Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. 2020/08/02 12:14:22 fuzzer started 2020/08/02 12:14:22 dialing manager at 10.128.0.26:42619 2020/08/02 12:14:23 syscalls: 3271 2020/08/02 12:14:23 code coverage: enabled 2020/08/02 12:14:23 comparison tracing: enabled 2020/08/02 12:14:23 extra coverage: enabled 2020/08/02 12:14:23 setuid sandbox: enabled 2020/08/02 12:14:23 namespace sandbox: enabled 2020/08/02 12:14:23 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/02 12:14:23 fault injection: enabled 2020/08/02 12:14:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/02 12:14:23 net packet injection: enabled 2020/08/02 12:14:23 net device setup: enabled 2020/08/02 12:14:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/02 12:14:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/02 12:14:23 USB emulation: enabled 2020/08/02 12:14:23 hci packet injection: enabled 12:16:31 executing program 0: getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) ioprio_get$uid(0x0, r0) r1 = syz_io_uring_complete(0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x721841, 0x0) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x2400) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000580)={0xf0, 0x6, &(0x7f0000000180)="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"}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x6, 0x208, 0x3, 0x3f, 0x0}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000640)={r3, 0xfc, "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"}, &(0x7f0000000780)=0x104) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) socketpair(0x29, 0x800, 0x1, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_proto_private(r4, 0x89eb, &(0x7f0000000880)="42c158565b5b27c9dc8bdabca883f54211b500a6a00703f16d67a6d5f668326d0e7041dbe5fd8225be68032efabdc125ca035a05468ad01932ac68554616e435c2bbdf9477d110ef8f801979b9eb329e6d0f037d4b516e27017161516dc0f7eb65034be82052c45815e867e6a4657d7dc6f03cfa42d1de06405a0507c10ac4b84eacc3b7797077cbe7063b1378244e12f48a47b0717b4976d14491095bf2f863784bae81e2268d247033ad8dcda5807c2d0cb9f095acbb9f812526451ec5d25a5e67a4e52ae662a8205a77b32e72bb7e02c88f6597c2b2122a0671f3000f608d9831") r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0)='mptcp_pm\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x2f, 0x20, 0x6, 0x2, 0xe23ca1fff4a62c4a, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x80, 0x40, 0x3ff, 0x1}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r5, 0x800, 0x70bd28, 0x8, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x8158) syz_open_dev$hiddev(&(0x7f0000000bc0)='/dev/usb/hiddev#\x00', 0xe8f, 0x2a140) fcntl$dupfd(r1, 0x406, r2) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/btrfs-control\x00', 0x20800, 0x0) ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000c40)) stat(&(0x7f0000000d00)='./file1\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='overlay\x00', 0x20000, &(0x7f0000000dc0)={[{@xino_off='xino=off'}, {@default_permissions='default_permissions'}, {@workdir={'workdir', 0x3d, './file0'}}], [{@euid_eq={'euid', 0x3d, r0}}, {@euid_gt={'euid>', r8}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, '/dev/usb/hiddev#\x00'}}]}) syzkaller login: [ 184.760480][ T6857] IPVS: ftp: loaded support on port[0] = 21 [ 184.864800][ T6857] chnl_net:caif_netlink_parms(): no params data found 12:16:31 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x100) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff, 0x6, [{0x7, 0x9, 0x7, [], 0x4804}, {0x5, 0x9, 0x5, [], 0x2482}, {0xff, 0x7, 0x8, [], 0xc}, {0x1, 0xe62, 0x3, [], 0x1481}, {0x0, 0x3, 0x0, [], 0x2c00}, {0x100000000, 0xdf2f, 0x200, [], 0x400}]}) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r2 = dup(r1) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@v2={0x5, 0x2, 0xb, 0x3, 0xdc, "c871198596e5f1ae512e407f210ddee8bcf7747f85e245feb16237cc1978646600106150e7fb94523cc9beebf60bd666a668334baf965ddfbcfe834c71b6bc88fba066c616d01e09f88f669671e1c03f8a2f478c44778be8138fec890bbf29f21c3cbba98feea3a03f56a5b22c7c039bd3c43982b7ae11a4eb39142586578f32f25bd4a5835d78710478494b311c91fbf068fcdc65eacc857049d4bd5c40e3ad63c7f44548e8a7eeb7db44313f33b313cce6f1098ee0fa6d9485b264f9e5c587250a178728c937beee8e2b396a6b8efdabe4385cdb67aac418f6804c"}, 0xe5, 0x1) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x20002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x194, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xae}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a62b9baa332a22dad79dab855dfa0d3c8e8a17e08dff78aa7e24d5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "926f09c9c355bc40d9ecf28a2fbdc531f2c924ef3cc4b8f3caced082c4320925dd50df55bcd81245a5726a78e11471c8e3e396e2d6690daca07125310da6984b73ebcf3bf844c92ba75f9efd9aab552d79eae1c27c2baacdabe45155fab9adb1f30501d6e5ac22b4ab6fa689d862647b7e857f5a5b943baf4d9b788c11cdd60d976e46d4e9165938b283456bdbe6db7fb38ec11e016874afe9307d9b639d548576414eeb30cd3798877277890074a1387f"}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x194}}, 0x40000) r4 = syz_open_dev$audion(&(0x7f0000000640)='/dev/audio#\x00', 0x3, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x8, 0x70bd2b, 0x10000, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000007c0)={0x0, 0x0}) ptrace$setopts(0x4200, r6, 0x1, 0x1a) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000840)=[{{0x77359400}, 0x12, 0x9, 0x3}, {{r7, r8/1000+10000}, 0x11, 0x8, 0x5}], 0x30) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000880)={@none, 0xc98, 0x0, 0xffffffff}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000940)={0x9e0000, 0x5, 0x6, r1, 0x0, &(0x7f0000000900)={0x9b00dc, 0x200, [], @p_u8=&(0x7f00000008c0)=0x80}}) ioctl$BLKBSZGET(r9, 0x80081270, &(0x7f0000000980)) r10 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$LOOP_SET_CAPACITY(r10, 0x4c07) [ 184.926756][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.935708][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.944443][ T6857] device bridge_slave_0 entered promiscuous mode [ 184.953857][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.961276][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.970935][ T6857] device bridge_slave_1 entered promiscuous mode [ 184.998137][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.010217][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.035473][ T6857] team0: Port device team_slave_0 added [ 185.044500][ T6857] team0: Port device team_slave_1 added [ 185.064916][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.072206][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.099480][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.112814][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.120309][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.146761][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 12:16:32 executing program 2: r0 = syz_io_uring_complete(0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x111001, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000080)=""/102) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x7f, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0904, 0x7fff, [], @ptr=0x8d6}}) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000180)={"131d49cdc04aa95b7edcb066f449bcd8f40cc323e93362c175c5533c2f5f", 0x3ff, 0x0, 0x401, 0x1000, 0x0, 0xe3, 0x401, 0x6, [0x5, 0x9, 0x3f, 0x4, 0xf6, 0xffffdb1d, 0x3, 0x9, 0x1e, 0x7, 0x1, 0x0, 0xffffff02, 0x1f, 0x1, 0x20, 0x6, 0x5, 0xfffffffa]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x2040, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000280)={0x9, 0x40}) sendmsg$inet_sctp(r1, &(0x7f0000001400)={&(0x7f00000002c0)=@in6={0xa, 0x4e20, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000300)="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", 0x1000}], 0x1, &(0x7f0000001340)=[@init={0x18, 0x84, 0x0, {0x20, 0x5, 0xbc5, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x3, 0x8008, 0x2db, 0x0, 0x4, 0x6, 0x80}}, @init={0x18, 0x84, 0x0, {0x400, 0xff, 0x7, 0x401}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @init={0x18, 0x84, 0x0, {0x5, 0xfffa, 0x67, 0x1ff}}], 0x90, 0x800}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001440)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000015c0)={'sit0\x00', &(0x7f0000001540)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x80, 0xe9, 0x30, @ipv4={[], [], @multicast2}, @private1={0xfc, 0x1, [], 0x1}, 0x8, 0x40, 0x1}}) clock_gettime(0x0, &(0x7f0000001640)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000001740)={&(0x7f0000001600)={0x1d, r5}, 0x10, &(0x7f0000001700)={&(0x7f0000001680)={0x7, 0x94e, 0x800, {r6, r7/1000+10000}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "9dcb9d369f07b81b"}}, 0x48}}, 0x10) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000001780)=0x200) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000017c0), &(0x7f0000001800)=0x4) getsockopt$inet6_dccp_int(r2, 0x21, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/hwrng\x00', 0x90200, 0x0) ioctl$TUNSETGROUP(r8, 0x400454ce, 0xee01) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000001900)=""/97, 0x61, 0x0, &(0x7f0000001980)={{0x3, @default, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 185.223684][ T6857] device hsr_slave_0 entered promiscuous mode [ 185.275219][ T6857] device hsr_slave_1 entered promiscuous mode [ 185.394112][ T7023] IPVS: ftp: loaded support on port[0] = 21 [ 185.394180][ T7011] IPVS: ftp: loaded support on port[0] = 21 12:16:32 executing program 3: ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = fsopen(&(0x7f0000000080)='hostfs\x00', 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x130, 0x288, 0x98, 0x130, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, &(0x7f0000000140), {[{{@ip={@remote, @private=0xa010100, 0xff, 0xffffff00, 'veth0_vlan\x00', 'erspan0\x00', {}, {}, 0x50, 0x1, 0x20}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0xff, 'bond_slave_0\x00', 'ipvlan1\x00', {}, {0xff}, 0x11, 0x3, 0x1}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}, {0xe000, 0x2, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4}}}, {{@ip={@broadcast, @private=0xa010101, 0xffffff00, 0x0, 'netpci0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x21, 0x2, 0x29}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xb5}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2c}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000000640)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8005140}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd8, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0xd8}}, 0x4000000) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880)='net_prio.ifpriomap\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000008c0)) socket$inet(0x2, 0xa, 0x3) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000900)={0xc, 0x3, 0x329, 0xc4800, r2}) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000a00)={r0, 0x7fb7}, &(0x7f0000000a40)=0x8) r6 = syz_open_dev$sndctrl(&(0x7f0000000a80)='/dev/snd/controlC#\x00', 0x8000, 0x18000) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000b40)={0x0, 0x4, 0x6350, 0xffff7fff, 0xfffffff8, 0x8000}, 0x14) [ 185.656443][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 185.761016][ T6857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.832130][ T6857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.894054][ T6857] netdevsim netdevsim0 netdevsim2: renamed from eth2 12:16:32 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0xd20f, @empty, 0xf7d1}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x8}, &(0x7f0000000180)=0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f00000001c0)) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x54) r3 = socket$inet(0x2, 0x1, 0x5) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x8001, 0x1, [0x3]}, &(0x7f0000000300)=0xa) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000340)={r4, 0x2aa, 0xfff, 0x1000}, &(0x7f0000000380)=0x10) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/mice\x00', 0x101a00) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400)=0x100, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0)='ethtool\x00') recvmsg$can_j1939(r5, &(0x7f0000002900)={&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000640)=""/107, 0x6b}, {&(0x7f00000006c0)=""/112, 0x70}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/39, 0x27}], 0x6, &(0x7f0000002840)=""/155, 0x9b}, 0x12002) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000029c0)={'ip6_vti0\x00', &(0x7f0000002940)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x5, 0x2, 0xa, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x10, 0x80, 0x9, 0x4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000002a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4008180}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x3c, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000024}, 0x8880) write$qrtrtun(r2, &(0x7f0000002ac0)="d5434a2eff51454fc8cc7a71a94ae71cef4e03c25b1b03600fe911f8ad683c919ee767668aa040fbc978ddea93b999404f7d43e7aea736b6c627a9c9a4317885353af1f95596e7d8ac395896c14e1afcc22da4aa10a442d63acb80", 0x5b) lsetxattr$trusted_overlay_upper(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)='trusted.overlay.upper\x00', &(0x7f0000002bc0)={0x0, 0xfb, 0x4d, 0x7, 0xf2, "e8b8fc65ca67b93de8e960e0b02d2788", "c23a5103daae53f3d89a66e107f80c3b6c1c6f4f5cebefe034f54081856b6f0c753f72079aa367e450b6e16b3336e411f51294ccdc7158f0"}, 0x4d, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x5) [ 185.974337][ T6857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.981847][ T7277] IPVS: ftp: loaded support on port[0] = 21 [ 186.030844][ T7011] chnl_net:caif_netlink_parms(): no params data found [ 186.125710][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.135852][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.153536][ T7023] device bridge_slave_0 entered promiscuous mode [ 186.211698][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.219441][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.227341][ T7023] device bridge_slave_1 entered promiscuous mode [ 186.306344][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.320781][ T7325] IPVS: ftp: loaded support on port[0] = 21 12:16:33 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40081, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r1, 0x29, 0x1c, 0xff, 0x2, 0x1, @mcast2, @dev={0xfe, 0x80, [], 0x3e}, 0x1, 0x8, 0x0, 0xe3}}) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='wchan\x00') ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x20}}, 0x2400c804) write$ppp(r4, &(0x7f0000000640)="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", 0x1000) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001880)={&(0x7f0000001640), 0xc, &(0x7f0000001840)={&(0x7f0000001680)={0x188, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc0000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x433}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000018c0)="3d24c071219a5c943b9d5af7d3ff16b15c81beaca02d600d7d954c343803764389a74a96b837d910c5730b46936f01b64b5bc1260f474fc8251eaa212197179d5a7fa74a8734bb8dc0f23f197ae70998df664fe5aa21d38439f750fb118395aba975d1af07ff23cb8c9895e6c52ae7d572515a5b71f0e60f22685acad1dec4dff73ad7ba4a4e85f6360afa091592f8bb92ae17a4180a92630602cf43c50cf8b7f0f3fa11360d65577746b59962fc12b5188cf76499d2315d64832333a472acdfbb6118b985aea685f339f696c5439b012a0e05bc215e1d530d4c010504b0fe0afb40359e6756062c7b0e7e0123") ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f00000019c0)) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001a40)='wireguard\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @dev}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000001b80)=0xe8) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001c40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) [ 186.361139][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.396587][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.406535][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.418565][ T7011] device bridge_slave_0 entered promiscuous mode [ 186.493105][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.504671][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.513705][ T7011] device bridge_slave_1 entered promiscuous mode [ 186.553347][ T7023] team0: Port device team_slave_0 added [ 186.605051][ T7023] team0: Port device team_slave_1 added [ 186.624537][ T7011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.638464][ T7372] IPVS: ftp: loaded support on port[0] = 21 [ 186.657877][ T7011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.669661][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.676597][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.703368][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.714802][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 186.750526][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.757473][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.784287][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.818734][ T7011] team0: Port device team_slave_0 added [ 186.828107][ T7011] team0: Port device team_slave_1 added [ 186.912513][ T7023] device hsr_slave_0 entered promiscuous mode [ 186.984051][ T7023] device hsr_slave_1 entered promiscuous mode [ 187.038984][ T7023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.046672][ T7023] Cannot create hsr debugfs directory [ 187.097018][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.104691][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.131389][ T7011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.150980][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.171420][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.178351][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.206877][ T7011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.247068][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.254896][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.262946][ T7277] device bridge_slave_0 entered promiscuous mode [ 187.308022][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.315839][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.324459][ T7277] device bridge_slave_1 entered promiscuous mode [ 187.361884][ T7011] device hsr_slave_0 entered promiscuous mode [ 187.399477][ T7011] device hsr_slave_1 entered promiscuous mode [ 187.439039][ T7011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.446585][ T7011] Cannot create hsr debugfs directory [ 187.502274][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.514452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.549946][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.558730][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.570342][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 187.598283][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.650749][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.659544][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.668021][ T3858] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.675195][ T3858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.731381][ T7277] team0: Port device team_slave_0 added [ 187.743670][ T7277] team0: Port device team_slave_1 added [ 187.753716][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.798307][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.812264][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.822125][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.829259][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.838329][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.852320][ T7372] chnl_net:caif_netlink_parms(): no params data found [ 187.907365][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.916204][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.925326][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.933921][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.942516][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.951516][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.958447][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.985545][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.026710][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.035173][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.044511][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.053897][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.061428][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.087443][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.127573][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.134974][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.143477][ T7325] device bridge_slave_0 entered promiscuous mode [ 188.156695][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.164833][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.172779][ T7325] device bridge_slave_1 entered promiscuous mode [ 188.180484][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.188674][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.201878][ T7023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.253056][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.295513][ T7023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.342750][ T7023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.395584][ T7023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.471915][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.484857][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.532247][ T7277] device hsr_slave_0 entered promiscuous mode [ 188.579750][ T7277] device hsr_slave_1 entered promiscuous mode [ 188.618980][ T7277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.626605][ T7277] Cannot create hsr debugfs directory [ 188.686580][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.696144][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.707280][ T7372] device bridge_slave_0 entered promiscuous mode [ 188.715540][ T7011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.761998][ T7011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.805152][ T7011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.860771][ T7011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.913777][ T7325] team0: Port device team_slave_0 added [ 188.924492][ T7325] team0: Port device team_slave_1 added [ 188.931770][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.941877][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.951106][ T7372] device bridge_slave_1 entered promiscuous mode [ 188.978703][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.020081][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.027420][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.042390][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.066293][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.090743][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.097690][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.124211][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.170080][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.177138][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.205876][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.221937][ T7372] team0: Port device team_slave_0 added [ 189.270776][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.279621][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.290692][ T7372] team0: Port device team_slave_1 added [ 189.352470][ T7325] device hsr_slave_0 entered promiscuous mode [ 189.389092][ T7325] device hsr_slave_1 entered promiscuous mode [ 189.428904][ T7325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.436441][ T7325] Cannot create hsr debugfs directory [ 189.452163][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.462199][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.485952][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.495207][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.521652][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.534644][ T6857] device veth0_vlan entered promiscuous mode [ 189.552892][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.561385][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.584557][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.591769][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.620296][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.692753][ T6857] device veth1_vlan entered promiscuous mode [ 189.732935][ T7372] device hsr_slave_0 entered promiscuous mode [ 189.789182][ T7372] device hsr_slave_1 entered promiscuous mode [ 189.828844][ T7372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.836640][ T7372] Cannot create hsr debugfs directory [ 189.863433][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.903973][ T7277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.967220][ T7277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.033809][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.042774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.054067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.062622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.073472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.081910][ T7277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.140565][ T7277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.213566][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.225188][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.234332][ T2769] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.241421][ T2769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.249828][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.258352][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.267543][ T2769] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.274621][ T2769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.283147][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.303946][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.318250][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.328193][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.341216][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.350012][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.384789][ T6857] device veth0_macvtap entered promiscuous mode [ 190.393691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.403066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.411594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.421094][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.428688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.438445][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.446663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.455524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.486201][ T7011] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.496197][ T6857] device veth1_macvtap entered promiscuous mode [ 190.522421][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.531466][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.544813][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.553350][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.564358][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.573035][ T3858] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.580125][ T3858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.589892][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.635367][ T7023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.647187][ T7023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.664224][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.673232][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.682723][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.691393][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.698423][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.706767][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.716253][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.724582][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.733698][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.761206][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.774416][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.783310][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.792474][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.802530][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.811337][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.820241][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.832706][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.859790][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.870755][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.880169][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.888456][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.897888][ T7325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.941975][ T7325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.015236][ T7325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.081768][ T7325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.215674][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.224812][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.233786][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.241799][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.323464][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.337085][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.402760][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.412117][ T7372] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.473473][ T7372] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.537244][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.545575][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.556850][ T7372] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.604218][ T7372] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.662939][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.672439][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.681184][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.690398][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.706925][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.720872][ T7011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.760655][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.776470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.786442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.795415][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.802503][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.810435][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.819091][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.827363][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.834437][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.847468][ T7023] device veth0_vlan entered promiscuous mode [ 191.873235][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.881688][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.890954][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.899808][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.908208][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.917625][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.926616][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.935533][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.943365][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.952353][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.960571][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.974136][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.015376][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.024490][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.035527][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.044205][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.052841][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.061281][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.069505][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.077625][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.085955][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.094168][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.103031][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.111212][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.119275][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.134081][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.150838][ T7011] device veth0_vlan entered promiscuous mode [ 192.157763][ T7023] device veth1_vlan entered promiscuous mode [ 192.191284][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.200601][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.210958][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.219616][ T2493] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.226634][ T2493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.236070][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.244880][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.253660][ T2493] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.260753][ T2493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.268864][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.277742][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.293614][ T7011] device veth1_vlan entered promiscuous mode [ 192.326521][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.335470][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.344310][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.355069][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.364209][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.372975][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.380818][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.388175][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.397007][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.408819][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.426529][ T7325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.456674][ T7325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.499574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.508086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.584406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.620552][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 12:16:39 executing program 0: sync() symlink(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') lstat(&(0x7f0000000040)='./file2\x00', 0x0) [ 192.649605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.657944][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.687468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.714529][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.741302][ T7023] device veth0_macvtap entered promiscuous mode 12:16:39 executing program 0: sync() symlink(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') lstat(&(0x7f0000000040)='./file2\x00', 0x0) [ 192.815729][ T7011] device veth0_macvtap entered promiscuous mode [ 192.850746][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.877879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.895682][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 12:16:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') getpid() r0 = open(&(0x7f00000000c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) [ 192.922238][ T7023] device veth1_macvtap entered promiscuous mode [ 192.945684][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.983455][ T7011] device veth1_macvtap entered promiscuous mode [ 193.009208][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.023665][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 12:16:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x801) writev(r1, &(0x7f00000012c0)=[{&(0x7f00000001c0)='\t', 0x1}], 0x1) [ 193.040142][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.061150][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.068603][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.151174][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.179301][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.187160][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.208202][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.225805][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.251196][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 12:16:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x168, 0x6, 0x168, 0x0, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x168, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00', {0x1f2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@ipv6={@local, @ipv4={[], [], @loopback}, [], [], 'netdevsim0\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) [ 193.265958][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.276573][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.317262][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.330670][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.342295][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.365317][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.376073][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.412813][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.422331][ T8145] xt_hashlimit: Unknown mode mask 1F2, kernel too old? [ 193.427610][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.440781][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.455360][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.464983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.480415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.514176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.526978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.541647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.550457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.565099][ T7277] device veth0_vlan entered promiscuous mode [ 193.577622][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.589700][ T8146] xt_hashlimit: Unknown mode mask 1F2, kernel too old? [ 193.594305][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:16:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 193.607125][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.623714][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.636333][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.651601][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 12:16:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) [ 193.674726][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.686390][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.705931][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.729438][ T2769] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.736494][ T2769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.750383][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.760084][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.819296][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.835310][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.871072][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.933487][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.957655][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.966684][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.973768][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.981425][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.043080][ T7277] device veth1_vlan entered promiscuous mode [ 194.145200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.153434][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.162061][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.262567][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.271545][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.281172][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.290121][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.298443][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.307387][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.316465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.391293][ T7325] device veth0_vlan entered promiscuous mode [ 194.403594][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.412348][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.421768][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.430824][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.440132][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.448460][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.459792][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.469586][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.485252][ T7325] device veth1_vlan entered promiscuous mode [ 194.502249][ T7277] device veth0_macvtap entered promiscuous mode [ 194.509153][ T2769] Bluetooth: hci0: command 0x0409 tx timeout [ 194.520058][ T7372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.533199][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.541923][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.564508][ T7277] device veth1_macvtap entered promiscuous mode [ 194.591240][ T7325] device veth0_macvtap entered promiscuous mode [ 194.599827][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.608248][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.620401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.640412][ T7325] device veth1_macvtap entered promiscuous mode [ 