[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 104.742464][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 104.742476][ T27] audit: type=1800 audit(1580036755.648:29): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 104.770650][ T27] audit: type=1800 audit(1580036755.648:30): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. 2020/01/26 11:06:05 fuzzer started 2020/01/26 11:06:07 dialing manager at 10.128.0.26:35371 2020/01/26 11:06:08 syscalls: 2913 2020/01/26 11:06:08 code coverage: enabled 2020/01/26 11:06:08 comparison tracing: enabled 2020/01/26 11:06:08 extra coverage: enabled 2020/01/26 11:06:08 setuid sandbox: enabled 2020/01/26 11:06:08 namespace sandbox: enabled 2020/01/26 11:06:08 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/26 11:06:08 fault injection: enabled 2020/01/26 11:06:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/26 11:06:08 net packet injection: enabled 2020/01/26 11:06:08 net device setup: enabled 2020/01/26 11:06:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/26 11:06:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:08:27 executing program 0: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x558000, 0x20, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0910, 0x7fff, [], @p_u32=&(0x7f0000000000)=0x3}}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x54) r1 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xff, 0x40000) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f00000002c0)={0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) r2 = socket(0x21, 0x800, 0x8e) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000300)={'mangle\x00'}, &(0x7f0000000380)=0x54) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x28) clock_gettime(0x0, &(0x7f00000003c0)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000400)={0x8, 0x6, 0x4, 0x4000000, 0x3, {}, {0x3, 0x8, 0x18, 0x81, 0x3a, 0x66, "e8ca8a25"}, 0x7, 0x2, @userptr=0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000480)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x101c00, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x800) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) prctl$PR_SET_PDEATHSIG(0x1, 0x7) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsu\x00', 0x40000, 0x0) ioctl$VIDIOC_S_PRIORITY(r6, 0x40045644, 0x2) ioctl$KVM_ENABLE_CAP(r6, 0x4068aea3, &(0x7f0000000640)={0x74, 0x0, [0xfffffffffffffffc, 0x40fa, 0x0, 0x1]}) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ocfs2_control\x00', 0x40, 0x0) ioctl$TCXONC(r7, 0x540a, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000780)={0x9f0000, 0x0, 0x80000001, 0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x9b0954, 0x400, [], @p_u8=&(0x7f0000000700)=0x5}}) ioctl$SOUND_MIXER_READ_RECMASK(r8, 0x80044dfd, &(0x7f00000007c0)) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vcsu\x00', 0x2, 0x0) accept4$rose(r9, &(0x7f0000000840)=@full={0xb, @dev, @rose, 0x0, [@remote, @null, @rose, @bcast, @netrom, @null]}, &(0x7f0000000880)=0x40, 0x800) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x2880c3, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000900)=0xe1e) init_module(&(0x7f0000000940)='mangle\x00', 0x7, &(0x7f0000000980)='mangle\x00') setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000009c0)=@req3={0x9, 0x1000, 0x7fffffff, 0xfffffffc, 0xffff, 0x0, 0x2}, 0x1c) 11:08:27 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x1, 0x2, 0xf, 0x11e, &(0x7f0000000040)="61efae17a102b7c1cf652225101dd4531d1d7a5910891cabf256caa2de2a549a5f25f0df4c8fab326788cdd241277af1038fd1d9b22cd1f1a161d6abe5d5b72e616a170119f30a95f9b23267d14dcbffbb46c94e5db1000b79b9c364ae35936551ff535187e28e9db785735363589743515a372fbee2fadd58da947d0e1aea1d05d9522b2d85e58f21c969810113b1c4e20cd6a16ad46e4bd8ec3849371e0676a1353445285ee6d4976cfce4047f65d46c1be0d8b3eedcad66bb239f8c9b5221c4ed6389e57d6c44b86ec28b9b77157ab8d4cebe9d9b7b9bfba1b43a40e1c0539f3f51383392b8e2c98e15819a7082926f9578a87969d9fab7840e33213ceadb77d5fb42daa4d1485c69f75a92883d4b2bcd600eac08c10f3bce4f9bf36c45ba3e198abf03b71e8e8001b1e457606b98fa9859d275e3de155c84d664a125fee8b930934baab5235377fc137301c02df4486804c4145dfc294116728e87f58740e2086b46c384c88462a7a30021264b7d5ed93f78087e5bc2de35a824e117ed3398543df196d95652c3025166f5cbf6f7385489fd4312e578405eda4e7e3078c0c2480d5f5e7c53324a93b98cab7f1addda9070a4fc8de05ddd0c80cddb6b5a038addff3db894cb04e81fec28e5035fd09e49717f7c2e5e6e3a4930f818bc450da8a02269f2682b066cc9792d3ee8954bfce10f43695f16b575d0fab4447dae1a64503b7c75bb1cad9e7548fc62db1bd803c51b9632536ee2bb6d55cbd86682e7eb582815d122754d9eebc292b48c3d36c66ad4eff207b2ff0630e40a23ea500d72bc30d1ae528cd4451acb8f2fb3270ef407102d4fe05239b9cbdda00b4ffa8fe3f67fa6c6cb1ecc8e633c83ab5b48a55e5d617bd0df2fbadb2c4a812a75c0aba34fb98c07b3b0c24aab08e94c5c09f0c26a2ef01d68cbf7b399ae373bacf957624f55a3f04da7de2b72c6ab9c4a2f34078b976a115f87cceb0ef867c13ee56bdc2de1f7868b2b97e2505fe32673afac5ec10cbd20b37124df7d9dfa42d02065aaf1749e0562be8038a3ca310cc980281a7f428d3d61b404f3a513b14c445e3780312638a24f34ad2172b4fe34a9511b364529ee6a51698269c214d597b4fde0c6674f00139e9727517df8f042ede03bbcb917c5b14dbe71ef5225037374dfdd7617a30881abea7c8e1cb27f7ba67dbfa2ea64aa3a884d4358534dedcb1a8f9fe3f04aebd22129afa3b0257028499b265d44052cae88db599bdeff2feff01586bfe81d6533ee6eafbc8d11a2e2960ebb43fc212f6fe6c90c47210fa90e4a44c32156b5d8a640bb43f3c70caff769a142bf67146a00ed77e8f59d004da1238a123c73d15aefd9e3e9748f0e198d0dbc44451ca5e975e24d09cc8a7541fb13a748009cb2a2977605342630e393c538c858b933efb8b0eadafede13f24962848943"}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000004c0)={0x25, 0xb, 0x4, 0x40000, 0x1ff, {0x0, 0x7530}, {0x3, 0x8, 0x6a, 0x50, 0x0, 0x6, "dcbe865a"}, 0x0, 0x1, @planes=&(0x7f0000000480)={0xffff, 0xffff, @mem_offset, 0x8}, 0x0, 0x0, r0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000540)={0x0, 0x7, 0x1}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000580), 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x8ec202, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001c00)={0x6, &(0x7f0000000600)=""/233, &(0x7f0000001b40)=[{0x0, 0x1000, 0x8001, &(0x7f0000000700)=""/4096}, {0x7, 0xc1, 0x800, &(0x7f0000001700)=""/193}, {0x7, 0xce, 0x80000001, &(0x7f0000001800)=""/206}, {0xd6, 0xc8, 0x4, &(0x7f0000001900)=""/200}, {0x2b55, 0x90, 0x9, &(0x7f0000001a00)=""/144}, {0x0, 0x65, 0x5, &(0x7f0000001ac0)=""/101}]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/sequencer2\x00', 0x88941, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) r4 = gettid() ptrace$setregset(0x4205, r4, 0x204, &(0x7f0000001d80)={&(0x7f0000001d00)="6ae2e247d04e1acda74a41410de4befc5c9c4682d2018604a04d45f62739ccd12bcfd99faecd75e764c5c7b9fab4fe991bd668556116e8bfebb7e6ec40964b0b240e95c5cc6a61e4289b0a9ef3949b59bb57627c90932013db09f3456adc1f0858", 