, 0x4) socket$kcm(0x10, 0x2, 0x0) [ 204.689274][ T3687] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 16:51:15 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) [ 204.796722][ T3687] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.828992][ T3687] usb 1-1: config 1 interface 0 has no altsetting 0 [ 204.995369][ T3687] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 205.015035][ T3687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.023065][ T3687] usb 1-1: Product: syz [ 205.062058][ T3687] usb 1-1: Manufacturer: syz [ 205.068129][ T3687] usb 1-1: SerialNumber: syz 16:51:16 executing program 4: dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x100, 0x0, 0x6, 0x6}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="28158bc841ecce7803d5609276c8e2685d8770ceb30cfbef78e9bfac9f495ad9977c1cb5ad009c773e6c8b77d04932333bd318894326c4360f", 0x39, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @empty, 0x4}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000405d0a7e830ab2ed45a09cf712760537480fa6117607000322031799df6ee7082283076192caf49d7f3d5812867e296acb8ea579da93089165af58ad0cee915be4c8765e10758194b26172d4a28f0", @ANYRES32, @ANYBLOB="08000b00bbff0800190000008b8eaa59c0bcf370c09d8b222dd809f4bf07b5c50ee731fa3db6932395d7d4ab7822e16d43dd4f7745a6bb208a9b9cc01ec3abf2ce8bd06b2b228b96f80056f9b92aa9ed5358a2d0b624478342", @ANYRES32, @ANYRES64, @ANYBLOB], 0x70}}, 0x0) [ 205.570225][ T17] usb 1-1: USB disconnect, device number 2 16:51:17 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) 16:51:17 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) [ 206.335032][ T17] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 206.585084][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 206.705376][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.730641][ T17] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.779035][ T17] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.849405][ T17] usb 1-1: config 1 interface 0 has no altsetting 0 [ 207.025111][ T17] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 207.065684][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.104091][ T17] usb 1-1: Product: syz 16:51:18 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 16:51:18 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840000002c00250d00"/20, @ANYRES32, @ANYBLOB="0000000000000000ffff00000a00010062"], 0x84}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 16:51:18 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061400052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000180)="000001000000c9aef6903f7b9687bf6cdc95008158bc38bd71d8e060") 16:51:18 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 16:51:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000300)=""/241, 0xf1}, {0x0}, {&(0x7f0000000400)=""/226, 0xe2}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000640)=""/62, 0x3e}], 0x9, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/52, 0x34}], 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup3(r3, r2, 0x0) write$binfmt_misc(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="73797a3060d0ac9187f2087725fb7eea5061bf4c348c0fb5e1ad87edd0677ea5ecdb14726419e404ae324127ca4a8d42122ac10473564420acf3080c0800000000"], 0xf2) 16:51:18 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) [ 207.149637][ T17] usb 1-1: Manufacturer: syz [ 207.154467][ T17] usb 1-1: SerialNumber: syz [ 207.216530][ T17] usb 1-1: can't set config #1, error -71 [ 207.260677][ T17] usb 1-1: USB disconnect, device number 3 [ 207.316406][ T8780] __nla_validate_parse: 12 callbacks suppressed [ 207.316433][ T8780] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.377916][ T8779] IPVS: ftp: loaded support on port[0] = 21 [ 207.595504][ T2478] usb 6-1: new high-speed USB device number 2 using dummy_hcd 16:51:18 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) [ 207.854917][ T2478] usb 6-1: Using ep0 maxpacket: 8 16:51:18 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840000002c00250d00"/20, @ANYRES32, @ANYBLOB="0000000000000000ffff00000a00010062"], 0x84}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 207.950892][ T8784] IPVS: ftp: loaded support on port[0] = 21 [ 208.008581][ T2478] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.058721][ T2478] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 16:51:19 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) [ 208.117419][ T8820] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.175960][ T2478] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.300286][ T2478] usb 6-1: config 1 interface 0 has no altsetting 0 [ 208.535053][ T2478] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 16:51:19 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 16:51:19 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x3, 0x12, 0x401, 0x5}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) socket$packet(0x11, 0x0, 0x300) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) [ 208.575881][ T2478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.593950][ T2478] usb 6-1: Product: syz [ 208.603147][ T2478] usb 6-1: Manufacturer: syz [ 208.614447][ T2478] usb 6-1: SerialNumber: syz 16:51:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000700)="585ccbe4ed83b836c1a647c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a2937ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f612ffd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539ae11359e4e93c553e0cad0f792cff6eae3ee323e48af852e0f19f5537f", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) [ 208.802652][ T8857] IPVS: ftp: loaded support on port[0] = 21 [ 208.885167][ C1] ================================================================== [ 208.893577][ C1] BUG: KASAN: slab-out-of-bounds in snd_usb_mixer_notify_id+0x219/0x2a0 [ 208.901915][ C1] Write of size 4 at addr ffff8880a64432e0 by task kworker/u4:4/162 [ 208.909980][ C1] [ 208.912333][ C1] CPU: 1 PID: 162 Comm: kworker/u4:4 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 208.922925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.933333][ C1] Workqueue: netns cleanup_net [ 208.938371][ C1] Call Trace: [ 208.941683][ C1] dump_stack+0x18f/0x20d [ 208.946042][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 208.951697][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 208.957363][ C1] print_address_description.constprop.0.cold+0xd3/0x413 [ 208.964722][ C1] ? vprintk_func+0x97/0x1a6 [ 208.969462][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 208.975997][ C1] kasan_report.cold+0x1f/0x37 [ 208.981098][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 208.986755][ C1] snd_usb_mixer_notify_id+0x219/0x2a0 [ 208.992245][ C1] snd_usb_mixer_interrupt+0x416/0x980 [ 208.997814][ C1] ? kcov_remote_softirq_start+0x11/0x90 [ 209.004440][ C1] __usb_hcd_giveback_urb+0x2af/0x4b0 [ 209.009930][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 209.015164][ C1] dummy_timer+0x1246/0x2fe4 [ 209.019789][ C1] ? __lock_acquire+0x2224/0x48b0 [ 209.025027][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 209.029849][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 209.035413][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 209.041451][ C1] call_timer_fn+0x1ac/0x760 [ 209.046065][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 209.050878][ C1] ? msleep_interruptible+0x130/0x130 [ 209.056890][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 209.062108][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 209.068115][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 209.072907][ C1] run_timer_softirq+0x60f/0x15d0 [ 209.078513][ C1] ? add_timer+0x830/0x830 [ 209.083054][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 209.088708][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 209.094708][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 209.100722][ C1] __do_softirq+0x268/0x9ee [ 209.105262][ C1] irq_exit_rcu+0x13c/0x170 [ 209.109792][ C1] sysvec_apic_timer_interrupt+0xef/0x260 [ 209.115535][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 209.121642][ C1] RIP: 0010:lock_acquire+0x267/0x8f0 [ 209.127027][ C1] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 c3 05 00 00 48 83 3d 35 65 5b 08 00 0f 84 62 04 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 03 44 24 08 48 c7 [ 209.147018][ C1] RSP: 0018:ffffc900015e7a40 EFLAGS: 00000282 [ 209.153253][ C1] RAX: 1ffffffff1369538 RBX: ffff8880a8fb4580 RCX: 0000000000000001 [ 209.161350][ C1] RDX: dffffc0000000000 RSI: 00000000bbb7d6bf RDI: 0000000000000282 [ 209.169428][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff18b1145 [ 209.178203][ C1] R10: ffffffff8c588a27 R11: fffffbfff18b1144 R12: 0000000000000002 [ 209.186197][ C1] R13: ffffffff89bbde00 R14: 0000000000000000 R15: 0000000000000000 [ 209.194220][ C1] ? lock_release+0x800/0x800 [ 209.198921][ C1] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 209.204925][ C1] inet_twsk_purge+0x118/0x790 [ 209.209720][ C1] ? inet_twsk_purge+0xd6/0x790 [ 209.214805][ C1] ? sockfs_dname+0x80/0x80 [ 