194.654693][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.665972][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.676416][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.687897][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.697759][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.708413][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.720120][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.731436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.740262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.752612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.761382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.773026][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.782517][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.795906][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.805982][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.816588][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.827001][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.837762][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.849869][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.865953][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.874570][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.895390][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.905811][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.925604][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.935980][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.946509][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.957124][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.967607][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.977501][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.989212][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.000811][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.045866][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.063847][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.074719][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.086097][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.096970][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.107690][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.117567][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.128062][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.137916][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.151779][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.156149][ T0] NOHZ: local_softirq_pending 08 [ 195.163121][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.216453][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.233922][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.378984][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.387688][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 12:16:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) [ 195.488473][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.500880][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.513050][ T7372] device veth0_vlan entered promiscuous mode [ 195.520647][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.528404][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.547188][ T7372] device veth1_vlan entered promiscuous mode 12:16:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000016c0)=[{&(0x7f0000001740)=""/102400, 0x19000}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00@\x00'}) [ 195.673380][ T7372] device veth0_macvtap entered promiscuous mode [ 195.697553][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.707927][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.719954][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.737439][ T7372] device veth1_macvtap entered promiscuous mode [ 195.761968][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.800169][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.821720][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.833744][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.846001][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.860522][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.871130][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.885361][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.904505][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.930588][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.944873][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.962728][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.980564][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.999646][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.012913][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.029235][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.041824][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.068936][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.079513][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.098554][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.110528][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.151190][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.167784][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.194944][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.224000][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.238568][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.247881][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.428335][ T8205] QAT: Invalid ioctl [ 196.457996][ T8205] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 196.584206][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 196.605027][ T8205] QAT: Invalid ioctl 12:16:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 12:16:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x801) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) [ 197.379042][ T5] Bluetooth: hci1: command 0x0409 tx timeout 12:16:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='reno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 12:16:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@gid={'gid'}}]}) 12:16:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) creat(&(0x7f0000000140)='./file1\x00', 0x0) 12:16:44 executing program 5: clock_adjtime(0x0, &(0x7f00000002c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3e54}) [ 197.539245][ T17] Bluetooth: hci2: command 0x0409 tx timeout 12:16:44 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@array, @var, @func]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x52}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:16:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x801) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0xfb, 0x15, 0x0, 0x0, "05624ad60d59489288b0a9195ce74372"}, 0x15, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) [ 197.690701][ T8261] ptrace attach of "/root/syz-executor.4"[8258] was attempted by "/root/syz-executor.4"[8261] [ 197.713187][ T8254] FAT-fs (loop2): bogus number of reserved sectors 12:16:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) [ 197.744881][ T8254] FAT-fs (loop2): Can't find a valid FAT filesystem 12:16:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) [ 197.851247][ T8279] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.874034][ T8254] FAT-fs (loop2): bogus number of reserved sectors [ 197.881946][ T8254] FAT-fs (loop2): Can't find a valid FAT filesystem 12:16:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) creat(&(0x7f0000000140)='./file1\x00', 0x0) 12:16:44 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 12:16:44 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x540b, 0x2) 12:16:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 12:16:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x801) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "37baac99b871ea42c0d8090d6b126563e09c3b"}) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 12:16:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(0x0, r1) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) [ 198.154751][ T29] audit: type=1326 audit(1596370605.104:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8286 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:16:45 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) creat(&(0x7f0000000140)='./file1\x00', 0x0) 12:16:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000016c0)=[{&(0x7f0000001740)=""/102400, 0x19000}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00@\x00'}) 12:16:45 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) [ 198.419072][ T2769] Bluetooth: hci3: command 0x0409 tx timeout [ 198.579035][ T2769] Bluetooth: hci4: command 0x0409 tx timeout [ 198.658831][ T2769] Bluetooth: hci0: command 0x040f tx timeout [ 198.902813][ T29] audit: type=1326 audit(1596370605.854:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8286 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:16:45 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x4391039a8a5faa1e}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 12:16:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0000020000009741"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:16:45 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:45 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) creat(&(0x7f0000000140)='./file1\x00', 0x0) 12:16:46 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14}, 0x14) 12:16:46 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000016c0)=[{&(0x7f0000001740)=""/102400, 0x19000}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00@\x00'}) 12:16:46 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) [ 199.324739][ T2769] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 199.459559][ T2589] Bluetooth: hci1: command 0x041b tx timeout [ 199.549732][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 199.630102][ T17] Bluetooth: hci2: command 0x041b tx timeout [ 199.728747][ T2769] usb 3-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 199.737983][ T2769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.833374][ T2769] usb 3-1: config 0 descriptor?? 12:16:47 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 200.252958][ T8395] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! [ 200.508825][ T17] Bluetooth: hci3: command 0x041b tx timeout [ 200.659456][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 200.739075][ T17] Bluetooth: hci0: command 0x0419 tx timeout [ 201.557936][ T2493] Bluetooth: hci1: command 0x040f tx timeout [ 201.619007][ T3850] Bluetooth: hci5: command 0x041b tx timeout [ 201.648675][ T2769] usb 3-1: Cannot set autoneg [ 201.654062][ T2769] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 201.665026][ T2769] usb 3-1: USB disconnect, device number 2 [ 201.699020][ T2493] Bluetooth: hci2: command 0x040f tx timeout [ 202.398632][ T2769] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 202.578624][ T17] Bluetooth: hci3: command 0x040f tx timeout [ 202.738785][ T2493] Bluetooth: hci4: command 0x040f tx timeout [ 202.758781][ T2769] usb 3-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 202.767804][ T2769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.777546][ T2769] usb 3-1: config 0 descriptor?? 12:16:49 executing program 3: mq_open(&(0x7f0000000040)='.$\xd0\x02\xc5R\x8b{xX?;}\x11\xf4\bkm9\xa6,3\xbc\xcb\x1d\xbaj,\xdb@\xbd', 0x0, 0x0, 0x0) 12:16:49 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000016c0)=[{&(0x7f0000001740)=""/102400, 0x19000}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00@\x00'}) 12:16:49 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:49 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) get_robust_list(r2, &(0x7f00000001c0)=0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 12:16:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) [ 203.038773][ T2769] usb 3-1: Cannot read MAC address [ 203.044889][ T2769] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 12:16:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) keyctl$read(0xb, 0x0, 0x0, 0x0) 12:16:50 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 203.128868][ T2769] usb 3-1: USB disconnect, device number 3 12:16:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) [ 203.184302][ T8451] FAT-fs (loop0): bogus number of reserved sectors [ 203.195559][ T8451] FAT-fs (loop0): Can't find a valid FAT filesystem 12:16:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 12:16:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:50 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 203.333507][ T8464] FAT-fs (loop0): bogus number of reserved sectors [ 203.341220][ T8464] FAT-fs (loop0): Can't find a valid FAT filesystem [ 203.618611][ T2769] Bluetooth: hci1: command 0x0419 tx timeout [ 203.698698][ T2769] Bluetooth: hci5: command 0x040f tx timeout 12:16:50 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x14, 0x87, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 12:16:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) [ 203.778686][ T2769] Bluetooth: hci2: command 0x0419 tx timeout [ 203.877875][ T8488] FAT-fs (loop0): bogus number of reserved sectors [ 203.891231][ T8488] FAT-fs (loop0): Can't find a valid FAT filesystem 12:16:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:50 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$P9_RSYMLINK(r1, 0x0, 0x0) 12:16:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000080)='./bus\x00', 0x0) 12:16:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) [ 204.093069][ T29] audit: type=1804 audit(1596370611.044:4): pid=8510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir645327900/syzkaller.1gzZgS/9/bus" dev="sda1" ino=15824 res=1 12:16:51 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 204.145350][ T8511] FAT-fs (loop0): bogus number of reserved sectors [ 204.164516][ T8511] FAT-fs (loop0): Can't find a valid FAT filesystem 12:16:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:51 executing program 3: r0 = gettid() r1 = creat(0x0, 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 12:16:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) [ 204.191234][ T29] audit: type=1804 audit(1596370611.104:5): pid=8510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir645327900/syzkaller.1gzZgS/9/bus" dev="sda1" ino=15824 res=1 12:16:51 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 204.352811][ T29] audit: type=1804 audit(1596370611.124:6): pid=8516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir645327900/syzkaller.1gzZgS/9/bus" dev="sda1" ino=15824 res=1 [ 204.376582][ C0] hrtimer: interrupt took 35737 ns [ 204.658746][ T2769] Bluetooth: hci3: command 0x0419 tx timeout [ 204.818640][ T17] Bluetooth: hci4: command 0x0419 tx timeout 12:16:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:51 executing program 1: 12:16:51 executing program 3: 12:16:51 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:51 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:51 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:51 executing program 3: 12:16:51 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:51 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x10, r1) 12:16:52 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x0) [ 204.997899][ T8550] FAT-fs (loop0): bogus number of reserved sectors [ 205.024029][ T8550] FAT-fs (loop0): Can't find a valid FAT filesystem [ 205.177692][ T8569] ptrace attach of "/root/syz-executor.1"[7011] was attempted by "/root/syz-executor.1"[8569] [ 205.226335][ T8569] ptrace attach of "/root/syz-executor.1"[7011] was attempted by "/root/syz-executor.1"[8569] 12:16:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:52 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:52 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, &(0x7f0000001140), 0x1000) 12:16:52 executing program 1: 12:16:52 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 205.783591][ T3850] Bluetooth: hci5: command 0x0419 tx timeout 12:16:52 executing program 1: 12:16:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 12:16:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:52 executing program 1: 12:16:52 executing program 3: 12:16:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:53 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:53 executing program 3: 12:16:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 12:16:53 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:53 executing program 1: 12:16:53 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:53 executing program 3: 12:16:53 executing program 1: 12:16:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 12:16:53 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:53 executing program 3: 12:16:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:54 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:54 executing program 1: 12:16:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:54 executing program 3: 12:16:54 executing program 1: 12:16:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00@\x00'}) read(r1, 0x0, 0x0) 12:16:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:54 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:54 executing program 1: 12:16:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x6, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:54 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:54 executing program 3: 12:16:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x0, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:54 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:54 executing program 1: 12:16:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x0, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:54 executing program 3: 12:16:54 executing program 1: 12:16:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:55 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x0, 0x302, 0x0, 0x8, 0x0, 0x0}) 12:16:55 executing program 3: 12:16:55 executing program 1: 12:16:55 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:55 executing program 1: 12:16:55 executing program 3: 12:16:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0}) 12:16:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa65617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:55 executing program 1: 12:16:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:55 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:55 executing program 3: 12:16:55 executing program 1: 12:16:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0}) 12:16:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa65617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:55 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0}) 12:16:55 executing program 1: 12:16:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:55 executing program 3: 12:16:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa65617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:55 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:55 executing program 1: 12:16:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:56 executing program 3: 12:16:56 executing program 4: 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:56 executing program 1: 12:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:56 executing program 3: 12:16:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:56 executing program 4: 12:16:56 executing program 1: 12:16:56 executing program 3: 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:56 executing program 1: 12:16:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:56 executing program 4: 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:56 executing program 3: 12:16:56 executing program 1: 12:16:56 executing program 4: 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:56 executing program 3: 12:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:56 executing program 1: 12:16:56 executing program 4: 12:16:56 executing program 3: 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:56 executing program 1: 12:16:56 executing program 4: 12:16:56 executing program 4: 12:16:56 executing program 3: 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:56 executing program 1: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68242, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x10001) 12:16:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x44182) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {}, 0x0, {}, 0xfdfdffff, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e50000a482ebf7888c305bee6fd6"}) 12:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:56 executing program 3: 12:16:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:57 executing program 4: 12:16:57 executing program 1: 12:16:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:57 executing program 3: 12:16:57 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 12:16:57 executing program 1: r0 = gettid() clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000a80)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6Kfu\x9dX\xcc\r\x12\x11\x19\xe7k\xaecz(n%~\xad\x14IS\xc1\x04\xf7Ml\x9f8\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb?\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\nQj\x9b}$\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x18\x8e\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcU\xe0\xff\xff\xff\xff\xff\xff\xff\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x9c\x14\xe8\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\x8f=\xd8*\x10\xc7^3\xd0\xa7\xaf\xa6\x96\xa2\x13\x1f,\b\xcf1J\xd9\x13Q\x94R/\xdf\x1eD+\xf35\xcbH\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xedD\x9c_\xd3\x90\x00\xb3\x8c\xce\xfb\x18\x1f\xbd<\xc2bO\x88\x03n% \x14\x8f\x18\tT\x9e\xe7\x93\x84\\\xef\xc7@\xcc\xf1\xca\x94\x1b\xd8\xc9\x93\xa6y^5\xe1\x15f\xe5\xfeu\xab\\\x01~\x88\x7fl\xd3a\x85\x05\x11\x85\xc3\xb0\xa8\xe1Gc\xa1\x9e\xe4\x92\x92T;\xea\xed\xbc\x93\x85\x9f\xd5D \x1d\xdaz\xf4\x18\xa5\xe8\xb5\xe0\x9b\xe7\xa9\xf1n\x02%LH\xf7\"$\xda\xc9\xf4\xa0\xde\x80\xea?