0x61}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/full\x00', 0x400040, 0x0) openat$cgroup_ro(r5, &(0x7f0000001e00)='cpuset.effective_mems\x00', 0x0, 0x0) fstat(r0, &(0x7f0000001e40)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/vcsu\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000001f00)={0x0, @bt={0x2, 0x8001, 0x1, 0x3, 0x2, 0x6, 0x1, 0x0, 0x80000, 0x5, 0x4, 0x4, 0xd12, 0x3, 0x1, 0xa, {0x7fff, 0x4}, 0xfd, 0xf5}}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/vga_arbiter\x00', 0x40100, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000002000)=0x1f) socket$netlink(0x10, 0x3, 0x9) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002040)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000002080)={0x8, 0xfffffffc, 0x9, 0x272, 0x28, "e97839d02f4dcd4dede977c9244ea003f21bb7", 0x1000, 0x2}) timerfd_gettime(0xffffffffffffffff, &(0x7f00000020c0)) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000002140)={0x8, &(0x7f0000002100)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r9 = syz_open_dev$vcsu(&(0x7f0000002180)='/dev/vcsu#\x00', 0x54, 0x1082c0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r9, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x28, r10, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000880) clock_gettime(0x0, &(0x7f0000002340)={0x0, 0x0}) utimes(&(0x7f0000002300)='./file0\x00', &(0x7f0000002380)={{0x77359400}, {r11, r12/1000+30000}}) syzkaller login: [ 256.523161][T10091] IPVS: ftp: loaded support on port[0] = 21 [ 256.638864][T10093] IPVS: ftp: loaded support on port[0] = 21 11:08:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xe000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x1ff, 0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x380, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000140), 0x4) socketpair(0x5, 0x80000, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x463bf0e49033227a, {0x4e21, 0x3}}, 0x10) r5 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x2, 0x100) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000300)={0x9, &(0x7f0000000240)=[{@none}, {@none}, {@none}, {@none}, {@none}, {}, {@fixed}, {@none}, {@fixed}]}) r6 = msgget(0x3, 0x42) msgsnd(r6, &(0x7f0000000340)={0x0, "ae19af0227189121d6f34f8f2b9e148487ed8239e478efcfea06c8942467030f291d69d5b9ed58d10eab4d96d921389ff75b9e001547fe670267ba2d09213ff9bbca13235d66c6035c0550d240ddfaad68d36269dd642f8cdb5a395c21800af96a89f553da177669b70f463dce205c081dcaddefc39a82939a6402d475c14466233ad1c2b0cf5cbe90877c7ae27abc857f61aae9c1a984808a08a424a7cb4338516b18c878bff90e0a9b8b7ce68573730e829b7b1667ea833cec2a8d01463b849954c022c5ccba59"}, 0xd0, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) r9 = getegid() chown(&(0x7f0000000440)='./file0\x00', r7, r9) r10 = creat(&(0x7f0000000580)='./file1\x00', 0xd0) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f00000005c0)=0x9, 0x4) r11 = syz_open_dev$vivid(&(0x7f0000000600)='/dev/video#\x00', 0x3, 0x2) fstat(r11, &(0x7f0000000640)) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcsa\x00', 0x80000, 0x0) getsockname$inet(r12, &(0x7f0000000700)={0x2, 0x0, @multicast2}, &(0x7f0000000740)=0x10) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000780)={0xbe1, 0xc, [0x5, 0x3, 0x10000]}) r13 = request_key(&(0x7f00000007c0)='id_resolver\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)='@ppp0ppp1proc(keyringcgroup\x00', 0xfffffffffffffff9) r14 = getgid() keyctl$chown(0x4, r13, r8, r14) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) setxattr$trusted_overlay_origin(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='trusted.overlay.origin\x00', &(0x7f0000000900)='y\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000940)={'vxcan1\x00'}) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000980)={0x81, "e537af568bae4835828fc569a832d97948b38f466915085debb2c4430ad012b4", 0x3, 0x81, 0x8000, 0x2000000, 0x2}) [ 256.777977][T10091] chnl_net:caif_netlink_parms(): no params data found [ 256.844237][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.852287][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.861593][T10091] device bridge_slave_0 entered promiscuous mode [ 256.872595][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.880079][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.888190][T10091] device bridge_slave_1 entered promiscuous mode [ 256.991293][T10091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.009157][T10093] chnl_net:caif_netlink_parms(): no params data found [ 257.024295][T10091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:08:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x400, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x1010, r2, 0x7ffe2000) prctl$PR_MCE_KILL_GET(0x22) r3 = add_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="089d6da41700d708518a3c54f34704802ab87789c7c5107e88a269d689a2598c9454a9fa7fb1b5caa260948d59beebea2d63449fc1b7e1520f9eaac6ee5136486e59781963f9e3f160eacb0e2079ea6bb2a1956e3a4eadaed8d531f6ae60b8836baac27279063fe3f0892c745341efa9ef0975e9de040ccde2d5b4b59e20873678315b3905532cc7a7a355d74d8aa096d794", 0x92, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x5}, 0x0, 0x0, &(0x7f0000000300)={0x5, 0x4, 0x2, 0x200}, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x725}}, 0x10) pivot_root(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') prctl$PR_SVE_GET_VL(0x33, 0x1c841) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000540)=r0, 0x4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000005c0)={0x0, 0xffff}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000640)={r6, 0x401, 0x2, 0x5}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000006c0)={0x9a0000, 0x8, 0xad13, r2, 0x0, &(0x7f0000000680)={0x9b0961, 0x2, [], @value=0xffffff01}}) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000700)={0x5, 0x9}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd825}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe03}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x88}}, 0x20000841) r9 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$TIOCMBIC(r9, 0x5417, &(0x7f0000000900)=0x8) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000980)={0x2, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0206434, &(0x7f00000009c0)={0x6, r11, 0x1}) r12 = syz_open_dev$audion(&(0x7f0000000a00)='/dev/audio#\x00', 0x101, 0x4000) ioctl$TCSETX(r12, 0x5433, &(0x7f0000000a40)={0x3, 0x1f, [0x0, 0x0, 0x1, 0x6, 0x3ff], 0x101}) io_setup(0x5, &(0x7f0000000a80)=0x0) r14 = socket$bt_bnep(0x1f, 0x3, 0x4) r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/sequencer\x00', 