209.219921][ C1] ? inet_twsk_deschedule_put+0x50/0x50 [ 209.225877][ C1] ? __sock_release+0x20c/0x280 [ 209.230987][ C1] ? tcp_v6_init_sock+0x80/0x80 [ 209.236083][ C1] ? tcpv6_net_exit_batch+0x20/0x20 [ 209.241666][ C1] ops_exit_list.isra.0+0x103/0x150 [ 209.247223][ C1] cleanup_net+0x511/0xa50 [ 209.251971][ C1] ? unregister_pernet_device+0x70/0x70 [ 209.258016][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 209.264080][ C1] process_one_work+0x965/0x1690 [ 209.269590][ C1] ? lock_release+0x800/0x800 [ 209.274496][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 209.280106][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 209.285219][ C1] worker_thread+0x96/0xe20 [ 209.289822][ C1] ? process_one_work+0x1690/0x1690 [ 209.295203][ C1] kthread+0x3b5/0x4a0 [ 209.299316][ C1] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 209.306259][ C1] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 209.312742][ C1] ret_from_fork+0x1f/0x30 [ 209.317225][ C1] [ 209.319631][ C1] Allocated by task 2478: [ 209.324013][ C1] save_stack+0x1b/0x40 [ 209.328353][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 209.334198][ C1] kmem_cache_alloc_trace+0x153/0x7d0 [ 209.339691][ C1] add_single_ctl_with_resume+0x53/0x1d0 [ 209.345741][ C1] snd_usb_mixer_apply_create_quirk+0x17ac/0x2000 [ 209.352384][ C1] snd_usb_create_mixer+0x7de/0x18c0 [ 209.357824][ C1] create_standard_mixer_quirk+0x57/0x70 [ 209.363493][ C1] snd_usb_create_quirk+0x9f/0xd0 [ 209.368539][ C1] create_composite_quirk+0x1d5/0x420 [ 209.375368][ C1] snd_usb_create_quirk+0x9f/0xd0 [ 209.380506][ C1] usb_audio_probe+0x57a/0x2240 [ 209.385384][ C1] usb_probe_interface+0x305/0x7a0 [ 209.390508][ C1] really_probe+0x281/0x6d0 [ 209.395376][ C1] driver_probe_device+0xfe/0x1d0 [ 209.400415][ C1] __device_attach_driver+0x1c2/0x220 [ 209.406325][ C1] bus_for_each_drv+0x162/0x1e0 [ 209.411194][ C1] __device_attach+0x21a/0x360 [ 209.415968][ C1] bus_probe_device+0x1e4/0x290 [ 209.420959][ C1] device_add+0xaf1/0x1900 [ 209.425493][ C1] usb_set_configuration+0xec5/0x1740 [ 209.431764][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 209.437245][ C1] usb_probe_device+0xc6/0x1f0 [ 209.442021][ C1] really_probe+0x281/0x6d0 [ 209.446556][ C1] driver_probe_device+0xfe/0x1d0 [ 209.451588][ C1] __device_attach_driver+0x1c2/0x220 [ 209.456944][ C1] bus_for_each_drv+0x162/0x1e0 [ 209.461868][ C1] __device_attach+0x21a/0x360 [ 209.466635][ C1] bus_probe_device+0x1e4/0x290 [ 209.471469][ C1] device_add+0xaf1/0x1900 [ 209.475959][ C1] usb_new_device.cold+0x753/0x103d [ 209.481244][ C1] hub_event+0x1eca/0x38f0 [ 209.485767][ C1] process_one_work+0x965/0x1690 [ 209.490690][ C1] worker_thread+0x96/0xe20 [ 209.495174][ C1] kthread+0x3b5/0x4a0 [ 209.499228][ C1] ret_from_fork+0x1f/0x30 [ 209.503801][ C1] [ 209.506116][ C1] Freed by task 7293: [ 209.510193][ C1] save_stack+0x1b/0x40 [ 209.514457][ C1] __kasan_slab_free+0xf7/0x140 [ 209.519492][ C1] kfree+0x109/0x2b0 [ 209.523375][ C1] free_rb_tree_fname+0x7f/0xe0 [ 209.528225][ C1] ext4_release_dir+0x41/0x60 [ 209.533145][ C1] __fput+0x33e/0x880 [ 209.537108][ C1] task_work_run+0xe0/0x1a0 [ 209.541685][ C1] __prepare_exit_to_usermode+0x20d/0x220 [ 209.547485][ C1] do_syscall_64+0x6c/0xe0 [ 209.551889][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.557763][ C1] [ 209.560602][ C1] The buggy address belongs to the object at ffff8880a6443280 [ 209.560602][ C1] which belongs to the cache kmalloc-64 of size 64 [ 209.574466][ C1] The buggy address is located 32 bytes to the right of [ 209.574466][ C1] 64-byte region [ffff8880a6443280, ffff8880a64432c0) [ 209.588235][ C1] The buggy address belongs to the page: [ 209.593880][ C1] page:ffffea00029910c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 209.602972][ C1] flags: 0xfffe0000000200(slab) [ 209.607818][ C1] raw: 00fffe0000000200 ffffea00029c6dc8 ffffea00029d2a88 ffff8880aa000380 [ 209.616409][ C1] raw: 0000000000000000 ffff8880a6443000 0000000100000020 0000000000000000 [ 209.624974][ C1] page dumped because: kasan: bad access detected [ 209.631368][ C1] [ 209.633676][ C1] Memory state around the buggy address: [ 209.639298][ C1] ffff8880a6443180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 209.647607][ C1] ffff8880a6443200: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 209.657909][ C1] >ffff8880a6443280: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 209.665951][ C1] ^ [ 209.673142][ C1] ffff8880a6443300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 209.681237][ C1] ffff8880a6443380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 209.689277][ C1] ================================================================== [ 209.697318][ C1] Disabling lock debugging due to kernel taint [ 209.703536][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 209.710108][ C1] CPU: 1 PID: 162 Comm: kworker/u4:4 Tainted: G B 5.7.0-rc7-next-20200529-syzkaller #0 [ 209.721130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.731178][ C1] Workqueue: netns cleanup_net [ 209.735917][ C1] Call Trace: [ 209.739208][ C1] dump_stack+0x18f/0x20d [ 209.743551][ C1] ? snd_usb_mixer_notify_id+0x180/0x2a0 [ 209.749172][ C1] panic+0x2e3/0x75c [ 209.753049][ C1] ? __warn_printk+0xf3/0xf3 [ 209.757712][ C1] ? trace_hardirqs_off+0x50/0x210 [ 209.762808][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 209.768419][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 209.776288][ C1] end_report+0x4d/0x53 [ 209.780424][ C1] kasan_report.cold+0xd/0x37 [ 209.785083][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 209.790697][ C1] snd_usb_mixer_notify_id+0x219/0x2a0 [ 209.796141][ C1] snd_usb_mixer_interrupt+0x416/0x980 [ 209.801599][ C1] ? kcov_remote_softirq_start+0x11/0x90 [ 209.807679][ C1] __usb_hcd_giveback_urb+0x2af/0x4b0 [ 209.813330][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 209.818531][ C1] dummy_timer+0x1246/0x2fe4 [ 209.823156][ C1] ? __lock_acquire+0x2224/0x48b0 [ 209.828427][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 209.833436][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 209.838963][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 209.845112][ C1] call_timer_fn+0x1ac/0x760 [ 209.849694][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 209.854438][ C1] ? msleep_interruptible+0x130/0x130 [ 209.859797][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 209.864979][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 209.871116][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 209.875861][ C1] run_timer_softirq+0x60f/0x15d0 [ 209.880885][ C1] ? add_timer+0x830/0x830 [ 209.885635][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 209.891166][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 209.897127][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 209.903093][ C1] __do_softirq+0x268/0x9ee [ 209.907582][ C1] irq_exit_rcu+0x13c/0x170 [ 209.912099][ C1] sysvec_apic_timer_interrupt+0xef/0x260 [ 209.917812][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 209.923770][ C1] RIP: 0010:lock_acquire+0x267/0x8f0 [ 209.929036][ C1] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 c3 05 00 00 48 83 3d 35 65 5b 08 00 0f 84 62 04 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 03 44 24 08 48 c7 [ 209.948845][ C1] RSP: 0018:ffffc900015e7a40 EFLAGS: 00000282 [ 209.954910][ C1] RAX: 1ffffffff1369538 RBX: ffff8880a8fb4580 RCX: 0000000000000001 [ 209.962861][ C1] RDX: dffffc0000000000 RSI: 00000000bbb7d6bf RDI: 0000000000000282 [ 209.970813][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff18b1145 [ 209.978774][ C1] R10: ffffffff8c588a27 R11: fffffbfff18b1144 R12: 0000000000000002 [ 209.986745][ C1] R13: ffffffff89bbde00 R14: 0000000000000000 R15: 0000000000000000 [ 209.995093][ C1] ? lock_release+0x800/0x800 [ 209.999790][ C1] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 210.005604][ C1] inet_twsk_purge+0x118/0x790 [ 210.010364][ C1] ? inet_twsk_purge+0xd6/0x790 [ 210.015196][ C1] ? sockfs_dname+0x80/0x80 [ 210.019685][ C1] ? inet_twsk_deschedule_put+0x50/0x50 [ 210.025220][ C1] ? __sock_release+0x20c/0x280 [ 210.030055][ C1] ? tcp_v6_init_sock+0x80/0x80 [ 210.035062][ C1] ? tcpv6_net_exit_batch+0x20/0x20 [ 210.040271][ C1] ops_exit_list.isra.0+0x103/0x150 [ 210.045450][ C1] cleanup_net+0x511/0xa50 [ 210.049851][ C1] ? unregister_pernet_device+0x70/0x70 [ 210.055397][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 210.061451][ C1] process_one_work+0x965/0x1690 [ 210.066391][ C1] ? lock_release+0x800/0x800 [ 210.071048][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 210.076403][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 210.081519][ C1] worker_thread+0x96/0xe20 [ 210.086190][ C1] ? process_one_work+0x1690/0x1690 [ 210.091563][ C1] kthread+0x3b5/0x4a0 [ 210.095983][ C1] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 210.101775][ C1] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 210.107655][ C1] ret_from_fork+0x1f/0x30 [ 210.113800][ C1] Kernel Offset: disabled [ 210.118352][ C1] Rebooting in 86400 seconds..