\xca<\x84\xe9\xf9\xaa[:\"\xf8\xc4\x9e\x03$Q\xce4\x83\xe2p1\xa3O\x83\x01)\xc5\x90\xae\x12q\xac\xa9F\xdeh\xaciC\x9d\x11\xfa\xac\xc50\xc1\x10\x00\x00\x00\x00\x94+\xd9h\xe2t\x89:w\xe3\xdbn\x0f\xe8\xc1\xfe\xc4\xd0\xb2\rp\x19$LE\x9f\xaa\xeaXV4.9-R\xfde\t\xb6\xeb\xbc\xbbXy\x04\xad\x1c\x80\x9f\x01+\xe7[\x87f\x99\xc9]\x11 \x95\xe1\xcf\x11\xf6\\\x12c\n\x14\xf8_WE\xf9\n\xb3\xb8;\xf5V\xf8I\xfd\x0e\xf4\xd0i\x13\xf2\xc9\xd3r\xfd\x14\xc6#1B\xf9\x03\x11wJR\x1a\x1b\xe8\xd30\xdc\xb0\x1bA\xed\xc8\x82\xf9iI\x162?`\x18\x87r{:1\x91{z\x13y\xfd1u;?\x0f\xae\x1cB\xcd\xa3\xf4\x8a\x01\xeb\xa7\x8d\x81\x88\xea\xb9X\x91\x81FT\x82\b\xfc\x02\xb7\xa9\xa2eluZ\xf3\\\xd4\x9e\x8f\x98\x86B\x12\xe0\x97\x8e\x8e\xb1y\x1c\x97T\xe7\xb1\xb7$\x00\xc2\x95<\xfd\xe7\x9e\xfd\xa8\xee\xc9\x83\xa1\x98M\xf2c\x02\xdc\xfe\xba\xf6\xc8\xc6\x9b\x81\x1c\xbb\xb8)5\x1c\x00\x89PA\x98\xfc,\xcfmvNV\x03\xe6\xec\xa3\xec\x19\xcb\x00\xcc\xcb\x0e\xe8:\x80\xf0\x1fc\x11\x1a\xdd|Ra\xec\xe2\xdcS\x86^\x1e\xf8k\xfc\x03I\x0e\xeaA.<\x19\xedO\x9d\xdd0\xf7\xdd\xb4\xbaC\x12\xf2u\xacv\xc4\xa9\x9d\nN\xe6\xd2\xf0\xb2\xee\xd5\xb9\xdc\x96k1p\xa3y\x01\xf2\x1bn<\xab\xf1B\td\f\xcf\xd2\x9b\x93\xf8E\xd7\xab\xc1\xddIu\x14\x8b\xee\xf2>\x15\x9d\n\xca\x14\xb9\x17\xd1\x8bp\xf7\x81\x93\xa2\xfe\xf0[\xbeDQ\xee\x88&C\xab\xf3\xf7\x14\x94\xfb\xedN\xc2g\xe8\x9104', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') read$FUSE(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 12:16:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0x0, 0x160, 0x160, 0x160, 0x178, 0x240, 0x1f8, 0x1f8, 0x1f8, 0x240, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'team_slave_0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30, 'mark\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 12:16:57 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}]}) 12:16:57 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1b, 0x0, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002bbd700005002f000000000008003b0001000000050038000000005108003a3e00000000050038000000000008003a0003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x4c, r5, 0xe01, 0x70b52b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff7fc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc040) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082dbd7000fbdbdf250e00000008003b000008000008003200bd0000000800390000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008840) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2040090}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000fbdbdfad11000000050030000000080000000000000000000ff7e6cc632eeb553e203d9299848ab9eb9f4f7193040fa4b9d6f03e57c151b11917b180430371fde17add57fe6e5f83885204ec3d6a79a9ee0105aae9087662e2c0817b7cbd3ba002f0d87890d0da1b09c2519cb31aa39b33f1262b01b740bb95da6786b7cc6014f1597e06bde37f890e5ad36644feaf58a8cbc3"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400c091) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x3c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25c4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002abd7000ffdbdfa1c5f211000500330001000000050038000000000008003a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20010040) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x800) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x4) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1, 0x1, 0x0) [ 210.314904][ T8802] x_tables: duplicate underflow at hook 2 12:16:57 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, 0x0) [ 210.363332][ T8802] x_tables: duplicate underflow at hook 2 12:16:57 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 12:16:57 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x403, 0x0) 12:16:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f00000004c0)=0xfffffffffffffe1e) 12:16:57 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:57 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:57 executing program 1: r0 = gettid() clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000a80)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6Kfu\x9dX\xcc\r\x12\x11\x19\xe7k\xaecz(n%~\xad\x14IS\xc1\x04\xf7Ml\x9f8\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb?\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\nQj\x9b}$\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x18\x8e\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcU\xe0\xff\xff\xff\xff\xff\xff\xff\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x9c\x14\xe8\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\x8f=\xd8*\x10\xc7^3\xd0\xa7\xaf\xa6\x96\xa2\x13\x1f,\b\xcf1J\xd9\x13Q\x94R/\xdf\x1eD+\xf35\xcbH\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xedD\x9c_\xd3\x90\x00\xb3\x8c\xce\xfb\x18\x1f\xbd<\xc2bO\x88\x03n% \x14\x8f\x18\tT\x9e\xe7\x93\x84\\\xef\xc7@\xcc\xf1\xca\x94\x1b\xd8\xc9\x93\xa6y^5\xe1\x15f\xe5\xfeu\xab\\\x01~\x88\x7fl\xd3a\x85\x05\x11\x85\xc3\xb0\xa8\xe1Gc\xa1\x9e\xe4\x92\x92T;\xea\xed\xbc\x93\x85\x9f\xd5D \x1d\xdaz\xf4\x18\xa5\xe8\xb5\xe0\x9b\xe7\xa9\xf1n\x02%LH\xf7\"$\xda\xc9\xf4\xa0\xde\x80\xea?\xca<\x84\xe9\xf9\xaa[:\"\xf8\xc4\x9e\x03$Q\xce4\x83\xe2p1\xa3O\x83\x01)\xc5\x90\xae\x12q\xac\xa9F\xdeh\xaciC\x9d\x11\xfa\xac\xc50\xc1\x10\x00\x00\x00\x00\x94+\xd9h\xe2t\x89:w\xe3\xdbn\x0f\xe8\xc1\xfe\xc4\xd0\xb2\rp\x19$LE\x9f\xaa\xeaXV4.9-R\xfde\t\xb6\xeb\xbc\xbbXy\x04\xad\x1c\x80\x9f\x01+\xe7[\x87f\x99\xc9]\x11 \x95\xe1\xcf\x11\xf6\\\x12c\n\x14\xf8_WE\xf9\n\xb3\xb8;\xf5V\xf8I\xfd\x0e\xf4\xd0i\x13\xf2\xc9\xd3r\xfd\x14\xc6#1B\xf9\x03\x11wJR\x1a\x1b\xe8\xd30\xdc\xb0\x1bA\xed\xc8\x82\xf9iI\x162?`\x18\x87r{:1\x91{z\x13y\xfd1u;?\x0f\xae\x1cB\xcd\xa3\xf4\x8a\x01\xeb\xa7\x8d\x81\x88\xea\xb9X\x91\x81FT\x82\b\xfc\x02\xb7\xa9\xa2eluZ\xf3\\\xd4\x9e\x8f\x98\x86B\x12\xe0\x97\x8e\x8e\xb1y\x1c\x97T\xe7\xb1\xb7$\x00\xc2\x95<\xfd\xe7\x9e\xfd\xa8\xee\xc9\x83\xa1\x98M\xf2c\x02\xdc\xfe\xba\xf6\xc8\xc6\x9b\x81\x1c\xbb\xb8)5\x1c\x00\x89PA\x98\xfc,\xcfmvNV\x03\xe6\xec\xa3\xec\x19\xcb\x00\xcc\xcb\x0e\xe8:\x80\xf0\x1fc\x11\x1a\xdd|Ra\xec\xe2\xdcS\x86^\x1e\xf8k\xfc\x03I\x0e\xeaA.<\x19\xedO\x9d\xdd0\xf7\xdd\xb4\xbaC\x12\xf2u\xacv\xc4\xa9\x9d\nN\xe6\xd2\xf0\xb2\xee\xd5\xb9\xdc\x96k1p\xa3y\x01\xf2\x1bn<\xab\xf1B\td\f\xcf\xd2\x9b\x93\xf8E\xd7\xab\xc1\xddIu\x14\x8b\xee\xf2>\x15\x9d\n\xca\x14\xb9\x17\xd1\x8bp\xf7\x81\x93\xa2\xfe\xf0[\xbeDQ\xee\x88&C\xab\xf3\xf7\x14\x94\xfb\xedN\xc2g\xe8\x9104', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') read$FUSE(r2, 0x0, 0x0) write$P9_RUNLINKAT(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 12:16:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, 0x0) 12:16:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000001140)="f43cae35", 0x4) 12:16:57 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}}}}}, 0x0) 12:16:57 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000004c0)) 12:16:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, 0x0) 12:16:57 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:16:57 executing program 3: syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x22, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @sack={0x5, 0xa, [0x0, 0x0]}, @md5sig={0x13, 0x12, "457a5ef5bb8614c2725690c765dc45ee"}]}}}}}}}}, 0x0) 12:16:57 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:16:57 executing program 4: syz_emit_ethernet(0x76, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}, @md5sig={0x13, 0x12, "457a5ef5bb8614c2725690c765dc45ee"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) 12:16:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)) 12:17:00 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 12:17:00 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') dup(0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:00 executing program 3: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x4) lseek(r1, 0x7fff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 12:17:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)) 12:17:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @local, @local, {[@hopopts={0x11}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 12:17:00 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x20, 0x2b, 0x0, @local, @ipv4={[], [], @dev}, {[@dstopts={0x0, 0x0, [], [@enc_lim, @padn]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 12:17:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="04000009000000fa656174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)) 12:17:00 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 213.745757][ T29] audit: type=1804 audit(1596370620.694:7): pid=8879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=15903 res=1 12:17:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/174, 0xae}], 0x1}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="1e", 0x1}], 0x1, &(0x7f00000062c0)=ANY=[], 0x1010}, 0x801c) [ 213.847219][ T29] audit: type=1804 audit(1596370620.794:8): pid=8890 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=15903 res=1 12:17:00 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000140)={@link_local={0x3}, @random="2e9a00000001", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1ff8ab", 0x18, 0x3a, 0x0, @private1, @ipv4, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) 12:17:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) [ 214.828949][ T29] audit: type=1804 audit(1596370621.774:9): pid=8890 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="bus" dev="sda1" ino=15903 res=1 12:17:02 executing program 3: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x22e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x80) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}, 0x78) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="780200003c0000082bbd7000fedbdf25f619636c61a30b19107a229c294a17770545d1713f5358841ee23cef2a818858552631481792538a757f13b2c1c6478d0915a08ec5bc27c3011bfefb8d5e894b51564e104056275960518e90f994517ef77ca8e0b30321e2fbc45dc2bffb099c0870d950dc894cb316648cba8028de4d080d6880819090ac5b3fc061fdff22bd1a820afff2faec794e92f9f03b05de636f86ee08a696af36b1dd09f5836409ced64b2800148008008d00", @ANYRES32=0x0, @ANYBLOB="080049008f000c002d00040000000000000008000600000000807a7b4391d7e81e29a32bc471a392ff37fd0b7b72ed5980010162a62094b17c95c829c612458144e28a31dbed7d1b4d42cbb4676a5e74adbb3501819e4cfd8e1a600b8189cde24e5e2646083ac2f3206032499e45424bcaecacd8ff38c56195019f23e22394f3fd09b8c283cfa32de21811dc1b9617b0e135a1dacee2efa9eede30538f5728fb3585ba1b2c2caf47a0630e2232de863117d9b3b470f3f522c1a6fe150364242e6ab274a4dd9ab878deccdb95f5381281783b84e858a42fdd75e26f592ff6abdef6dd85b72137bf6944ddcf8baf36386881a43c41511f363531d239c57e3aa81e4dd13ae04660a83df7df25f80f52d755f445c314bd41cef539d2bb77a7c963ed6bf96f4daf056ebf5917436131e6aa08007800000000000000000000000077e8dc18e94a64c1675987bc3412", @ANYRES32, @ANYBLOB="081dc66d", @ANYRES32, @ANYBLOB="08000700e0000000068a196ca01c25384b8e5294f3d0c4d1371b09598fac6be3e1a95d022cc2e49a1000524e69acbed0921cf8d1cb942cc9eeb5a826240f603f0a53d9e6c5e9b84fb7abc0b79447d1ba1a205db649dbb118ae3658e4e578cab701c8c624fcb12ce01eb1a0590000"], 0x278}, {&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xf0}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x90, 0x40800}, 0x20000080) r5 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, r6}}}, 0x78) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="780200003c0000082bbd7000fedbdf25f619636c61a30b19107a229c294a17770545d1713f5358841ee23cef2a818858552631481792538a757f13b2c1c6478d0915a08ec5bc27c3011bfefb8d5e894b51564e104056275960518e90f994517ef77ca8e0b30321e2fbc45dc2bffb099c0870d950dc894cb316648cba8028de4d080d6880819090ac5b3fc061fdff22bd1a820afff2faec794e92f9f03b05de636f86ee08a696af36b1dd09f5836409ced64b2800148008008d00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="081dc66d", @ANYRES32, @ANYBLOB="08000700e0000000068a196ca01c25384b8e5294f3d0c4d1371b09598fac6be3e1a95d022cc2e49a1000524e69acbed0921cf8d1cb942cc9eeb5a826240f603f0a53d9e6c5e9b84fb7abc0b79447d1ba1a205db649dbb118ae3658e4e578cab701c8c624fcb12ce01eb1a0590000"], 0x278}, {&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xf0}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x90, 0x40800}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{}, {}], {}, [{0x8, 0x1, r5}, {0x8, 0x4, r5}, {0x8, 0x1, r6}, {}, {0x8, 0x4}, {0x8, 0x6}]}, 0x64, 0x0) 12:17:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @local, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @empty}, @timestamp}}}}}, 0x3e) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:17:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}]}, 0x3c}}, 0x0) 12:17:02 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00bc00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000006b}}}}}}}, 0x0) [ 215.061048][ T29] audit: type=1804 audit(1596370622.014:10): pid=8915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="bus" dev="sda1" ino=15903 res=1 [ 215.090293][ T29] audit: type=1804 audit(1596370622.014:11): pid=8916 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=15903 res=1 [ 215.127763][ T29] audit: type=1804 audit(1596370622.034:12): pid=8879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=15903 res=1 12:17:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1, 0x0, 0x40, 0x400000000}, 0x20) 12:17:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:02 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:17:02 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:02 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x204) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:02 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000706f16403ab000010000000da5da2260c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10208005, 0x0) 12:17:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff31}]) 12:17:02 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0x1000}, {}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) 12:17:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:02 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 215.435322][ T8955] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 215.467729][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 12:17:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) [ 215.497396][ T8955] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:17:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x53, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0xfffffffffffffe3b) creat(0x0, 0x30) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) fdatasync(r0) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 12:17:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) getsockopt$inet6_opts(r0, 0x29, 0x2, &(0x7f00000013c0)=""/4096, &(0x7f0000000000)=0x1000) 12:17:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) [ 215.637575][ T8968] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:17:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 215.979313][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 216.003647][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:17:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 12:17:03 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x454, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0xffdffffe, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() syz_open_procfs$namespace(0x0, 0x0) getpgrp(0x0) mq_notify(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) 12:17:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000dc80)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000001940)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001b40)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) io_setup(0x0, 0x0) 12:17:03 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f00000013c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0x2, 0x3, 0xc13, 0x3, 0x3e, 0x5, 0x2b6, 0x40, 0x1d6, 0x1ff, 0x1160, 0x38, 0x1, 0x5e, 0x1ff, 0x1}, [{0x6474e551, 0x3, 0x4, 0x8, 0xffff, 0x3c1b, 0x5, 0x400}, {0x7, 0x5, 0x200, 0x0, 0x1, 0x1, 0x1, 0x3}], "8bf1242faf3fc4ceb0678a0b64e4d442e1ddb6f1caa1042937fe63798c92d8786a9017cb4d821c6ea63a5d679e20c5c5287815b8a712c0ec85ef46e7f182ecbf507b2a819fde6de96371c834e3ab5dddea330c26ff2c3d22268f199208daf4f11c51e0ed418daf76744315e92e8d4c7ea0b57d8d47169857eddca17d470a0129029740677adcb01629fb60e1f2fd1a290f243f3eab87379b719ad88712c4afbf8b1a3435e9b44b1fda332d930e5f3c7282bc3c2ee5d7ff837c77fccaf559558f2722638c2ea637d505f6f27e3253e68560440a36876559ad501cb6ee757822bfa2e3a64c39d39d461d571af2e835e2de0487c318475f2e005ebbf3317457cc098e016cd9dc52456c658b49fc20269e4e78dd1fc5ff4150bb7e718b5838193a62469fa519e7b317967b3bff586f976195ab35a4b6494313df6b1e0ac6bff1985f5adb8adc0c2c993ccf6bc90fc8286e7db9a34f0b53128ba8e35d2006f6cf9593976662f5202b385f29e7b2be89c84421d5e33f4902a193781fa42949c7c9ca7375a8061ba6c50f675a49b6d7438200ebb8feb4ddf70643ab704d6532d3562166e809ba41cce29e54b1e848745993b571f52454814d2a20f9b5a0a7acde6c3486ec34397ac7d0c49db34846c3e991726ab74ac83e25183bb9e5d80326f10f2fa6eaec7b5a9370fcb663e99e65b3c196fe263f3ec61329fcea8d93b3ce1066bc90223f020b0f1f67b387f1f3e52024efa22c2f91414ef54baf55a2bc5035155c86dd334810cd17c087ef1de562730879e6ad81f4221ed9f8ff6b3b68bcd8516f334cd12620b9d0cfde194fed55f2145731318adc92186710a1e86974429ceba7f96fddd3ff4b18e13c0f6d6885eaca1276714e572d9625546f5d8d613f506141afb1ecaf8ccb1e1039b27c0cc7698c8ef3eb8a61ad2d67b29557a031a8592f415066e28054bc64f0a71d388249dd31330b99f52fba6d0a05c5e3ca7b504f4e85d1c3d612960ffda0953ccb8ad6392aead53c69c180906027b27954c68dceebbb7502f8b1421bd62f64b445b9f5230c393fcb2a2a27e2ca0b6e513c71b12a638021185b75277b5e49d61ebb27c22e4cd83f4d5f6ee7e30ea2e32a83bbe93f75b317c590bcbfe785cb51a64821efa31b9bbccae769d07626c511a3a60c5adb96c81bca54ce2ef6bc201656852d51f2bb3074bb10e96d7fe7d12e9a0d8061acbe1ee5329d64b9e55dd3752d326695683a391fd68fa3d2409bd35fad9bc6a19f252d581616673fe0aebbd0ab5ce6d0d6b2f6ede555a3f8cfdffe7b58bc42cbb801ebe9ce76666edac6a4820021affad0c8adfaf4b6eed366480cd3043e3f791972c5ca72fcea50e5a6692fac96890419946f5ab5021f1538a275bf396514519f049e607e43856846a0c882fc302b0910ced67374b7d6a9495f81a0b21a778d4c45722249866bf709801ebd5799b1cb45dfd576466dddc2529c57fe77c567052e62d3c47386d936b7a8ab552c7147a47ab2e06a618dcee2d8223fb029a96f13fed3c286a84542fd4073dc29fb420bbf1b7194ee5b091be257f2a6aea90a533eb7af4b52b4bd1bf98ce79b581f8df3a0859b614a15c4deb2ae310d2918e9829baac5c017521e9f70ea0022c37c93fd3aa9180bdada0a398618d9ad260b1318be2245e543be0b765dc89ebd18cb451135e010331c73ab087fd5ea688ceb74634be678c11dd7c8b539ec48841c416dc42a432ce93619c92981763a16c6bc0dd5d9665b432146648feb3448dc273c462c7ddd2ef889eadff0b3cff9361f222ed88539511f3d55f40b920d3a069fd9346455bf7f500c177840d9020f450288d2ea0019cab1984c5904ecbff23194c9019ba1301938102e34076997df5b25aaf2ff158f3527e26313d0eab80887f4f5e29e931f38138eb0d36c25c74ce22e656cf335239c92ad4ad0319640a0c9c569d1cd818b8fee98b122a4ff072fcac5dbda76321639b226dad283c5377a82b3723ad825b746818bffbcee1596b012c66989edd9d07234d62fa9382f4239ef04ac39650a7952b9a053a878f54599cd58254ca6bef3fef566bad765eddca96095be5209cb86209798ac7b9bf5d4bfa732b7080e634f7184ff4c8009092f320ac122a2deac8c5c482977ea5d5ecb32c434e47e11e57fc817c7ff514dcb7a737b3640d128a94de74b14f344c872da1a0d0bdd18ad7dc8844ac30802c925806c3ff29811d704958825679b6c6e3c8f34b26bf9de523ba5ce79b653b49c4d0a5f615855d6fc0fe466a99c9939bc19493aa8390e6d70ebd8925a5c141ccb76a5e60939c717373815f812d91a27928333989f408ad1d6fce45f54611e8b595ca7b285f736237ff1e5f7a414b4a9b45ce8762aab5de14dd7f87acc2ad142ba2f8973d90d097448084a64618fdf4a8b9022e9e7990f00781cbac5a56d5e6fa105dce0f2ece518ed2c5954490b2a9889141eead3797e40eeb4904737eab74beb85f6f78224c5b542b87b5b4b5f0a860621e2dd5916d53b6100f171a00634ed4726fd894a8f79f6b3f1f5b2e58b7308d123b6e20067aba41d0f210f0423dca97db4ba5e364f79a142f1a9b1bb638d31843f609632fbff6deb3d5fd9aa6ccb2a57a2846b5ceeb1255c306a9d58649644676c46407e84862d5b366004a3fe91a5cbca534fd9816d73c22f6a299e72d554f5cd86ebe8910cb1185003c7905e321f135276642c6942267207151d6f839625f4f03c02d72fe935390f270dda072884936c646f6a208efc746d0f0b087cfe3d67827b6ba13e79fcaa6ba5dd12ab6011e1cb31ecae516adc8203aca85d5790026ea834a7a5cec75c4b03650c7a23ddae5ec18ea09e45b35766a5fb12d337a7a661823609beebadb28e132ab0317b0843b6485bd2e205503a46db52ab12f3aeade38cbfcae170db1fb4a7f0eb189f62d8f5aecc1677bfb9b56fa42fb8a7b19e779f52746290ee58870492622eb107e3963bb3716b57559edd19779aa7022156288822d5499f416dc30bdbf9816557b6e40fe2e0c176bf55afd6a91dac1997425918a6e5615bb69a1bf08ab4b5eca6749e797539c5dd81a3e4b6add9282e2ccba05ba38729cf2548956218d58fd3c2373373ff509e5a2d05e5451e75d0a97440e59edda60ca8798dfee74dff6a681c98c9b40d6884a46955b135bf64b7b62dd2f3941464d12d392241d86762010a7ce2ea5f165bb99edcf1474e30fb09212ecd910a4737b84cfb27012f5e20c73da47961d5eaf50f16c760f6bbd8788b4011c594d3d932426bf105c85700a0f81971634fb2c06cb2b7c788c84b0efb39f74338ecec1498a090f6ffa76a00eb67a35ffd8afd964af78656a49a4080edae8ebb8eeab71e91ca812d91ffde0be93aad360f9d4e86ab1fd8183721b4018ede0dd8608707c5c4e028226373bef8b822d0f541c00ed3051cb1d457dc0c9a3b6f1879d8f8ddd90c6cc0ddef8e2115868494fa562243e00ee418804ba4c5ccb62df46a069ea0ba3fce22e15b611ba62219cf3a190caff12d7f8d16ec502e51769ddc3d708e973af85116b11b6d023886f416e84ce6450a78903a6f609548ee84d184a1a2d7db9b1833e988112a56763dd51149b360fe6eb6a2d9daf79c6e3f6a29443be1e0e35055974e90c40a6260b68a37a022a66005c5e194d6ce88cc04a9fe4faa73d2f8e76711807e23d3ccb11b765dd4f196ad7ab537e5434e654d6513be9e4a055e0c349f09e2330832ae6b301f2997ff443313f073d0d268d8da31b7fc2e5ce4f2290e518c90b438ecc8a5eca67e6fb05635d4dc3c9fe2d7d317eeb160d36f6de0138335960a095c5c6f6fc8ed77fc0f13ac4f4463c25ebb0906bcbc89a6ea23df451829ad258643577fbe4e1b85aa4e1580807cb68e7890320a39523bb1129432b2945388362731dddae207624451dbea04d0ffd6d3ba95d11bdc61b520e189a789cd3448b58205c2ad1d7e5894bbd516d62b397360ef6d5748cc46e749522e513ea57b5f1c66d9dee96da9d245dd0495ee4cd5fa01a342f9c9c6186cb70993b7bbc4d6f21ab617a7ef2f05b47a3294d2e853a006ed72c57204c8bb3ca52a66fbdee53301320d447dc46d2c506317acdb490243b5d0432ac40b26f77031ef2bd21d65555c65d59bbfd97a29d16d92ab96b296c10853187d84fbc4dee4eab65c9d6ace746c339f8942d4035554bfd0f96b775d7abcecaea49cdc5c1d56a805e7c7313e19c691545e9915eff76ac0b5887265f03802c65da7f8580d9d5bf3e53156db4561a5d8f1eb4f2ac25c2331f3d3a205b8b0055c8d043e77165220dc1c4ab9c4103dc0b4c249b7e6a260f5af7704cc8897b14cc80127ca8f634b72c29a5a75d015fa5c54bc5089fd6be61621635ede436b25097508b70730600b8610b66b9bd0e79decab1c11443250bb2f5503efd9c2335411627b4b5f96730089561d096f6e01878a8eff9d1be8419dcc86588b656a94880ddc2aaab3bc2f96718b44f8902c9f999146954d8c25c1b02e1154968bd7e346e932345d67c38279797be164a37d19a7418677ec4a35163a3bb8db4d0a1820055ab08105d7a7e7c2f39fc52f059f16665deff4e152080d7b47eda74a1ada22b2ea99f92c38caccec26c6a4a7b280b77dc8b7fe4a709d45b41bcba43b672bb8820187b0c4033ddb222f929fd4e6253b4ebb0eb9ea73ad4003c91ceb2ff7080974001e6fcb4f73a32b06e0d25649e5b145d6d20c58a689de7ed01c11b0daf64ccb88d4e5ee5ac350a79728b595117396f45b31a7e691ea37c34fd7eba1706ccfbd71a640ed2c209305dc11dfab79a6f67c0a93683df97d14cc95442b33df9ba775e779fb57e6e82f28e71fb4a9c90ae5f3a474b50894206602dc4e90dae6dc02999a35888e17523d2e6838a40b5150aed661a049dc4d96c937f3ab10b34df71e1f95b34ceaf012f152df651fd72bef4c223768f5ffca44d337250a4ca07807e3cc37a01ab9ec79ff7eac36197a6880307e18bf34b805b3f39e59b8713a594842bfd1e1348245347c299ed12742a6359f25b5a011f298079230e2008c0b4b449ff73a6ab356c6d0cb97accf03b3613522d005547d08e13f6a0debbb6944bc3a1eb40c347a05b0b4263972b64e678c2057f1a479c034181d1f73d88bfb589bc9239b50e935e65ea83c589f6b22a46681aa8f7133eff7d4ce8189b55315ac33105743440bbb32cd5cc8868e2f9ea003f59504c9a3c9855451ce464a4a7d93ec3430ee69ad2bbd39f42bec1293ba2caacd7aee44b746cdc0680e6d836c277ece85a4bf38dceca972c097528d11b480224f7ea8ad955168d332b0bdd838f08441bf7859fe6212a8bcf9db45c36a03dccd17a17413cceea6deae2a2e8f00cca5524bc71ab04d1d9c7c882d6c1a3a1d15b873f0834549cd7fb85b6fb7e27a1e315ac63bfad537a6e89a80ca86cfa83092ab62aafde72f4b065ed44c138553191e8e83e80c69fe80b6d2ae2b91d38f631bc573b7e66b0a7eeba3f669410417f2b59244a25879553ec471f4404f06785fe27ed617dfaa0ad4a9949eab06748b9a19ad70f5aaaee0ff3f6b77fa876a87aa5f91e5562e16516462bcabda99a3a0e0799750c11dd8ae922449a5f8666f00e08f0683288c1f1193bca871b77ac4fe352a987a8beb9585a473ed546eea7e6318a124c501af53a01ae526878d2c97b844941bcac46621a9ec3750025b97dc8de1b98f27b31ccdb46aa6c923fcb8935445e9b9cfb13ca99b5b06f91cdc9266340c1df5002128bafa296a3245bf20182bee", [[], [], [], [], [], [], [], [], [], []]}, 