0x2081, 0x0) r16 = mq_open(&(0x7f0000000c40)='posix_acl_access\x00', 0x1, 0x10, &(0x7f0000000c80)={0x1, 0x6, 0x7}) r17 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/sequencer2\x00', 0x105200, 0x0) r18 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/dlm-control\x00', 0x400000, 0x0) r19 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/udmabuf\x00', 0x2) r20 = dup(r12) io_submit(r13, 0x5, &(0x7f0000001f40)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x80, r14, &(0x7f0000000ac0)="768b491313f372b51e5239460c86995766ab9d6dd0a4138937ae75fb633a44ba3944b991501fdc2b84fa2e49af747a1e3052d04618848dbc2385db4d1eebcac1c4", 0x41, 0x8001, 0x0, 0x3}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f0000000b80)="48560a3aad4a345fd105352a807f32227af07165e822cb6d4169647d78f6cec5c0ea5781ba8de8b814dbbd43703322f21228be0f1d394300b55f", 0x3a, 0x1, 0x0, 0x0, r15}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x8, 0x8000, r16, &(0x7f0000000cc0)="99b239954bef33cec23a61707c3706a08cac09efa37b2c81a7f688bd123d1f04cdccb7d37b8eb071b8bf877e64c48c88c0c3670d32ebc5b0cee3e8d7d584bcfcc734d66449c4bfd426f0da76b47bf6a57a8934a3eaeb78671f8f473eae179f0a58456da850e42cc1eb78a75cc24f061138b572f4e08d1a95133756d28e091d352f18b1497c2ffad6d1c121b2759d8201ca3e94c420936815818647668fc662d2a3452cc38d5f06e2384cdfe56c53f3e4956d699c55db34dfb8b7bd3bf685a26dce8af675013a4372728a16d700b4f21ebe0f5205adaa2f5d8d4da85067ee5d313e506c59ac403ddda3625029cb4055bb0e3d52654f69d56e6a52992425d41c7952ed1d76ad3b3855eaf029503fe65a05fdcc27b5430fad08101e05f362ef7581e68af7e55e8b81c44cb98f9ba739fb98e7bd8c68748a8ba2db29e88ce35596b7f6a09697067aaf0ecfd1c27c3440ae6c34b5fbecb35f57a4f7e6e77df1197e42b0fe50761976348b7a1201fc5c0150e616dedec40ffc829a92908b319371c4017572fa2d2d2446ace633148156893867e4a493cf7acfff41ef554fded6fa78cf20b50855886874d92d093dacc675d5d3021094a70a4026e93bcfc27088c95ea39e6b0b721d274fa05425c5e3a3e165efa816e101b0af8578d1438f4c02803424413900c46b96ccfbcbceb70dcee0e42bf7ff3bc4db66ce2595b73d0d6d3b7477ae216610746ca3186e20b108ac520547216af74969e9e936c32f370d7b6bcca035d064dc25f78768802da0ec75dd979b2555844bc9fd01e155508061ab42a83d715960b0324bd1cde0123772677927aba54bbf47f3c12870cc2f4249b1301f481e6e4a47dbe62e19de595763b4f8ba0aefb9eef4f246f7db8202cf133a7b051eb3ceb25a52c06e3b5a1a0feff620f984c4dd802c18f3d4148fce0be9061385009bbb08dc9439a32631cacc0459cda0f3595558f34101d093697447ebc3657f2e186fb9e58b36011261e32b85bf8fdb9758115febff37bd63d8abf753edc116950859605d30aa85563af3f604e98481fe63d5fd2058d3ac4e82123446d330b2887023c2c824e2490671749daa61602009e417bdbbeca84b5bd02c5ca88d4fc0d3d118dff983ac5b5cc1da0737c26d898baf88d51186555415b5297e08dad30ed5eb92ae318c07daa543a5794ca100feb67bc3beaf1a08b93b1f7a375d4784f27998c2c16d832c171261f67f82300c351d1545238e5688ef3f37e44cb9532a7aa095e69f4c7f730a4495129e764d3614eddb403626e4de634a6443a6f3458cd8ef245b7486a6c801a3e6524a4029b57fbab597a7bb3cebdd9a0d1947be1ed80f50f1aacb7269758d4aa66a71a4ed144c960df734c8e20ed194a3ed14bff684905109523e8d0f45e4a397ec2c4edc2628fa399c29da2c30eb74ab89d1ccff6254a2b46c2b8689ccadd957bfbefabca903b59805cbcc084acb84d634e52673c003be75ef8adae33c49a081960fff89f33f69eab21a8fa809252da0502609b8f792cbc4b04d41a7535120e36d364ce8bffe06d526568a975b2c6f5d81b3e7881678acd8e1d3331cbd21275bd182e4b04ccb14e48f0c2a566d63db429804fbedfcac6bed79214985def0706cd8d0c297eac5a0f51a32694981556094157349b9f57385473cf06971b5ac445c9cb50e6c6c387d3ae4a36848ce39ced3299bfc7149fd9d2900de83a26b05bcf4647dfbb6d8e3fe0ae09ebeb860500f4d767eab20f332ff65bf51878950492baeb2dc0adfef09552f8a7e5780e45a7371a3d633626226c3b64178bd14d0571d3e778e2b999f55adf70d5f6c885960164d9eab82603cd71c2551ea57030a5c2d6701b9a5b54f575cd0d5db8912a0a0224b79eafdc09f8847c34a104a3a2d5f5f209655108d3af6f5a1c2d1a51453a1d33218b30a7d9b476f2997ef7a6ce1629ee4fa2b1547a8205cc4959dc0dc6819f253b7791033701f9d2dc38890d7b2c924b549d0c66977875cf4c38aa89fdaf3a699ebe0ab96a5c0b133a44bbe70232699060e621549b8acef4806eb0a712bf1ccbe94f9fd925ee6d03ffc51279460e19ac553abcc09a66613e34d8e350b91aa3da1411ed026317979e4a92c1e32c3a4e521ebedcbe234e00e3f9ce53566ec9aad6e55a52297b7de2eb1a4102520828840c5bce400e8e11ddc5b5dfdb5a8f16b64368535ac03a8f04757c37fc8e215a40780be439896add3e5135a1acc65d59eff1a7cc1af2946a161ae0f62eacef643370f78c7c623e99ac2e4ec253d7b26a20ae9f1625573e2dcaa61cc495a72c12df993f11370b48150e074f464f7c5376538d2c9209fd54b67954c4e7081fc25089a8863b7020373da0a4f47533199fddf6975db5288bdfb424c0c410432fcf1fad713d038c96a94ac95d8892ee31a9d93831abaf5ea2bc26484d11c3908c892524d9d4178aa4a5e73ca604c27a895f83b2333c94e98c9b512538c05971414fc0117157203b5bbebd26f931713769f872339fb9535a6c156b9274a300557eb1230f74a2463128fcf351912550c59f359515b6961b95549e67f47dc3ae19f20aeae5fc9b381ec84e7a7fa27f68137293225f27dfe6a638bc9ac39a465e1a31dae004cb2f786a19e329bd0eb2d67e3cf286ab5dbe5ab2a294aad50045ca9390dd243e182771dfbf5c88fd3b7c039d1b4d2d87a983e7474ad8c9e76325e4b68022165cd3a8b6ed6ee2da7376a27d783219c475413726178a28cbb9d5560928e5ff85c00ffcbece0c3b4f0e30edde618869ec52df0c7dab564b204d52dc7049ac47c3b787e46cf3d934b1e291a6edd1570e284a6051751ac1a6afba08ee9dcff5a5e1cf06d0490b7105011061717ae36ee08a39b02f61d9a5b7b9d0513dfd58399c5202a475eaa7e5f6d45022e363b7782dddeef8c4422f67175a07515647da1bad4f316ae152ec2fbaff963946b70ec31cbeb4fa0e884a71efe608ca45414b3fbce1846de6aca4d976bd7ecd58a9a4790b85c6fa1581a1e587d604d74fc52876557693071bfe5940b472608ae0112522b78377a66b72320a4e510e79637891be659d95839dbd60b218071b1d04c2bb03da0217f49fc3a981c908f5647cd12a67a65d456cddb3984613c4f9f897a9d0db5010246f261205fc29f5e51b0583858dab397581f03388f37b59378ca92bfc9d22ab50d419fe5a588fae16b778aefd93b797d0d0abd1a551ff4744be8e21a76fc3ac892ccbf8c4eb3539d1e481b4aaa28e9dfb76b3ac0882e0711758f42c2f0212d493be43d48d540c3f2161f673e0309d52a7c3005ee6c54e44000c13d0c1299f5f827e0fdadf7770d0385682b7f84e933e200c1a49d3f93f06df3a3b7cab33a1e0714dc13118ba35193211cdae1865ac0afa693056aa9ed8e9673a2815646e0b6b3d3912a142e7a8b8e02428fa13200d9d8002ee7a4a8074be038dd176fb34e0b4c5657a33f61d4ceb91516b2f0485f3dedd477d09dd9cab8607a84aeb0e1cfe41aaf3c780563ce0e8c53fb33b4aae0f9e285bd0f5d152852721612ea29ed2bb22e30979378e51bd52cc5d715fac1eb37f7ef99b075d4d32f324c934f0e117683cd917f6b35bce2da92c9ab7a707a6e593ac75db8a05002a337acfb2e34d049ed17d07e46f0253a33dd3f3d93dd866c5ca5c881b47adb215fed0c85fc7daee68e7c309482b109d64f85cfe99e3c6771b6e6652b70b5be4889141a9d16626e8c8ccee5f7de3ef9bb30f681d3793b64795a494f72869270f8e954c1585751646339af3cebb5fbdb1e8e03acd72022101bd4cd62e8bfec10de73ee236eb27cd3feec2978e8b28fc2a768d8848cf2ca6a8166522ac121f0d6cdacba8fa0b1fa8000bbac8f2c91eef6562b05d577d636163939148c6e210d11aaf5163b550e86df231773493de13001fb3839094d9b051047050b670c6d9e99668c87fc1102c638610db741ecd449916562867919a6f688764ada9a6cb8f096f831791c444888257c719f2c297