0x1ab0) 12:17:03 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x0) 12:17:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12:17:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000000)='^$*]\'\'#)\x00', 0x0) fgetxattr(r1, &(0x7f0000000500)=@known='com.apple.FinderInfo\x00', &(0x7f0000000040)=""/55, 0x37) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0x1c8, 0xd0, 0x0, 0xd0, 0x1c8, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], '\x00', 'veth0_vlan\x00', {}, {}, 0x3a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "e58f"}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001b000a"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private0, 0x4b, r6}) 12:17:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xde, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 12:17:03 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x8080, 0x0) write$P9_RFLUSH(r0, &(0x7f00000001c0)={0x7, 0x6d, 0x1}, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x80, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x80}}, 0x200200c4) [ 216.397444][ T9009] x_tables: duplicate underflow at hook 2 12:17:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:03 executing program 1: pipe(&(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_BROADCAST={0xa, 0x2, @random="bd5df5062200"}]}, 0x2c}}, 0x0) 12:17:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 216.479359][ T9017] x_tables: duplicate underflow at hook 2 12:17:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x20000160], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 12:17:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x40000080000100, 0x0, 0x0, 0x0) 12:17:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000001060103000000000000000000000004050001"], 0x44}}, 0x0) 12:17:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002240)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x3}, 0x0) 12:17:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 216.827976][ T9042] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 12:17:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xde, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 12:17:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x45) 12:17:04 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23, 0x0, 0xffffffffffffff04}}], 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000, 0x0) 12:17:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 12:17:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 12:17:04 executing program 3: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 217.540599][ T0] NOHZ: local_softirq_pending 08 12:17:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000104010800000000000000000300000508000540000000000500010003"], 0x2c}}, 0x0) 12:17:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 217.736216][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.753357][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:17:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xde, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 12:17:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 12:17:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 12:17:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000104010800000000000000000300000508000540000000000500010003"], 0x2c}}, 0x0) 12:17:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 12:17:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {}, {}, 0xc}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ffffff7fc8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c929a1ab99ffcfc1dc61f80", 0x27}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'macvlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) [ 218.005882][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:17:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 12:17:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 218.231735][ T9115] xt_CT: No such helper "pptp" [ 218.272412][ T9126] xt_CT: No such helper "pptp" 12:17:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xde, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 12:17:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') pread64(r2, 0x0, 0x2d, 0x0) 12:17:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:05 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 12:17:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getuid() 12:17:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:06 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fstatfs(r0, &(0x7f0000000100)=""/241) 12:17:06 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) 12:17:06 executing program 1: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:06 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cb}}}, @TCA_TBF_PRATE64={0xc}]}}]}, 0x64}}, 0x0) setitimer(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:17:06 executing program 3: shmctl$SHM_LOCK(0x0, 0xb) 12:17:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 12:17:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:06 executing program 1: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 219.533219][ T9176] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.540973][ T9176] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 219.634071][ T9185] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 12:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:07 executing program 3: shmctl$SHM_LOCK(0x0, 0xb) 12:17:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:07 executing program 1: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:07 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = openat$fuse(0xffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)=r1) 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:07 executing program 3: shmctl$SHM_LOCK(0x0, 0xb) 12:17:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:07 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="6400000024000b0f00ffff000000000000400000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007462660038000200280001000000000000000000000000000000000000000000cb0300000000000000000000000000000c000500"], 0x64}}, 0x0) 12:17:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 12:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 220.486919][ T9210] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 12:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 220.623012][ T9210] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 12:17:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000380)=@in={0x2, 0x4e21, @multicast1}, 0x80, 0x0}, 0xfd00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory', 0xc}]}, 0xfdef) 12:17:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000035000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="b9800000c0073235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:17:07 executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:08 executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x10, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) 12:17:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x10, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:08 executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x72, &(0x7f0000000440)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e293a000000000000000808ffdb2dc4a741357baa16dacdcf7d8f6990c3f9c51808235ffcabe1ed39b22837a6e1ce0f81d16f6c0be1d57c58b9959408a3"}}], 0x1c) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/12, 0xc}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:17:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x10, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:11 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x7) 12:17:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:11 executing program 4: msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x800) 12:17:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) dup(0xffffffffffffffff) pselect6(0x0, 0x0, &(0x7f0000000200)={0x9, 0x2, 0x9, 0x64ba, 0x5, 0x0, 0x4, 0x9}, &(0x7f0000000240)={0x0, 0x0, 0x7f, 0x3691, 0x0, 0x6, 0x0, 0x7}, &(0x7f0000000280)={0x77359400}, 0x0) 12:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 224.716270][ T29] audit: type=1326 audit(1596370631.664:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9368 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) [ 224.879087][ T29] audit: type=1326 audit(1596370631.834:14): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9376 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) [ 225.530579][ T29] audit: type=1326 audit(1596370632.484:15): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9401 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x74, &(0x7f0000000440)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e293a000000000000000808ffdb2dc4a741357baa16dacdcf7d8f6990c3f9c51808235ffcabe1ed39b22837a6e1ce0f81d16f6c0be1d57c58b9959408a37819"}}], 0x1c) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/12, 0xc}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:17:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) [ 225.753695][ T29] audit: type=1326 audit(1596370632.704:16): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') [ 226.377272][ T29] audit: type=1326 audit(1596370633.324:17): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9441 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:17:15 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:15 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) shmctl$SHM_LOCK(0x0, 0xb) 12:17:15 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 12:17:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigprocmask(0x0, &(0x7f00000000c0), 0x0, 0x8) 12:17:15 executing program 4: [ 228.754896][ T29] audit: type=1326 audit(1596370635.704:18): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9450 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:15 executing program 1: [ 228.836487][ T29] audit: type=1326 audit(1596370635.734:19): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9447 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:15 executing program 4: 12:17:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') 12:17:16 executing program 1: 12:17:16 executing program 4: 12:17:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:16 executing program 3: 12:17:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, 0x0) 12:17:16 executing program 1: 12:17:16 executing program 1: [ 229.613245][ T29] audit: type=1326 audit(1596370636.564:20): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9478 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:16 executing program 4: 12:17:16 executing program 3: 12:17:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, 0x0) 12:17:16 executing program 1: 12:17:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:16 executing program 4: 12:17:17 executing program 3: 12:17:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/a\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, 0x0) 12:17:17 executing program 1: 12:17:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) 12:17:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:17 executing program 4: 12:17:17 executing program 1: 12:17:17 executing program 3: 12:17:17 executing program 4: 12:17:17 executing program 1: 12:17:17 executing program 2: 12:17:17 executing program 1: 12:17:17 executing program 4: [ 230.559279][ T29] audit: type=1326 audit(1596370637.504:21): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9506 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 12:17:17 executing program 3: 12:17:17 executing program 1: 12:17:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, 0x0) 12:17:18 executing program 2: 12:17:18 executing program 4: 12:17:18 executing program 3: 12:17:18 executing program 1: 12:17:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:18 executing program 4: 12:17:18 executing program 1: 12:17:18 executing program 3: 12:17:18 executing program 2: 12:17:18 executing program 1: 12:17:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, 0x0) 12:17:18 executing program 3: 12:17:18 executing program 2: 12:17:18 executing program 4: 12:17:18 executing program 1: 12:17:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, 0x0) 12:17:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:19 executing program 4: 12:17:19 executing program 3: 12:17:19 executing program 2: 12:17:19 executing program 1: 12:17:19 executing program 0: 12:17:19 executing program 2: 12:17:19 executing program 1: 12:17:19 executing program 3: 12:17:19 executing program 0: 12:17:19 executing program 4: 12:17:19 executing program 3: 12:17:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:20 executing program 2: 12:17:20 executing program 0: 12:17:20 executing program 4: 12:17:20 executing program 1: 12:17:20 executing program 3: 12:17:20 executing program 4: 12:17:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc0189436, &(0x7f0000000140)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_pauseparam}) 12:17:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'sit0\x00', @ifru_flags}) 12:17:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0x200000ce) 12:17:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8902, 0x0) 12:17:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) 12:17:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:20 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:17:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) connect(r0, &(0x7f0000000100)=@rc={0x1f, @fixed}, 0x80) 12:17:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@generic={0x2, 0x600000}) 12:17:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) 12:17:20 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="024f4612d293bc46288813bd53297f18820049fe42"]}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 12:17:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000180)) 12:17:21 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000000c0)=@ethtool_rx_ntuple={0x35, {0x1f, @ah_ip4_spec={@loopback, @loopback, 0x401, 0xd3}, @usr_ip4_spec={@broadcast, @multicast1, 0x7, 0xdb, 0x1, 0x6}, 0x3, 0xae4, 0x8, 0x7, 0xffffffffffffffff}}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a1, &(0x7f0000000000)='xfrm0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x7, 0x2, 0x7, 0x7}, {0x40, 0x1, 0x6, 0x6}, {0x921, 0x5, 0x1, 0x80}, {0x7, 0x5c, 0x40, 0x7}]}, 0x10) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000000)="e4c65af28e60efc626b016e3e6113ee28c083d5d3e6db989ac93de484cec6c04d734cc197454fd0ad1") 12:17:21 executing program 3: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}}}, 0x2) 12:17:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'team0\x00', @ifru_data=0x0}}) 12:17:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:17:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000200)={0x4, 0x9, "001000"}) 12:17:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:21 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:17:21 executing program 0: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}}}, 0x8) 12:17:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @ifru_names='ip6_vti0\x00'}) 12:17:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04080100000007"], 0x7) 12:17:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r1, 0x0, 0x0) 12:17:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)) 12:17:22 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 12:17:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macvlan0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="1b"]}) 12:17:22 executing program 1: 12:17:22 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x7, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 12:17:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000200)) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="cc0009b83d0200004b01000005000000a802000004000000000000000000010014293cfc399608cf8af2b3068b125f3df7215b3c1480961f6c5ac248ae5f4474107b9db7c04d21b9e9c1882d9dda406dea1bf88cff75bc43fd6f21d3212c235bc8f5e8e80904e0f8437880815b9e63dcb83179d7069b605b87d0bb5c00cf961aff975e0d0b0ad1b6392182e9b15528a4d384c275cd800a3dbdd7513f65f3b7b4b554616ffdb193747fed3b31875b41b24aee74303f93641ffa9a4e82007ee7eb8c08df620dba9fd4dae3bfdd7c9fcb35616f712821f7742088bc3d88529f2ac00200000000000000000000000000000200000000000000000000000000000000000000000000000000009cca85d8ac3d0b9a000000000000000000000000000000000000000000000021a892e36c09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000efece48702000000000000008f2d85c0636b010cdff05aa9a5ae319243c87465faebff2ca9ff631f2552a4e92d9c75f55c5e75bfd8991e2fd2aec0173eefcab5d2eaca3b7e6d821a96944642c6082a16c13353dc8e3ba8a7cf72114527f9f755025cb7c4f87706c3530aa57c806a8829f09ee1a00586681cabb52ed1d8fcba99df5124c50b30ad1d910d6250860a5d2cf21a28c0686261fabe23600f123bb22bd703edd203446e13664246514ffa1851343e5bf25d1fd5ec55c077edc0ac49a793a35ae3c502445716bfd0750b24201600b172644c58a10fc3cbe74eafe1e72fcac55d70bf4e7e3ef68898ed9216ae2814de3f0dfd44fcf8d839c9896b9e86df6dee27f5d3ee89ac0fa74ca3ddd48551186934a25e0d5a0007e1f3f2013ab28883696a6fe0b7068b2480767c673528ddbad1d962af18768482d396b59f14bba584209ecd29a1eca5cb2b47559dccd0a6deb6db42a3f5eb110791ca42f577c9c99dc229532404526531ca02f2b9245e32b348adafa14c7f15f98d64d28b6d651ce2c51cc28f228e9787ea3be6dbde4858030aee58f130060e0e21a7f833e1febe34b0ef0a3907491748db9149650b941f6a8ec18479413919a7cf840266b0519c2ed8808cc077b71cf7a56f1a69dfdad75a4ca98490d1735409a05aedd65db32d1263dc72d89b233f0fc70ea2681891bc6672365bca7449a9d5bc936b4f3c2e555f21ce33d7b57d8f87095defc1e818931681afc0e6915d353c8fc15c07aff2a6f8670f1e11494a5498e571676761d1dc1ef0feb45301a421f8c9f31315d4941280b99a703d957b52b378dcefbbfca2559fcd19326eaabefcd1cd48af7891605de405ef5b4f9130b92687419c2c184c7e469d5b9d0d525892910d1931ffc488384354cc1a3fcfc58a41434f453e0e1cfc5430097fab3c8c07886ca431a640ed5c7c2e0c1deb3e9768a8f6a2ec28f0d1c0ffd3a97a177a5b6f2a56c89807965117332c56190be4b204962e29393684f2728a0e87"], 0x1e1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x8, &(0x7f00000003c0)=[{0x5, 0x3, 0xf7, 0x8}, {0x3, 0x2, 0xfd, 0xb0}, {0xfffe, 0x0, 0x81, 0x7}, {0x1ff, 0x40, 0x1, 0x80000001}, {0x100, 0x0, 0x6, 0x4}, {0xff, 0xc6, 0x8, 0x1}, {0x2, 0xef, 0x40, 0x3c90}, {0x8001, 0x3f, 0xfe, 0xfffffeff}]}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001340)={0x0, &(0x7f0000001300)}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000200)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000280)) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000380)={'macvlan1\x00', 0x7}) 12:17:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5450, 0x0) 12:17:22 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000000)=0x88) 12:17:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f0000000080)) 12:17:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 12:17:22 executing program 4: syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x0, 0x0, "da7e3bcfe9888005"}}}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}) 12:17:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) 12:17:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000000000000000800000000000000000000000000fe090000a04d93d9c6db6dce000600000000040000000000003f"]}) 12:17:22 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000080)) 12:17:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0), 0xe) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) 12:17:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000080)={'vlan0\x00', @ifru_settings={0x0, 0x7ffd, @cisco=0x0}}) 12:17:22 executing program 4: syz_emit_vhci(&(0x7f0000000a40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_info_req={{0xa, 0x7, 0x2}, {0x4}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}}]}}, 0x25) 12:17:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001340)={0x20000000000001c9, &(0x7f0000001300)=[{}]}, 0x10) 12:17:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, &(0x7f0000001300)}, 0xf) 12:17:23 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ef9fd0b20"], 0x7) 12:17:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x89a1, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_virt_wifi\x00'}) 12:17:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, "175fa650758adf38412ee6bf023966651dbccf30cbb436ca427bfc9bc9f178129190f2b464c6e609c2973e257177417e02a6c1c16cf8bceef200ae9fca72d7a9c6cf812c122bb90222f125aadc4d7e1bf57a51e8a89f2fc6100781c3dd4dbc57f500676c94c8619416835437b2a7c8947e8b63d65768912757efa02506d49781be1ba6284a700c3659d318f7f09028e38bdd393952a67814c4d7be9712090f422fa2fece50ace0f0e8e8edf73f57ca6aa9f1476a69bbd1805cde2931707d341d80435e94e9cea1f5aaef33568cc90063cbc0cda6f74b4c271766a9be6f6842658e7d41e493dad639ecda0766"}, 0xed) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x1, 0x8, "711c63", 0xffff, 0x3, "3f9660e0b08cd8a654f66a18aefe272b00647ce8dac55822ce9948fda0e78d33025e91184fcf78b21e1fadf576a06f4b0b593b700afad4c3f0d919918b1fc40e39a2cb7acc7bb4c67642679033b7492d2e5e509ecad34a4b0fb54b1e2de016d2c988341d23d67b354628c8c09805fa148dd68c621082960d93d2ca4570cf8ea5fd7ff4a0b311961abd80db5b38e18fc7fb9875640bfcb0d04181cbc20e5e0f2dc6b8c1c6563c7b427c99103d5f914c20c086736f78cf1be2f8218c4b4e8d0775240e5d8092bf597ae8bf23a204183534464e43ba02702c9bc6474d4cfd7bfabcc7c7f41d087d64af8df4b9803f897b59"}]}}}, 0x102) 12:17:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="200000005c000000db1e08c62e7d1a1c035c000000017b9fb4c16ddd6282251d65"]}) 12:17:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a00387164b650000000000008020000f8db00000000000000007f46f3b54d8bc604c0f027cb4b1ae5a009056827f900ef9f36b1eb4290e103d2a1e9604a2429ae6d"]}) [ 236.753804][ T1531] Bluetooth: hci0: SCO packet for unknown connection handle 3863 [ 236.762303][ T1531] Bluetooth: hci0: SCO packet for unknown connection handle 3863 12:17:23 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000340)) 12:17:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:17:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_to_hsr\x00'}) 12:17:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 12:17:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:24 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="200000005c000000db1e08c62e7d1a1c035c000029"]}) 12:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0f0100c9aaaa01fd6ae9679f6a"], 0x22) 12:17:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x1f}}) 12:17:24 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @none, 0x1}}}, 0xe) 12:17:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000040)={'sit0\x00', @ifru_mtu=0x1dfba}) [ 237.678522][ T1531] debugfs: Directory '43721' with parent 'hci1' already present! [ 237.686763][ T1531] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:43721' [ 237.704947][ T1531] CPU: 0 PID: 1531 Comm: kworker/u5:0 Not tainted 5.8.0-rc7-syzkaller #0 [ 237.713368][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.723611][ T1531] Workqueue: hci1 hci_rx_work 12:17:24 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='xfrm0\x00') [ 237.728283][ T1531] Call Trace: [ 237.731572][ T1531] dump_stack+0x18f/0x20d [ 237.735902][ T1531] sysfs_warn_dup.cold+0x1c/0x2d [ 237.740836][ T1531] sysfs_create_dir_ns+0x233/0x290 [ 237.745948][ T1531] ? sysfs_create_mount_point+0xb0/0xb0 [ 237.751489][ T1531] ? rwlock_bug.part.0+0x90/0x90 [ 237.756423][ T1531] ? do_raw_spin_unlock+0x171/0x230 [ 237.761622][ T1531] kobject_add_internal+0x2c3/0x940 [ 237.766815][ T1531] ? __free_zapped_classes+0x271/0x300 [ 237.772273][ T1531] kobject_add+0x150/0x1c0 12:17:24 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_le_signaling}, 0x9) [ 237.776696][ T1531] ? kset_create_and_add+0x190/0x190 [ 237.782038][ T1531] ? lock_is_held_type+0xb0/0xe0 [ 237.786976][ T1531] ? lockdep_init_map_waits+0x26a/0x890 [ 237.792517][ T1531] ? __raw_spin_lock_init+0x34/0x100 [ 237.797794][ T1531] ? device_add+0x33b/0x1be0 [ 237.802380][ T1531] device_add+0x35a/0x1be0 [ 237.806793][ T1531] ? debugfs_create_dir+0x2cf/0x390 [ 237.811983][ T1531] ? device_check_offline+0x280/0x280 [ 237.817412][ T1531] ? hci_debugfs_create_conn+0x179/0x1f0 [ 237.823045][ T1531] ? __init_waitqueue_head+0x97/0x110 [ 237.828411][ T1531] ? hci_debugfs_create_le+0x850/0x850 [ 237.833956][ T1531] hci_conn_add_sysfs+0x84/0xe0 [ 237.838835][ T1531] le_conn_complete_evt+0xc09/0x1740 [ 237.844129][ T1531] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 237.850710][ T1531] ? debug_check_no_obj_freed+0x20c/0x41c [ 237.856432][ T1531] hci_le_meta_evt+0x745/0x3eb0 [ 237.861293][ T1531] ? mark_lock+0xbc/0x1710 [ 237.865713][ T1531] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 237.872553][ T1531] ? mark_lock+0xbc/0x1710 12:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040efc05140c"], 0xff) 12:17:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x31, 0x0, &(0x7f0000000100)) [ 237.876964][ T1531] ? lock_is_held_type+0xb0/0xe0 [ 237.881900][ T1531] ? __lock_acquire+0x16e3/0x56e0 [ 237.886925][ T1531] hci_event_packet+0x245a/0x86f5 [ 237.891951][ T1531] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 237.897934][ T1531] ? __lock_acquire+0x16e3/0x56e0 [ 237.902956][ T1531] ? hci_cmd_complete_evt+0xc6e0/0xc6e0 [ 237.908496][ T1531] ? lock_acquire+0x1f1/0xad0 [ 237.913247][ T1531] ? skb_dequeue+0x1c/0x180 [ 237.917742][ T1531] ? find_held_lock+0x2d/0x110 [ 237.922527][ T1531] ? mark_lock+0xbc/0x1710 [ 237.926959][ T1531] ? mark_held_locks+0x9f/0xe0 [ 237.931775][ T1531] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 237.937579][ T1531] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 237.943560][ T1531] ? trace_hardirqs_on+0x5f/0x220 [ 237.948580][ T1531] ? lockdep_hardirqs_on+0x6a/0xe0 [ 237.953693][ T1531] hci_rx_work+0x22e/0xb10 [ 237.958117][ T1531] process_one_work+0x94c/0x1670 [ 237.963054][ T1531] ? lock_release+0x8d0/0x8d0 [ 237.967724][ T1531] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 237.973092][ T1531] ? rwlock_bug.part.0+0x90/0x90 12:17:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x800442d3, 0x0) 12:17:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'ip6_vti0\x00'}) [ 237.978028][ T1531] ? lockdep_hardirqs_off+0x66/0xa0 [ 237.983231][ T1531] worker_thread+0x64c/0x1120 [ 237.987922][ T1531] ? process_one_work+0x1670/0x1670 [ 237.993120][ T1531] kthread+0x3b5/0x4a0 [ 237.997184][ T1531] ? __kthread_bind_mask+0xc0/0xc0 [ 238.002288][ T1531] ? __kthread_bind_mask+0xc0/0xc0 [ 238.007400][ T1531] ret_from_fork+0x1f/0x30 [ 238.032196][ T1531] kobject_add_internal failed for hci1:43721 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.045744][ T1531] Bluetooth: hci1: failed to register connection device 12:17:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000000)={0x1, &(0x7f0000001300)=[{}]}, 0x10) 12:17:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) 12:17:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 12:17:25 executing program 0: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0413"], 0xc) 12:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x2}, {0x6}]}, 0x10) 12:17:25 executing program 3: bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) 12:17:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) 12:17:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'vlan0\x00'}) 12:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5a20}) 12:17:25 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 12:17:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_dump={0x0, 0x40}}) 12:17:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:25 executing program 3: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x1, 0x0, @fixed}]}}}}, 0xf) 12:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000040)={'sit0\x00', @ifru_mtu}) 12:17:25 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001340)={0x2, &(0x7f0000001300)=[{0x4d}, {0x6}]}, 0x10) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x493, @none, 0x7}, 0xe) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x89a3, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$sock_ifreq(r2, 0x89a3, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_virt_wifi\x00'}) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) 12:17:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 12:17:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam}) 12:17:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000100)) 12:17:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "340a9a"}) 12:17:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000040)={'sit0\x00', @ifru_mtu}) 12:17:26 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x52}}}, 0xa) 12:17:26 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0), 0xe) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 12:17:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$binfmt_script(r0, 0x0, 0x0) 12:17:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:17:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)=0x8) 12:17:26 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89a0, &(0x7f0000000300)="929cc66534faab1ed1e625") 12:17:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)=@ethtool_dump={0x0, 0x0, 0x0, 0x11, "6995783b47447f325ba6acf877b2aa084f"}}) 12:17:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xac4ccf34b33505d0}, 0x6) 12:17:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'rose0\x00', r1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89a1, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x4000}) 12:17:26 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0440"], 0x2) 12:17:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:26 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x1}}}, 0x7) 12:17:26 executing program 3: syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x20, 0x0, 0x406}}}, 0x7) 12:17:26 executing program 1: write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam}) 12:17:26 executing program 0: syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}}}, 0x6) 12:17:26 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}}}, 0xe) 12:17:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x24, 0x0, &(0x7f0000000100)) 12:17:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{}]}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 12:17:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0412"], 0x2) 12:17:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "0ecc4c6f229eae32f0945ce4cc77671dc9177ef8c80ee17da7fa38f873ac088a", "a40d579a39e273c973c4bd1903cb035ad753c16f4ce1e070a5532b6f80f75d09", "2ddd5804d0135cd2e192ed5c414f39c5e1d6c0ea50fe25ddfc632f5e8cf986f4", "d1e5a69c817103f805d382e820d21c8ff87b9d93226c24f00c23f53dd45a747a", "ec43df477f3d82e82e171890415d31a4160590109c6ce0086386ab449cff91a7", "1e18c62fc4eb68a62d1f48a9"}}) 12:17:26 executing program 0: syz_emit_vhci(&(0x7f0000002a40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x22}, @l2cap_cid_signaling={{0x1e}, [@l2cap_info_rsp={{0xb, 0x1, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x0, 0x8000}}, @l2cap_info_req={{0xa, 0x9, 0x2}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}}]}}, 0x27) 12:17:26 executing program 1: syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="02c8001c00180001000205040000000000070804"], 0x21) 12:17:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, 0x0}) 12:17:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 12:17:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) 12:17:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f0000000000)={0x0, 0x0}, 0x10) 12:17:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x400442c9, 0x0) 12:17:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'vlan0\x00', {0x2}, 0x4}) syz_emit_vhci(0x0, 0xf) 12:17:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000), 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 12:17:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:26 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0401"], 0xa) 12:17:26 executing program 3: syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed, "2aff6a"}}}, 0xd) 12:17:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000100)) 12:17:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) 12:17:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000040)={'sit0\x00', @ifru_flags}) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:27 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c800b200ae0001000a07020004000b02620002007f00a762568db586902acb90e90bf570e7129709f764c121a71c81fdffffffddbb2d244a485f0702f02c370a48c6a8b49ba42c1cb5c4b68b03040fd65d53da7c70963868a383482c2c2bcd862030b70efda05f3286efc488e82da0d814e2aeb702050400030000000502"], 0xb7) 12:17:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'erspan0\x00', {'bond_slave_0\x00'}}) 12:17:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) 12:17:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7, 0x3}, 0xe) 12:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="200000005c000000db1e08c62e7d1a1c035c000029"]}) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) 12:17:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x4000}) 12:17:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x4}) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}, 0xb6d5}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 12:17:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'sit0\x00', @ifru_flags}) 12:17:27 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='syzkaller1\x00'}) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0xc0045878, 0x0) 12:17:27 executing program 1: syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed}}}, 0x14) 12:17:27 executing program 3: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_flow_control_mode={{}, {0x80}}}}, 0x8) 12:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)=@ethtool_dump={0x0, 0x0, 0x0, 0x1a, "6995783b47447f325ba6acf877b2aa084f2bebe4260f6b1f3045"}}) 12:17:27 executing program 4: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x405}}}, 0x7) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'caif0\x00', &(0x7f0000000000)=@ethtool_ts_info}) 12:17:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200)={0x6a}, 0x2) 12:17:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x4ced}, 0xe) 12:17:27 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f0000000100)) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 12:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam}) 12:17:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xedd}}) 12:17:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'geneve0\x00', &(0x7f0000000080)=@ethtool_regs}) 12:17:27 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x8b35, &(0x7f0000000040)) 12:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:17:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'ipvlan1\x00'}}) 12:17:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x39, 0x5, [0x8, 0x7, 0x100, 0x0, 0x1002]}}) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:27 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) 12:17:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 12:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 12:17:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x1}) 12:17:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000100)) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 12:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x82, @any, 0x0, 0x1}, 0xe) 12:17:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) 12:17:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e06120000c8"], 0x9) 12:17:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x89a0, &(0x7f00000001c0)={0x2, 'vlan0\x00'}) 12:17:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1}}}, 0x4) 12:17:28 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x33, &(0x7f0000000000), 0x4) 12:17:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x4000}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 12:17:28 executing program 1: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0704090805"], 0xa) 12:17:28 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x1, 0xffffffffffffffff, 0x3}) 12:17:28 executing program 3: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040efcff220c9f"], 0xa) 12:17:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:28 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:17:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x40000000020) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="020000000000", 0x6) 12:17:28 executing program 1: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam}) 12:17:28 executing program 3: syz_emit_vhci(&(0x7f00000029c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:17:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000001300)=[{0x16}]}, 0x10) 12:17:28 executing program 4: syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}}}, 0x9) 12:17:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x2, &(0x7f0000001300)=[{0x0, 0x2c}, {0x6}]}, 0x10) 12:17:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc8, 0x1, 0x0, @fixed, @fixed}}}}, 0x22) 12:17:28 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000100)) 12:17:28 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:17:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:28 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'geneve0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0x7fffffff}]}}) [ 241.569779][ T8113] debugfs: Directory '200' with parent 'hci1' already present! [ 241.578216][ T8113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 241.588051][ T8113] CPU: 0 PID: 8113 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-syzkaller #0 [ 241.596453][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.606509][ T8113] Workqueue: hci1 hci_rx_work [ 241.611279][ T8113] Call Trace: [ 241.614572][ T8113] dump_stack+0x18f/0x20d 12:17:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x89f0, &(0x7f0000000180)=@get={0x1, 0x0}) 12:17:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) [ 241.618904][ T8113] sysfs_warn_dup.cold+0x1c/0x2d [ 241.623839][ T8113] sysfs_create_dir_ns+0x233/0x290 [ 241.628952][ T8113] ? sysfs_create_mount_point+0xb0/0xb0 [ 241.634494][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 241.639429][ T8113] ? do_raw_spin_unlock+0x171/0x230 [ 241.644642][ T8113] kobject_add_internal+0x2c3/0x940 [ 241.649838][ T8113] ? __free_zapped_classes+0x271/0x300 [ 241.655304][ T8113] kobject_add+0x150/0x1c0 [ 241.659742][ T8113] ? kset_create_and_add+0x190/0x190 [ 241.665025][ T8113] ? lock_is_held_type+0xb0/0xe0 [ 241.669984][ T8113] ? lockdep_init_map_waits+0x26a/0x890 [ 241.675527][ T8113] ? __raw_spin_lock_init+0x34/0x100 [ 241.680802][ T8113] ? device_add+0x33b/0x1be0 [ 241.685390][ T8113] device_add+0x35a/0x1be0 [ 241.689806][ T8113] ? debugfs_create_dir+0x2cf/0x390 [ 241.694996][ T8113] ? device_check_offline+0x280/0x280 [ 241.700363][ T8113] ? hci_debugfs_create_conn+0x179/0x1f0 [ 241.706005][ T8113] ? __init_waitqueue_head+0x97/0x110 [ 241.711369][ T8113] ? hci_debugfs_create_le+0x850/0x850 12:17:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8903, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) [ 241.716830][ T8113] hci_conn_add_sysfs+0x84/0xe0 [ 241.721685][ T8113] le_conn_complete_evt+0xc09/0x1740 [ 241.726979][ T8113] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 241.733571][ T8113] ? debug_check_no_obj_freed+0x20c/0x41c [ 241.739299][ T8113] hci_le_meta_evt+0x745/0x3eb0 [ 241.744153][ T8113] ? mark_lock+0xbc/0x1710 [ 241.748590][ T8113] ? mark_lock+0xbc/0x1710 [ 241.753005][ T8113] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 241.759847][ T8113] ? mark_lock+0xbc/0x1710 [ 241.764258][ T8113] ? __lock_acquire+0x16e3/0x56e0 12:17:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_num_supported_adv_sets={{}, {0x4}}}}, 0x8) [ 241.769281][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 241.774309][ T8113] hci_event_packet+0x245a/0x86f5 [ 241.779342][ T8113] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 241.785315][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 241.790342][ T8113] ? hci_cmd_complete_evt+0xc6e0/0xc6e0 [ 241.795884][ T8113] ? lock_acquire+0x1f1/0xad0 [ 241.800557][ T8113] ? skb_dequeue+0x1c/0x180 [ 241.805056][ T8113] ? find_held_lock+0x2d/0x110 [ 241.809833][ T8113] ? mark_lock+0xbc/0x1710 [ 241.814262][ T8113] ? mark_held_locks+0x9f/0xe0 12:17:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x2, &(0x7f0000001300)=[{}, {0x6}]}, 0x10) [ 241.819040][ T8113] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 241.824842][ T8113] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 241.830835][ T8113] ? trace_hardirqs_on+0x5f/0x220 [ 241.835856][ T8113] ? lockdep_hardirqs_on+0x6a/0xe0 [ 241.840970][ T8113] hci_rx_work+0x22e/0xb10 [ 241.845395][ T8113] process_one_work+0x94c/0x1670 [ 241.850338][ T8113] ? lock_release+0x8d0/0x8d0 [ 241.855013][ T8113] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 241.860382][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 241.865317][ T8113] ? lockdep_hardirqs_off+0x66/0xa0 12:17:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c}}) [ 241.870516][ T8113] worker_thread+0x64c/0x1120 [ 241.875204][ T8113] ? process_one_work+0x1670/0x1670 [ 241.880401][ T8113] kthread+0x3b5/0x4a0 [ 241.884462][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 241.889563][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 241.894672][ T8113] ret_from_fork+0x1f/0x30 [ 241.904052][ T8113] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. 