e1863ef61f5e70434870f84e14636d4b6d527dacdaba7d1fc5dafb0216ae768675902d603cb649775d6b928639b86edaed7d1fe4a9b6db1041438a23948b225b7be6811e5a75c36e7c18b586c433920b7676d01cda685c395695c91c3962d8cbb5cd334ea007429965b5b3a8eb5e041d92150c05f8ec4eae332bc0613fbad6096b6641ee1f9574fee376506e1edea1c86f222b3145c7b3c56a60588897b2f3ed2ad942861ced76a82385441b0624094973bdc84ed9fa856ce1d17cded0ca6b78350889d39f859caf64187b9fb18a131e18a384ddb701721bc4f531c935c630b4bcf736720a29eae014a26754fe12f1189ad1349c5dd0a28ca88c56c91fa1613721cbfa58585754ff8f3681e5ef65d3c879440b5627707d12e21b3c1b211ddca4c9cf1fc069382bdccbe48e7a8110397de3c2d32084f5fb4a5864c3df5f41af2226bbaac901446e7227e8292dd01a56bc508c00c4891a38b6ab80a79703cc28010dca1a0df0ce318a11bd5b9378c17e106977e3321f78570a74541eab6be4a62f3e3f8a0452e7863264ba372ec79261d1554feed32fc966db15dc3f2d5c6e4c95b80ae53a9952ff478bb2060d2d8eeb5d142a57d7d23262fbce69c8df1ec4df690735a6a879a76c879de38ec9a4ff465a4932efc8b5c660b47ca3f73e2740054c0a431a0255ffd0aeb26d0ba6fbd1d84fc229d2022af424fa8814ae222de0ec1ff7f043f4f9b55e05fe0c1fe811e69382184c6b4bcc1da84d5d8177f92a8333f6c888f79ef6bc5a3d73e68b8cd1a1d4b69e6027d8403a485840420559ee9fdd7e170a18fb8826905aa2dfd97179061d3e3b963ec25ac588f7048faf431092a238429f721013096d712793cebbfa710795538b76f4b87dee07550ccf7231ef47f3b086d81ff858ffa47606da5853dacf83ac4e1433bb3e07d775feddcba9f9ededc7e66e4958e327e2f3db530360fe69b30c8827bf92e59c45ed44ce3f6ff65a912a476907df14cbc8a17212a43d12e2717e033b9f94c845afb35e44ce748af8a1c08b110f5e2ab5543add12060cd908746e35846fca19c54b0f1af5a359efcf031904afeeef91ac488fdc3fb446372a6fcdb04f1def8f223fe76adae0b27d5ec88a92100ad158cd1c55c92139834d915caa4d66aea078c82f22a5bfb153025681add4e232022b2a6cfaa7a6f37cefa8685f4ba676dc2aa338d6f9a8f922ea3d4efa35ee9719bfc5183d86759ea8f46b2b7c5df5a990802c4f9c63beffd9d715d154635be03ce44aa9ebe38740826b6d2bb683a75d15e3a3481949e6399a030cf64f5707257819b03fcfaf1cade600a64e69c8aaf7638199c363ab6266cf98ff778d2686188dc47fbe0348e836f0ee16b4090d898880362f402cc02d7e98e34210a108079e872afaaa59ea8d0c50e65c5df1bf6e30c8c505db2069fa6e64497eb08f43601dc2b95140fd05181332353cd32d70ec7211429d6ab248bb4e79259031956458b8c55c06b01366247feff8d797fb7a5ad5c1321d39b04d0748799889abafb44fbcae81278a8c3e5cab933b5218bb7fd70d263715b281a8c9d4d468ff90689340902c2a20a144f6e1cadfb67c458b6581aaa4c1fd22a9a58f9021eceb23b473ecec65eacd903617f08091be8db4318c4b9c1a754c9afbe14d75e06fe97425cf8f2f83b64e4627f2bb5f3fb741488c8e1961eb0110b4bf7ee23d408848f8ddebe8bdf0c102c16732675cd7d72e52f2f42b4e867bcbd4bad2bb1a2648d1c74ad12d71e17fe", 0x1000, 0x0, 0x0, 0x2, r17}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000001d40)="6dd1b3eecc4fcf8516ba71e34d0f3fd810afbca1e6824a8fae8aaa8231c79a90086864806d2430421820cf7e1242419d673cc26a581e1b68b623e7b2d5b6eb6aec28fa58eb15d100c0ec8bd50a7b1301f4e6a180c1fe794383e8f06e7ab60530361ee42fbcadf02ddc34985611b229d652e09f045e5d94382f8403b8913be5db744e2373292e4ba5588d838cfdc465b4a36ff154fd0fbde497cf64b7e7b152321b0194e3b251d8b21abb3c546c385894e2d009f351632313", 0xb8, 0xfffffffffffffff8, 0x0, 0x2, r18}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x5, 0xf001, r19, &(0x7f0000001ec0)="5dba37c48164c7f8b188bb545a49b74859f5736ac67914d427e1651b6b20130b74d90328c4b4141e6c327b4b93bcda513fbc8355bfc19dd700", 0x39, 0x7, 0x0, 0x1, r20}]) [ 257.094352][T10091] team0: Port device team_slave_0 added [ 257.109657][T10097] IPVS: ftp: loaded support on port[0] = 21 [ 257.134255][T10091] team0: Port device team_slave_1 added [ 257.162280][T10093] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.170628][T10093] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.181670][T10093] device bridge_slave_0 entered promiscuous mode [ 257.230540][T10093] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.241168][T10093] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.251877][T10093] device bridge_slave_1 entered promiscuous mode [ 257.266665][T10091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.273669][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.303750][T10091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.344748][T10091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.351968][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.385562][T10091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.425529][T10093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.428321][T10099] IPVS: ftp: loaded support on port[0] = 21 [ 257.464225][T10093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:08:28 executing program 4: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa30000, 0xfff, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0908, 0x9, [], @string=&(0x7f0000000000)=0x80}}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x400) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x101000, 0x0) accept4$ax25(r1, &(0x7f0000000140)={{0x3, @default}, [@bcast, @netrom, @null, @remote, @remote, @null, @default, @null]}, &(0x7f00000001c0)=0x48, 0x800) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000240)=0x3) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x4142, 0x0) openat$cgroup_type(r3, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x781001, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x2, 0x2, 0x200, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd5c}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000841) r5 = syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x6, 0x4040) fcntl$setflags(r5, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000480)={0x34, 0x6, 0x0, {0x2, 0x5, 0xb, 0x0, '/dev/nvram\x00'}}, 0x34) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000540)=""/212) r7 = socket(0x18, 0x4, 0x3e) r8 = getuid() lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r7, r8, r9) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0xc, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000801}, 0x10) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000008c0)={0x0, 0x68, &(0x7f0000000840)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @remote, 0x10001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, [], 0x20}, 0x1}]}, &(0x7f0000000900)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000940)={r11, 0x20}, &(0x7f0000000980)=0x8) r12 = add_key(&(0x7f00000009c0)='logon\x00', &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)="b59309d4027b37c19ae2be", 0xb, 0xfffffffffffffff9) keyctl$link(0x8, 0x0, r12) r13 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) getsockopt$bt_hci(r13, 0x0, 0x3, &(0x7f0000000ac0)=""/101, &(0x7f0000000b40)=0x65) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000b80)) recvmmsg(r4, &(0x7f0000001880)=[{{&(0x7f0000000c80)=@x25={0x9, @remote}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000d00)=""/216, 0xd8}, {&(0x7f0000000e00)=""/187, 0xbb}, {&(0x7f0000000ec0)=""/118, 0x76}, {&(0x7f0000000f40)=""/84, 0x54}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/207, 0xcf}, {&(0x7f00000011c0)=""/137, 0x89}, {&(0x7f0000001280)=""/202, 0xca}], 0x8}, 0x40}, {{&(0x7f0000001400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001500)=""/37, 0x25}], 0x2, &(0x7f0000001580)=""/242, 0xf2}, 0x5}, {{&(0x7f0000001680)=@alg, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001700)=""/186, 0xba}], 0x1, &(0x7f0000001800)=""/112, 0x70}, 0xf2}], 0x3, 0x40012022, &(0x7f0000001940)={0x77359400}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r14, 0x84, 0x74, &(0x7f0000001980)=""/253, &(0x7f0000001a80)=0xfd) [ 257.518294][T10091] device hsr_slave_0 entered promiscuous mode [ 257.595150][T10091] device hsr_slave_1 entered promiscuous mode [ 257.715363][T10093] team0: Port device team_slave_0 added [ 257.754039][T10093] team0: Port device team_slave_1 added [ 257.800167][T10102] IPVS: ftp: loaded support on port[0] = 21 [ 257.810268][T10097] chnl_net:caif_netlink_parms(): no params data found [ 257.833735][T10093] batman_adv: batadv0: Adding interface: batadv_slave_0 11:08:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x600402, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x47e, 0x200203) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x38}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f00000001c0)="300ec0db11dce4bec2d81167d645a227cc18473e4aea28ec65332296a135bfb2ead9fc04614d8db99a39dd2d817bd6a64b02668768daedaa525a4994d73d1257e724368f37f4995e03cae19a1c762445275c5e5bec8320bc011086ab0471cf1dc864269bcfbdf64c0f07ad61f24aba4d3f9ec743e4", &(0x7f0000000240)=""/110}, 0x20) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000300)) truncate(&(0x7f0000000400)='./file0/file0\x00', 0x6) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000440)={0x4, 0x5, 0x506f}) prctl$PR_GET_SECUREBITS(0x1b) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0) r6 = dup(r1) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000004c0)={0x0, r6}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) write$FUSE_ATTR(r6, &(0x7f00000006c0)={0x78, 0xffffffffffffffda, 0x1, {0x800, 0xffffffff, 0x0, {0x2, 0x6f200, 0x4ec500, 0x7fffffff, 0x3, 0x20, 0x3f, 0x8, 0xfffffffb, 0x101, 0x4, r7, r8, 0x2, 0x5}}}, 0x78) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000740)={0x3, r2}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000007c0)={0x800, 0x2, 0x4, 0x80000, 0x1, {r9, r10/1000+30000}, {0x4, 0x1, 0x8a, 0x7, 0x9, 0x7b, "87df376c"}, 0x80, 0x2, @fd, 0x34c, 0x0, r3}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8982, &(0x7f0000000840)={0x6, 'veth1_vlan\x00', {0x6}, 0x1}) inotify_init() r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/autofs\x00', 0x42, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r12, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004884}, 0x881) chdir(&(0x7f0000000a00)='./file0\x00') write$snddsp(r6, &(0x7f0000000a40)="ead1cce156b61db17c6318d828b0bc4661dbfac3545366a72459a986ed8d5ca8c89e6921943b2c9dd0e69862ba8a404b3f620c6511c07d37f6", 0x39) r13 = syz_open_dev$vcsu(&(0x7f0000000a80)='/dev/vcsu#\x00', 0x6, 0x400000) ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000000ac0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x3}) r14 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_netdev_private(r14, 0x89f3, &(0x7f0000000b00)="7360eb918eaacaab9b7bf935ef6e4189a0f2a7ab00b6f80acaa25f2909dd") [ 257.841877][T10093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.868063][T10093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.928231][T10093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.935366][T10093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.962011][T10093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.148198][T10093] device hsr_slave_0 entered promiscuous mode [ 258.204903][T10093] device hsr_slave_1 entered promiscuous mode [ 258.264609][T10093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.272596][T10093] Cannot create hsr debugfs directory [ 258.278473][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.286735][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.294625][T10097] device bridge_slave_0 entered promiscuous mode [ 258.304492][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.311557][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.319539][T10097] device bridge_slave_1 entered promiscuous mode [ 258.397282][T10104] IPVS: ftp: loaded support on port[0] = 21 [ 258.428266][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.463941][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.476580][T10099] chnl_net:caif_netlink_parms(): no params data found [ 258.496114][T10091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.540426][T10091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.631790][T10091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.709099][T10097] team0: Port device team_slave_0 added [ 258.721710][T10097] team0: Port device team_slave_1 added [ 258.732413][T10091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.855572][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.862697][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.871748][T10099] device bridge_slave_0 entered promiscuous mode [ 258.886335][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.893634][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.920582][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.949408][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.956931][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.965911][T10099] device bridge_slave_1 entered promiscuous mode [ 258.976875][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.983852][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.010655][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.053988][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.083640][T10102] chnl_net:caif_netlink_parms(): no params data found [ 259.101488][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.157043][T10097] device hsr_slave_0 entered promiscuous mode [ 259.195021][T10097] device hsr_slave_1 entered promiscuous mode [ 259.244648][T10097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.252298][T10097] Cannot create hsr debugfs directory [ 259.336181][T10099] team0: Port device team_slave_0 added [ 259.377136][T10099] team0: Port device team_slave_1 added [ 