12:17:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x1, @any, 0xb}, 0xe) [ 241.917410][ T8113] Bluetooth: hci1: failed to register connection device [ 241.924577][ T8113] debugfs: Directory '200' with parent 'hci1' already present! [ 241.932576][ T8113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 241.942346][ T8113] CPU: 0 PID: 8113 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-syzkaller #0 [ 241.950747][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.960805][ T8113] Workqueue: hci1 hci_rx_work [ 241.965469][ T8113] Call Trace: [ 241.968755][ T8113] dump_stack+0x18f/0x20d [ 241.973085][ T8113] sysfs_warn_dup.cold+0x1c/0x2d [ 241.978017][ T8113] sysfs_create_dir_ns+0x233/0x290 [ 241.983121][ T8113] ? sysfs_create_mount_point+0xb0/0xb0 [ 241.988659][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 241.993590][ T8113] ? do_raw_spin_unlock+0x171/0x230 [ 241.998780][ T8113] kobject_add_internal+0x2c3/0x940 [ 242.003971][ T8113] ? __free_zapped_classes+0x271/0x300 [ 242.009428][ T8113] kobject_add+0x150/0x1c0 [ 242.013837][ T8113] ? kset_create_and_add+0x190/0x190 12:17:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x7}}) 12:17:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_wolinfo={0x6, 0x0, 0x0, "4846bcb954e9"}}) [ 242.019125][ T8113] ? lock_is_held_type+0xb0/0xe0 [ 242.024067][ T8113] ? lockdep_init_map_waits+0x26a/0x890 [ 242.029603][ T8113] ? __raw_spin_lock_init+0x34/0x100 [ 242.034874][ T8113] ? device_add+0x33b/0x1be0 [ 242.039458][ T8113] device_add+0x35a/0x1be0 [ 242.043872][ T8113] ? debugfs_create_dir+0x2cf/0x390 [ 242.049069][ T8113] ? device_check_offline+0x280/0x280 [ 242.054444][ T8113] ? hci_debugfs_create_conn+0x179/0x1f0 [ 242.060072][ T8113] ? __init_waitqueue_head+0x97/0x110 [ 242.065465][ T8113] ? hci_debugfs_create_le+0x850/0x850 12:17:29 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000140)) [ 242.070924][ T8113] hci_conn_add_sysfs+0x84/0xe0 [ 242.075768][ T8113] le_conn_complete_evt+0xc09/0x1740 [ 242.081057][ T8113] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 242.087636][ T8113] ? debug_check_no_obj_freed+0x20c/0x41c [ 242.093354][ T8113] hci_le_meta_evt+0x745/0x3eb0 [ 242.098205][ T8113] ? mark_lock+0xbc/0x1710 [ 242.102632][ T8113] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 242.109559][ T8113] ? mark_lock+0xbc/0x1710 [ 242.113971][ T8113] ? lock_is_held_type+0xb0/0xe0 12:17:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:29 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_white_list_size={{0x8d}, {0x7}}}}, 0x8) syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x5, 0xc8, 0x9}}}, 0x7) [ 242.118910][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 242.123939][ T8113] hci_event_packet+0x245a/0x86f5 [ 242.128960][ T8113] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 242.134931][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 242.139955][ T8113] ? hci_cmd_complete_evt+0xc6e0/0xc6e0 [ 242.145495][ T8113] ? lock_acquire+0x1f1/0xad0 [ 242.150168][ T8113] ? skb_dequeue+0x1c/0x180 [ 242.154668][ T8113] ? find_held_lock+0x2d/0x110 [ 242.159436][ T8113] ? mark_lock+0xbc/0x1710 [ 242.163855][ T8113] ? mark_held_locks+0x9f/0xe0 12:17:29 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x2}, {@any, "f901008d4ea7a8c140286d5cd99400", 0x5}}}, 0x1a) [ 242.168619][ T8113] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 242.174428][ T8113] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 242.180399][ T8113] ? trace_hardirqs_on+0x5f/0x220 [ 242.185419][ T8113] ? lockdep_hardirqs_on+0x6a/0xe0 [ 242.190530][ T8113] hci_rx_work+0x22e/0xb10 [ 242.194949][ T8113] process_one_work+0x94c/0x1670 [ 242.199905][ T8113] ? lock_release+0x8d0/0x8d0 [ 242.204600][ T8113] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 242.209983][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 242.214914][ T8113] ? lockdep_hardirqs_off+0x66/0xa0 [ 242.220109][ T8113] worker_thread+0x64c/0x1120 [ 242.224791][ T8113] ? process_one_work+0x1670/0x1670 [ 242.229988][ T8113] kthread+0x3b5/0x4a0 [ 242.234056][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 242.239162][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 242.244271][ T8113] ret_from_fork+0x1f/0x30 [ 242.253872][ T8113] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. 12:17:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x48}, {0x6}]}, 0x10) 12:17:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8901, &(0x7f0000000180)=@get={0x1, 0x0}) 12:17:29 executing program 4: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc8, "354152b3effa50da"}}}, 0xe) [ 242.267322][ T8113] Bluetooth: hci1: failed to register connection device 12:17:29 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:17:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) 12:17:29 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) 12:17:29 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0440001b04"], 0x7) 12:17:29 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6gre0\x00'}) 12:17:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8994, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "0ecc4c6f229eae32f0945ce4cc77671dc9177ef8c80ee17da7fa38f873ac088a", "a40d579a39e273c973c4bd1903cb035ad753c16f4ce1e070a5532b6f80f75d09", "2ddd5804d0135cd2e192ed5c414f39c5e1d6c0ea50fe25ddfc632f5e8cf986f4", "d1e5a69c817103f805d382e820d21c8ff87b9d93226c24f00c23f53dd45a747a", "ec43df477f3d82e82e171890415d31a4160590109c6ce0086386ab449cff91a7", "1e18c62fc4eb68a62d1f48a9"}}) 12:17:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:17:30 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x6, 0x8}}]}}, 0x15) 12:17:30 executing program 3: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) 12:17:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) 12:17:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) 12:17:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x89a1, &(0x7f00000000c0)=@get={0x1, 0x0}) 12:17:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'vlan0\x00', {0x3}}) 12:17:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x0, 0x0}, 0x10) 12:17:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x48, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) 12:17:30 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "6454334417cff0387e6f3e25559eb987e470add8cdb2519084ccf61575078cf2", "187d06be857fa353adaec20e8335b99638435b1c9dacf35cf44dfb4ea23beb47", "2e81f132f7c212cf8038e5932562355c521bda3d99ffc1cf8cd867f172efc130", "bd0e3885aa6e9cf6686135a4860c8901ad213e87a84e829bdc2b4782f1207b88", "00cb083d68db9a8846573134673246ad5cd6e0ec342b0d29d6756cb24c1882d6", "83d42164c60106d321b5819c"}}) 12:17:30 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x19) 12:17:30 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 12:17:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, 0x0, 0x0) 12:17:30 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 12:17:30 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e06120000c8ff"], 0x9) 12:17:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netpci0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10}}) 12:17:30 executing program 4: syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_info_rsp={{0xb, 0x8, 0x4}}]}}, 0x11) 12:17:30 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 12:17:31 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:17:31 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) 12:17:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x800442d2, 0x0) 12:17:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'sit0\x00', @ifru_ivalue=0x2039}) 12:17:31 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) 12:17:31 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 12:17:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, 0x0, 0x0) 12:17:31 executing program 1: syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}}}, 0x7) 12:17:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8981, 0x0) 12:17:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)) 12:17:31 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000040)) 12:17:31 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0xa, "0ecc4c6f229eae32f0945ce4cc77671dc9177ef8c80ee17da7fa38f873ac088a", "a40d579a39e273c973c4bd1903cb035ad753c16f4ce1e070a5532b6f80f75d09", "2ddd5804d0135cd2e192ed5c414f39c5e1d6c0ea50fe25ddfc632f5e8cf986f4", "d1e5a69c817103f805d382e820d21c8ff87b9d93226c24f00c23f53dd45a747a", "ec43df477f3d82e82e171890415d31a4160590109c6ce0086386ab449cff91a7", "1e18c62fc4eb68a62d1f48a9"}}) 12:17:31 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:17:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_dump={0x2}}) 12:17:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{}]}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) 12:17:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)=ANY=[@ANYRESHEX]}) 12:17:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 12:17:32 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy={{}, {0x9}}}}, 0x9) 12:17:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, 0x0, 0x0) 12:17:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000040)={'bond0\x00', @ifru_names='nr0\x00'}) 12:17:32 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0xc}}) 12:17:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8940, &(0x7f0000000040)={'sit0\x00', @ifru_flags}) 12:17:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000040)=@ethtool_dump={0x2}}) 12:17:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 12:17:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000006c08573ba4"]}) 12:17:32 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x4020940d, &(0x7f0000000040)=@add_del={0x2, 0x0}) 12:17:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000080)) 12:17:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12:17:32 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0408"], 0x7) 12:17:32 executing program 2: syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043d"], 0x2) 12:17:33 executing program 2: syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}}}, 0xb) 12:17:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x400442c8, 0x0) 12:17:33 executing program 4: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000000)) 12:17:33 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1f0a00c8"], 0x22) 12:17:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f00000000c0)) 12:17:33 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x32, &(0x7f0000000000)=0x3fd, 0x4) [ 246.726966][ T8113] debugfs: Directory '200' with parent 'hci1' already present! [ 246.734677][ T8113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 246.745831][ T8113] CPU: 1 PID: 8113 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-syzkaller #0 [ 246.754290][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.764459][ T8113] Workqueue: hci1 hci_rx_work [ 246.769122][ T8113] Call Trace: [ 246.772406][ T8113] dump_stack+0x18f/0x20d [ 246.776732][ T8113] sysfs_warn_dup.cold+0x1c/0x2d [ 246.781670][ T8113] sysfs_create_dir_ns+0x233/0x290 [ 246.786780][ T8113] ? sysfs_create_mount_point+0xb0/0xb0 [ 246.792317][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 246.797252][ T8113] ? do_raw_spin_unlock+0x171/0x230 [ 246.802454][ T8113] kobject_add_internal+0x2c3/0x940 [ 246.807651][ T8113] ? __free_zapped_classes+0x271/0x300 [ 246.813116][ T8113] kobject_add+0x150/0x1c0 [ 246.817537][ T8113] ? kset_create_and_add+0x190/0x190 12:17:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) 12:17:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000040)={'bond_slave_0\x00', @ifru_mtu=0x2}) [ 246.822818][ T8113] ? lock_is_held_type+0xb0/0xe0 [ 246.827758][ T8113] ? lockdep_init_map_waits+0x26a/0x890 [ 246.833299][ T8113] ? __raw_spin_lock_init+0x34/0x100 [ 246.838594][ T8113] ? device_add+0x33b/0x1be0 [ 246.843185][ T8113] device_add+0x35a/0x1be0 [ 246.847620][ T8113] ? debugfs_create_dir+0x2cf/0x390 [ 246.852810][ T8113] ? device_check_offline+0x280/0x280 [ 246.858180][ T8113] ? hci_debugfs_create_conn+0x179/0x1f0 [ 246.863807][ T8113] ? hci_debugfs_create_le+0x850/0x850 [ 246.869260][ T8113] hci_conn_add_sysfs+0x84/0xe0 12:17:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='xfrm0\x00') ioctl$sock_SIOCGIFBR(r0, 0x89f0, &(0x7f0000000180)=@get={0x1, 0x0}) [ 246.874109][ T8113] le_conn_complete_evt+0xc09/0x1740 [ 246.879414][ T8113] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 246.886001][ T8113] ? debug_check_no_obj_freed+0x20c/0x41c [ 246.891721][ T8113] hci_le_meta_evt+0x745/0x3eb0 [ 246.896566][ T8113] ? mark_lock+0xbc/0x1710 [ 246.900978][ T8113] ? mark_lock+0xbc/0x1710 [ 246.905392][ T8113] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 246.912232][ T8113] ? mark_lock+0xbc/0x1710 [ 246.916641][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 246.921663][ T8113] ? __lock_acquire+0x16e3/0x56e0 12:17:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="987b4628b4dd9861eb5f703e53ff3319e49fd74c6fb18d1f178e57503185ba6fe8c5fa0b3d23ba8649420c08b521c8179bf6a0ab1fcdb829525bfef917ddef7c0885b918074b0a70d25ac115b81e9bbe507d5e3c3a9d517ba83586ed2e024a3649389dfe349f476c97588844bd51ab307135841706c886f7a1e83065675f34b074d119b9db317e8e6d86b1a25e4321704252f1bf7bfc48442aaded9ba8d95148b050da65f9a692f1e4855b8a2e211b5db4ec8c6c4f3babf4b2b81f1d50edb9cf27c2ede16bf95f4ec4c19b9801b3d2c9bab8ff47c77401300b97613a537d6d86952b9c475118") [ 246.926694][ T8113] hci_event_packet+0x245a/0x86f5 [ 246.931717][ T8113] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 246.937804][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 246.942832][ T8113] ? hci_cmd_complete_evt+0xc6e0/0xc6e0 [ 246.948391][ T8113] ? lock_acquire+0x1f1/0xad0 [ 246.953086][ T8113] ? skb_dequeue+0x1c/0x180 [ 246.957596][ T8113] ? find_held_lock+0x2d/0x110 [ 246.962351][ T8113] ? mark_lock+0xbc/0x1710 [ 246.966779][ T8113] ? mark_held_locks+0x9f/0xe0 [ 246.971549][ T8113] ? _raw_spin_unlock_irqrestore+0x62/0xe0 12:17:33 executing program 4: syz_emit_vhci(&(0x7f0000000a40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x96}, @l2cap_cid_signaling={{0x92}, [@l2cap_info_req={{0xa, 0x7, 0x2}, {0x4}}, @l2cap_info_rsp={{0xb, 0x2, 0x62}, {0x2, 0x7f, "a762568db586902acb90e90bf570e7129709f764c121a71c8153f61a2addbb2d244a485f0702f02c370a48c6a8b49ba42c1cb5c4b68b03040fd65d53da7c70963868a383482c2c2bcd862030b70efda05f3286efc488e82da0d814e2aeb7"}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x3}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x5}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x3340}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x800}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x0, 0x4}}]}}, 0x9b) syz_emit_vhci(&(0x7f0000000b40)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x7, @none, "5dff077d30d5b9a11720fe0d670ad533487c1948ad4a85d2d7832f0c4d2a65ca2191db16ae1f310f93289e6d6f5f1e436ef4dd2b971aa9d77f64599479658fb352017c7b2f112fc97663e28a22de45a17a351726ae260d45ae45ca95ed8dfa56a1d7bd768e72e87611b168656da11555112d73e8d0abdb98ff0c2703eb1d4b5df9d17e4f7995067023aab2cb548be1928e9d80d6845cd08feec6cfd4bf81dbe488dc29121e0a4d07b9218d892e4eea8be2369a5d0a3d32f83a116d30d44e4a7027e63413b6fb5bac57e7a349c6754579bc3639be3368610cc00384bbb756550d608e95c095cf931b63171546d4c5a81eec53283e02ab30a4"}}}, 0x102) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x8, 0x4) [ 246.977357][ T8113] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 246.983347][ T8113] ? trace_hardirqs_on+0x5f/0x220 [ 246.988368][ T8113] ? lockdep_hardirqs_on+0x6a/0xe0 [ 246.993490][ T8113] hci_rx_work+0x22e/0xb10 [ 246.997907][ T8113] process_one_work+0x94c/0x1670 [ 247.002846][ T8113] ? lock_release+0x8d0/0x8d0 [ 247.007522][ T8113] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 247.012891][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 247.017861][ T8113] ? lockdep_hardirqs_off+0x66/0xa0 [ 247.023085][ T8113] worker_thread+0x64c/0x1120 12:17:34 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 12:17:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_pauseparam}) 12:17:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect(r0, &(0x7f00000001c0)=@hci, 0x80) 12:17:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)) 12:17:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@generic={0x1, 0x600000, 0x3}) [ 247.027785][ T8113] ? process_one_work+0x1670/0x1670 [ 247.033077][ T8113] kthread+0x3b5/0x4a0 [ 247.037137][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 247.042242][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 247.047350][ T8113] ret_from_fork+0x1f/0x30 12:17:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x89a0, &(0x7f0000000000)="987b4628b4dd9861eb5f703e53ff3319e49fd74c6fb18d1f178e57503185ba6fe8c5fa0b3d23ba8649420c08b521c8179bf6a0ab1fcdb829525bfef917ddef7c0885b918074b0a70d25ac115b81e9bbe507d5e3c3a9d517ba83586ed2e024a3649389dfe349f476c97588844bd51ab307135841706c886f7a1e83065675f34b074d119b9db317e8e6d86b1a25e4321704252f1bf7bfc48442aaded9ba8d95148b050da65f9a692f1e4855b8a2e211b5db4ec8c6c4f3babf4b2b81f1d50edb9cf27c2ede16bf95f4ec4c19b9801b3d2c9bab8ff47c77401300b97613a537d6d86952b9c475118") [ 247.097425][ T8113] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 247.111227][ T8113] Bluetooth: hci1: failed to register connection device [ 247.118640][ T8113] debugfs: Directory '200' with parent 'hci1' already present! [ 247.126311][ T8113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 247.136037][ T8113] CPU: 1 PID: 8113 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-syzkaller #0 [ 247.144441][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.154697][ T8113] Workqueue: hci1 hci_rx_work [ 247.159362][ T8113] Call Trace: [ 247.162645][ T8113] dump_stack+0x18f/0x20d [ 247.166981][ T8113] sysfs_warn_dup.cold+0x1c/0x2d [ 247.171912][ T8113] sysfs_create_dir_ns+0x233/0x290 [ 247.177001][ T8113] ? sysfs_create_mount_point+0xb0/0xb0 [ 247.182547][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 247.187467][ T8113] ? do_raw_spin_unlock+0x171/0x230 [ 247.192659][ T8113] kobject_add_internal+0x2c3/0x940 [ 247.197833][ T8113] ? __free_zapped_classes+0x271/0x300 [ 247.203272][ T8113] kobject_add+0x150/0x1c0 [ 247.207666][ T8113] ? kset_create_and_add+0x190/0x190 [ 247.212927][ T8113] ? lock_is_held_type+0xb0/0xe0 [ 247.217856][ T8113] ? lockdep_init_map_waits+0x26a/0x890 [ 247.223373][ T8113] ? __raw_spin_lock_init+0x34/0x100 [ 247.228628][ T8113] ? device_add+0x33b/0x1be0 [ 247.233192][ T8113] device_add+0x35a/0x1be0 [ 247.237586][ T8113] ? debugfs_create_dir+0x2cf/0x390 [ 247.242771][ T8113] ? device_check_offline+0x280/0x280 [ 247.248127][ T8113] ? hci_debugfs_create_conn+0x179/0x1f0 [ 247.253739][ T8113] ? hci_debugfs_create_le+0x850/0x850 [ 247.259185][ T8113] hci_conn_add_sysfs+0x84/0xe0 [ 247.264026][ T8113] le_conn_complete_evt+0xc09/0x1740 [ 247.269301][ T8113] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 247.275877][ T8113] ? debug_check_no_obj_freed+0x20c/0x41c [ 247.281581][ T8113] hci_le_meta_evt+0x745/0x3eb0 [ 247.286411][ T8113] ? mark_lock+0xbc/0x1710 [ 247.290812][ T8113] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 247.297641][ T8113] ? mark_lock+0xbc/0x1710 [ 247.302038][ T8113] ? lock_is_held_type+0xb0/0xe0 [ 247.306956][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 