259.408798][T10093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.479917][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.488010][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.514436][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.540244][T10093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.590896][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.598258][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.625475][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.637501][T10104] chnl_net:caif_netlink_parms(): no params data found [ 259.658204][T10102] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.666300][T10102] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.674993][T10102] device bridge_slave_0 entered promiscuous mode [ 259.682948][T10093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 259.732570][T10093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.802210][T10102] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.810559][T10102] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.819060][T10102] device bridge_slave_1 entered promiscuous mode [ 259.878028][T10099] device hsr_slave_0 entered promiscuous mode [ 259.924949][T10099] device hsr_slave_1 entered promiscuous mode [ 259.964697][T10099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.976035][T10099] Cannot create hsr debugfs directory [ 260.063944][T10102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.074672][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.082750][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.091094][T10104] device bridge_slave_0 entered promiscuous mode [ 260.123914][T10102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.140185][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.148968][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.157919][T10104] device bridge_slave_1 entered promiscuous mode [ 260.181378][T10097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.233428][T10097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.288455][T10097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.352524][T10097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.430398][T10091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.449640][T10102] team0: Port device team_slave_0 added [ 260.458524][T10102] team0: Port device team_slave_1 added [ 260.467192][T10104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.481298][T10104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.567943][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.576590][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.587808][T10102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.594961][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.621430][T10102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.636015][T10104] team0: Port device team_slave_0 added [ 260.645132][T10104] team0: Port device team_slave_1 added [ 260.653083][T10091] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.661716][T10102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.669283][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.696353][T10102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.762264][T10099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.800894][T10099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.864479][T10104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.871481][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.901725][T10104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.920082][T10104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.928901][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.956247][T10104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.981743][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.990955][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.999965][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.007281][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.017864][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.027156][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.036213][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.043287][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.051324][T10099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.126728][T10099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.206788][T10102] device hsr_slave_0 entered promiscuous mode [ 261.277849][T10102] device hsr_slave_1 entered promiscuous mode [ 261.314519][T10102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.322161][T10102] Cannot create hsr debugfs directory [ 261.351985][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.360461][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.397920][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.476679][T10104] device hsr_slave_0 entered promiscuous mode [ 261.524989][T10104] device hsr_slave_1 entered promiscuous mode [ 261.574576][T10104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.582223][T10104] Cannot create hsr debugfs directory [ 261.607399][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.616686][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.625970][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.645989][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.655484][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.717021][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.726980][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.789101][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.798222][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.815553][T10093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.830428][T10097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.857373][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.930359][T10093] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.940737][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.949023][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.957030][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.965039][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.981027][T10097] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.033378][T10104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 262.090346][T10104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 262.147961][T10104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 