247.311963][ T8113] hci_event_packet+0x245a/0x86f5 [ 247.316970][ T8113] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 247.322925][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 247.327931][ T8113] ? hci_cmd_complete_evt+0xc6e0/0xc6e0 [ 247.333456][ T8113] ? lock_acquire+0x1f1/0xad0 [ 247.338109][ T8113] ? skb_dequeue+0x1c/0x180 [ 247.342706][ T8113] ? find_held_lock+0x2d/0x110 [ 247.347447][ T8113] ? mark_lock+0xbc/0x1710 [ 247.351844][ T8113] ? mark_held_locks+0x9f/0xe0 [ 247.356587][ T8113] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 247.362367][ T8113] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 247.368342][ T8113] ? trace_hardirqs_on+0x5f/0x220 [ 247.373340][ T8113] ? lockdep_hardirqs_on+0x6a/0xe0 [ 247.378426][ T8113] hci_rx_work+0x22e/0xb10 [ 247.382824][ T8113] process_one_work+0x94c/0x1670 [ 247.387746][ T8113] ? lock_release+0x8d0/0x8d0 [ 247.392401][ T8113] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 247.397752][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 247.402666][ T8113] ? lockdep_hardirqs_off+0x66/0xa0 [ 247.407846][ T8113] worker_thread+0x64c/0x1120 [ 247.412508][ T8113] ? process_one_work+0x1670/0x1670 [ 247.417680][ T8113] kthread+0x3b5/0x4a0 [ 247.421722][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 247.426820][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 247.431913][ T8113] ret_from_fork+0x1f/0x30 12:17:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) 12:17:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='xfrm0\x00') [ 247.439326][ T8113] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 247.453273][ T8113] Bluetooth: hci1: failed to register connection device 12:17:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x9) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 12:17:34 executing program 4: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e68020300000000010000001c9851dc03683e4773a596b53caef2a84ecd9ff101711b7c3ac4d027f5060200ffffffffffff17a57a3cc193e371e128db010401ffffffffffff15938888e73c9f5ff0e7f9d0ea4f"], 0x6b) 12:17:34 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYRES16=r1]}) 12:17:34 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0xa64cac4b5a8c1493}) [ 247.624037][ T8113] Bluetooth: hci4: advertising data len corrected 28 -> 0 [ 247.624047][ T8113] Bluetooth: hci4: advertising data len corrected 23 -> 0 [ 247.631555][ T8113] Bluetooth: hci4: Dropping invalid advertising data [ 247.645818][ T8113] Bluetooth: hci4: advertising data len corrected 28 -> 0 [ 247.645829][ T8113] Bluetooth: hci4: advertising data len corrected 23 -> 0 [ 247.653036][ T8113] Bluetooth: hci4: Dropping invalid advertising data 12:17:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 12:17:34 executing program 3: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "b18e32e380ba39c42805ffd0b06da32e32dbe706a37f488c23ed583fdcb906d4145709fecd55c40518d0c1b83aaf0f017d6a726a0a53363f044e34459ea05907f07ec66e98eb7e8f9044020d12558fc92dd39c774e1b6c8aae742e25b8358d8468e43b87ef57eeac88419bd782967a6aac888284c4a242f67f34eb599ae0c810bd726fb9c36d8d7307c8926d43584353d87a03c6e6e9f288acc40e99bb01c6ab26964b2ad67a4d51d38d3856aaf05ed6c18da854b21ebca6133aee95ef58e54c6b2907b344dcb391993ff4a69a7a56f5dc1db28f644863c5585907d86077474cb908231a64e9f84484adaf068b293c368e550ce1ed760056"}}}, 0x102) 12:17:34 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', r2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e21, @remote}}) 12:17:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 12:17:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 12:17:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x4}}) 12:17:34 executing program 2: syz_emit_vhci(&(0x7f0000002c80)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}}}, 0x6) 12:17:34 executing program 0: syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 12:17:34 executing program 1: syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x5}}}, 0x7) 12:17:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, &(0x7f0000001300)}, 0x10) 12:17:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x3, 0x0, 0x0, 0xfffffffc}]}, 0x10) 12:17:34 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 12:17:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip6gretap0\x00'}) 12:17:34 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a1, &(0x7f0000000000)='xfrm0\x00') ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x5, "340a9a", 0x20, 0x6}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) ioctl$sock_SIOCDELRT(r2, 0x400448c9, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x400000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000100)=0xe91, 0x2) r4 = accept4(r2, &(0x7f00000001c0)=@ipx, &(0x7f0000000240)=0x80, 0x800) connect$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x1, @fixed={[], 0x12}, 0xcfb, 0x2}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="000000000100fd809211b27cd6fb5211d2c85b5f2a29008f91fc67ff01000053c4acacfd5d5c46d9a62b4c67f871b19448bccce2ecb10cfad16afdfa3f241c2641242432ce4eeab96dd6485b81619644ed8c6ea3a0b737d819a211e58aabda4817a56826ec29de603db2a710d6140a9ab9cc1f9152f79e2274428b300403989a309d61f40bcd6984e6004c2e99014e59c14dbc73ad5fad9dea8e9b5a26bd57081e9221db72b2c3e81117db7a808a0a7b093121fc13d42f59d705949d1e3ba6a742cf92e97d18afc52e9e69d0ce060b932dfc"]) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 12:17:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="03000000174e5ce3810b4a81c446780ca55821b4091ec45314fa4becf220306dc0d508a7e5451c4b7b3d018f87c24cbbfd01cc372f286f75358a577a567e2a1848df2ac5f0d1fc84060000000000000033bd2806366eef64db92dd29e8785fdc70f2db8fa27f05590f7dada6be4017226f48d6929c731403949cf9224759ffc4285c9ee3e139cbea76ad8f58f517200fde053c4e1b13e7b17e3f84a5a8768d13ae6d217deaef5c0a0c921ae27d01fd04ff00000003000000060000000200000005000000"]}) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000080)="2c5fc1ccfe9cd25bbdeccbf8e03f5193279637e0ccfbbb9809a89b46d5667a998a57595db68966bdc9aa593928e509e07133489b08c8c656f8149bb331fe313139276cd8df88ac4263d188191253bca875ea99731d18cb4401fdbdea136377efdb9c3bcbea23f2271203638489c7065f3224d02482a22f08820684325a4378f541fa765c46fdf50971f3fb4126399ec4f5783d11b18c3225c47575082d81bddd51aea52048f936ac16b8d909184c02c89397c263161b4249b66ee210e77399eb14a8092b1367151873fd3b81298450421da48faccb2ce54eee3abf5bcf4a81f4ed53ad3d36ccefe2dd001499779c319bc7655b7c") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'bond0\x00', {0x4}, 0x5}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x5, &(0x7f0000000000)={0x0, 0x0}, 0x10) 12:17:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_mtu}) 12:17:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000300)=0x1, 0x4) 12:17:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000033000000d081a71b670c9636886c57a4b83903d15edd8b071a450c0cd2bc1561f07fcf49ff"]}) 12:17:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000100)=""/113, 0x3}) 12:17:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x800442d4, 0x0) 12:17:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:17:35 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:17:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_ts_info}) 12:17:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) 12:17:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0xf}}) 12:17:35 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e1500460c0000"], 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 12:17:35 executing program 5: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam}) 12:17:35 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x52}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0xc8, 0x7}}}, 0x7) 12:17:35 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x2, &(0x7f0000001300)=[{0x4d}, {0x6}]}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7}, 0xe) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_virt_wifi\x00'}) 12:17:35 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x25, "0ecc4c6f229eae32f0945ce4cc77671dc9177ef8c80ee17da7fa38f873ac088a", "a40d579a39e273c973c4bd1903cb035ad753c16f4ce1e070a5532b6f80f75d09", "2ddd5804d0135cd2e192ed5c414f39c5e1d6c0ea50fe25ddfc632f5e8cf986f4", "d1e5a69c817103f805d382e820d21c8ff87b9d93226c24f00c23f53dd45a747a", "ec43df477f3d82e82e171890415d31a4160590109c6ce0086386ab449cff91a7", "1e18c62fc4eb68a62d1f48a9"}}) 12:17:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 12:17:35 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c0221"], 0xf) 12:17:35 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89a0, &(0x7f0000000000)) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x89a1, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:17:35 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, [@l2cap_ecred_reconf_req={{0x19, 0x1, 0x6}, {0x5, 0x80, [0x1]}}]}}, 0x13) 12:17:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/91, 0x9}) 12:17:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000180)) 12:17:35 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x7, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) 12:17:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0xc0045878, 0x0) 12:17:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000080)) 12:17:35 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0b070714"], 0x7) 12:17:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a1, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_ts_info}) 12:17:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @ifru_mtu=0x401}) 12:17:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5421, &(0x7f0000000180)) 12:17:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:17:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000100)={0x7, 'vlan0\x00'}) 12:17:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f00000000c0), 0xe) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) 12:17:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$binfmt_elf32(r0, 0x0, 0x2fb) 12:17:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)) 12:17:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:17:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', @ifru_data=0x0}) 12:17:35 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 12:17:35 executing program 5: syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x37, 0x406}}}, 0x7) 12:17:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'vlan0\x00', {0x2}}) 12:17:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000080)={'bond0\x00', @ifru_addrs=@ax25={0x3, @default}}) 12:17:35 executing program 4: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e08000c0800c8"], 0xb) 12:17:35 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x5, "340a9a", 0x20, 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) 12:17:35 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x0, 0x0, 0x0, "a73cd2"}]}}}, 0x13) 12:17:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0xc0189436, 0x0) 12:17:35 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{}, {0xff, @none}}}, 0x18) 12:17:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000100)) 12:17:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0), 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 12:17:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) 12:17:36 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c800b200ae0001000a07020004000b02620002007f00a762568db586902acb90e90bf570e7129709f764c121a71c81fdffffffddbb2d244a485f0702f02c370a48c6a8b49ba42c1cb5c4b68b03040fd65d53da7c70963868a383482c2c2bcd862030b70efda05f3286efc488e82da0d814e2aeb70205040003"], 0xb7) 12:17:36 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{}, {0xff, @none}}}, 0x18) 12:17:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x8}, 0xb) 12:17:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x20, 0x0, 0x0, 0x16000000}, {0x6}]}, 0x10) 12:17:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 12:17:36 executing program 5: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0407"], 0x2) 12:17:36 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0403"], 0x2) 12:17:36 executing program 3: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042f"], 0x2) 12:17:36 executing program 2: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x2016}}}, 0x7) 12:17:36 executing program 1: syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}}}, 0x8) 12:17:36 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy}}, 0x9) 12:17:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a1, &(0x7f0000000000)='xfrm0\x00') setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) 12:17:36 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) 12:17:36 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04cc"], 0x2) [ 249.413858][ T8113] ================================================================== [ 249.422207][ T8113] BUG: KASAN: slab-out-of-bounds in hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 249.431854][ T8113] Read of size 6 at addr ffff888097cd0206 by task kworker/u5:1/8113 [ 249.439845][ T8113] [ 249.442183][ T8113] CPU: 1 PID: 8113 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-syzkaller #0 [ 249.450579][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.460636][ T8113] Workqueue: hci3 hci_rx_work [ 249.465302][ T8113] Call Trace: [ 249.468592][ T8113] dump_stack+0x18f/0x20d [ 249.472920][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 249.479859][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 249.486788][ T8113] print_address_description.constprop.0.cold+0xae/0x436 [ 249.493806][ T8113] ? lockdep_hardirqs_off+0x66/0xa0 [ 249.499000][ T8113] ? vprintk_func+0x97/0x1a6 [ 249.503588][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 12:17:36 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04130902"], 0xc) [ 249.510537][ T8113] kasan_report.cold+0x1f/0x37 [ 249.515301][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 249.522233][ T8113] check_memory_region+0x13d/0x180 [ 249.527337][ T8113] memcpy+0x20/0x60 [ 249.531156][ T8113] hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 249.537915][ T8113] ? clear_pending_adv_report+0xf0/0xf0 [ 249.543463][ T8113] hci_event_packet+0x2828/0x86f5 [ 249.548489][ T8113] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 249.554464][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 249.559490][ T8113] ? hci_cmd_complete_evt+0xc6e0/0xc6e0 [ 249.565027][ T8113] ? lock_acquire+0x1f1/0xad0 [ 249.569694][ T8113] ? skb_dequeue+0x1c/0x180 [ 249.574191][ T8113] ? find_held_lock+0x2d/0x110 [ 249.578934][ T8113] ? mark_lock+0xbc/0x1710 [ 249.583331][ T8113] ? mark_held_locks+0x9f/0xe0 [ 249.588072][ T8113] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 249.593856][ T8113] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 249.599815][ T8113] ? trace_hardirqs_on+0x5f/0x220 [ 249.604841][ T8113] ? lockdep_hardirqs_on+0x6a/0xe0 [ 249.609933][ T8113] hci_rx_work+0x22e/0xb10 [ 249.614346][ T8113] process_one_work+0x94c/0x1670 [ 249.619267][ T8113] ? lock_release+0x8d0/0x8d0 [ 249.623919][ T8113] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 249.629265][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 249.634179][ T8113] ? lockdep_hardirqs_off+0x66/0xa0 [ 249.639354][ T8113] worker_thread+0x64c/0x1120 [ 249.644014][ T8113] ? process_one_work+0x1670/0x1670 [ 249.649195][ T8113] kthread+0x3b5/0x4a0 [ 249.653235][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 249.658318][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 249.663418][ T8113] ret_from_fork+0x1f/0x30 [ 249.667813][ T8113] [ 249.670131][ T8113] Allocated by task 10353: [ 249.674523][ T8113] save_stack+0x1b/0x40 [ 249.678652][ T8113] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 249.684258][ T8113] __alloc_skb+0xae/0x550 [ 249.688621][ T8113] vhci_write+0xbd/0x450 [ 249.692837][ T8113] new_sync_write+0x422/0x650 [ 249.697484][ T8113] vfs_write+0x59d/0x6b0 [ 249.701699][ T8113] ksys_write+0x12d/0x250 [ 249.706003][ T8113] do_syscall_64+0x60/0xe0 [ 249.710397][ T8113] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 249.716260][ T8113] [ 249.718563][ T8113] Freed by task 17: [ 249.722348][ T8113] save_stack+0x1b/0x40 [ 249.726481][ T8113] __kasan_slab_free+0xf5/0x140 [ 249.731310][ T8113] kfree+0x103/0x2c0 [ 249.735177][ T8113] skb_release_data+0x6d9/0x910 [ 249.739998][ T8113] consume_skb+0xc2/0x160 [ 249.744301][ T8113] wg_packet_rx_poll+0xdb5/0x1ea0 [ 249.749344][ T8113] net_rx_action+0x4a1/0xe60 [ 249.753907][ T8113] __do_softirq+0x34c/0xa60 [ 249.758373][ T8113] [ 249.760680][ T8113] The buggy address belongs to the object at ffff888097cd0000 [ 249.760680][ T8113] which belongs to the cache kmalloc-512 of size 512 [ 249.774711][ T8113] The buggy address is located 6 bytes to the right of [ 249.774711][ T8113] 512-byte region [ffff888097cd0000, ffff888097cd0200) [ 249.788297][ T8113] The buggy address belongs to the page: [ 249.793901][ T8113] page:ffffea00025f3400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 249.802986][ T8113] flags: 0xfffe0000000200(slab) [ 249.807904][ T8113] raw: 00fffe0000000200 ffffea0002618708 ffffea000225a648 ffff8880aa000a80 [ 249.816466][ T8113] raw: 0000000000000000 ffff888097cd0000 0000000100000004 0000000000000000 [ 249.825022][ T8113] page dumped because: kasan: bad access detected [ 249.831412][ T8113] [ 249.833712][ T8113] Memory state around the buggy address: [ 249.839313][ T8113] ffff888097cd0100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 249.847345][ T8113] ffff888097cd0180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 249.855379][ T8113] >ffff888097cd0200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 12:17:36 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a1, &(0x7f0000000000)='xfrm0\x00') setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) 12:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000140)) [ 249.863405][ T8113] ^ [ 249.867448][ T8113] ffff888097cd0280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.875482][ T8113] ffff888097cd0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.883511][ T8113] ================================================================== [ 249.891538][ T8113] Disabling lock debugging due to kernel taint [ 249.900482][ T2493] Bluetooth: hci1: command 0x2016 tx timeout [ 249.909263][ T8113] Kernel panic - not syncing: panic_on_warn set ... 12:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) [ 249.915852][ T8113] CPU: 0 PID: 8113 Comm: kworker/u5:1 Tainted: G B 5.8.0-rc7-syzkaller #0 [ 249.925637][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.935697][ T8113] Workqueue: hci3 hci_rx_work [ 249.940567][ T8113] Call Trace: [ 249.943848][ T8113] dump_stack+0x18f/0x20d [ 249.948179][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x130/0x5e0 [ 249.955111][ T8113] panic+0x2e3/0x75c [ 249.958993][ T8113] ? __warn_printk+0xf3/0xf3 12:17:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x40000000020) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="020000000000", 0x6) [ 249.963588][ T8113] ? preempt_schedule_common+0x59/0xc0 [ 249.970255][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 249.977180][ T8113] ? preempt_schedule_thunk+0x16/0x18 [ 249.982536][ T8113] ? trace_hardirqs_on+0x55/0x220 [ 249.987553][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 249.994599][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 250.001526][ T8113] end_report+0x4d/0x53 [ 250.005674][ T8113] kasan_report.cold+0xd/0x37 [ 250.010339][ T8113] ? hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 250.017262][ T8113] check_memory_region+0x13d/0x180 [ 250.022359][ T8113] memcpy+0x20/0x60 [ 250.026159][ T8113] hci_extended_inquiry_result_evt.isra.0+0x1be/0x5e0 [ 250.032915][ T8113] ? clear_pending_adv_report+0xf0/0xf0 [ 250.038457][ T8113] hci_event_packet+0x2828/0x86f5 [ 250.043674][ T8113] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 250.049643][ T8113] ? __lock_acquire+0x16e3/0x56e0 [ 250.054675][ T8113] ? hci_cmd_complete_evt+0xc6e0/0xc6e0 [ 250.060226][ T8113] ? lock_acquire+0x1f1/0xad0 [ 250.064892][ T8113] ? skb_dequeue+0x1c/0x180 [ 250.069385][ T8113] ? find_held_lock+0x2d/0x110 [ 250.074131][ T8113] ? mark_lock+0xbc/0x1710 [ 250.078516][ T8113] ? mark_held_locks+0x9f/0xe0 [ 250.083248][ T8113] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 250.089021][ T8113] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 250.094965][ T8113] ? trace_hardirqs_on+0x5f/0x220 [ 250.099959][ T8113] ? lockdep_hardirqs_on+0x6a/0xe0 [ 250.105038][ T8113] hci_rx_work+0x22e/0xb10 [ 250.109423][ T8113] process_one_work+0x94c/0x1670 [ 250.114331][ T8113] ? lock_release+0x8d0/0x8d0 [ 250.118977][ T8113] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 250.124317][ T8113] ? rwlock_bug.part.0+0x90/0x90 [ 250.129222][ T8113] ? lockdep_hardirqs_off+0x66/0xa0 [ 250.134390][ T8113] worker_thread+0x64c/0x1120 [ 250.139056][ T8113] ? process_one_work+0x1670/0x1670 [ 250.144235][ T8113] kthread+0x3b5/0x4a0 [ 250.148280][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 250.153355][ T8113] ? __kthread_bind_mask+0xc0/0xc0 [ 250.158437][ T8113] ret_from_fork+0x1f/0x30 [ 250.164016][ T8113] Kernel Offset: disabled [ 250.168322][ T8113] Rebooting in 86400 seconds..