262.205689][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.217353][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.226295][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.233903][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.242295][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.249991][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.257739][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.267139][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.275830][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.282910][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.292542][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.300795][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.309921][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.319250][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.329079][ T2734] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.336270][ T2734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.350525][T10102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.427452][T10091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.435201][T10104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 262.517516][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.529157][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.540518][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.547683][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.556233][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.565198][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.575584][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.584486][T10102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.670211][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.682307][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.691490][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.702583][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.711661][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.720710][T10102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.770289][T10102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.830724][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.850744][T10099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.890955][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.900428][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.910408][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.918989][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.927685][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.937127][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.951210][T10097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.965375][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.005177][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.013233][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.022281][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.032552][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.041520][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.050548][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.059463][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.068113][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.076981][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.085654][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.093693][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.130453][T10099] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.160216][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.172044][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.182246][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.191806][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.199463][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.208389][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.217426][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.226497][ T2686] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.233687][ T2686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.241476][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.250855][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.259149][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.266820][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.275813][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.285112][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.285783][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.301351][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.326394][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.338856][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.353218][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.362666][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.398985][T10091] device veth0_vlan entered promiscuous mode [ 263.417939][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.427803][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.435483][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.443073][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.452128][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.475734][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.490083][T10093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.542798][T10091] device veth1_vlan entered promiscuous mode [ 263.558293][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.566959][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.576034][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.585669][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.594221][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.611129][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.631062][T10099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.654901][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.663327][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.686837][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.696255][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.705487][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.712658][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.720680][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.729680][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.739008][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.746587][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.756670][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.778046][T10102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.790868][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.833714][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.850101][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.860496][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.869854][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.879020][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.890268][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.899270][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.911183][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.935636][T10102] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.959269][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.971364][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.980453][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.989569][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.997560][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.006385][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.042937][T10104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.058121][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.071104][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.081476][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.090545][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.099163][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.107413][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.117288][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.126717][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.135832][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.144328][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.151513][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.161684][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.184272][T10099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.200179][T10093] device veth0_vlan entered promiscuous mode [ 264.208841][T10091] device veth0_macvtap entered promiscuous mode [ 264.221387][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.230369][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.243272][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.252695][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.259842][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.268659][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.277303][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.313487][T10091] device veth1_macvtap entered promiscuous mode [ 264.325800][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.334119][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.342499][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.350861][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.359732][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.368389][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.377623][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.386901][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.401851][T10097] device veth0_vlan entered promiscuous mode [ 264.417552][T10093] device veth1_vlan entered promiscuous mode [ 264.451902][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.461183][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.471903][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.481505][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.491537][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.500090][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.508245][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.523363][T10097] device veth1_vlan entered promiscuous mode [ 264.563380][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.577251][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.590048][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.610911][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.620071][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.629273][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.638756][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.647634][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.656561][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.695295][T10091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.703628][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.715223][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.723731][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.733200][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.754033][T10093] device veth0_macvtap entered promiscuous mode [ 264.777107][T10102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.810517][T10091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.819454][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.830506][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.839713][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.849549][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.859090][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.872164][T10093] device veth1_macvtap entered promiscuous mode [ 264.915795][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.926973][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.940562][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.963537][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.973966][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.993805][T10097] device veth0_macvtap entered promiscuous mode [ 265.014975][T10099] device veth0_vlan entered promiscuous mode [ 265.027861][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.045550][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.075750][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 11:08:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r2, r1, r2, 0x0) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="d2b10b828b057b00d326bc34be2b905abece12e97ae973e11b23eaf794e9f997984cbb4a1d1232f7148f6ccd5602371e8818372dc507f09060142aeabbaad7319e118a11871155c708072d16f082044132376d8397c675bcf257785854ab5a6ef240096f8cab2c57ae2ff8b28de25fcbba302cdf9a1a615804987889eb36f9d0329e8be9eb9c8f8e50c19e54da0cd33bcac74f8275e273e148f3ea53234da24b61285980d0b5b0321f15d14d42feb3aee1f72bb49301fde3274e35b295a71084830e7400ebde2ae990772b2976608bd174a2f13240004f1dfd31be5b494d03f96370d345c644b3dd24d84ecc95cc5b5657f3fa2c62f806", 0xf7, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xcc00000000000000) dup2(r0, r3) [ 265.141699][T10097] device veth1_macvtap entered promiscuous mode [ 265.157742][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.166302][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.174322][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.186902][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.203130][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.216246][T10093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.229243][T10093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.246824][T10093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.263249][T10099] device veth1_vlan entered promiscuous mode [ 265.274381][ C0] hrtimer: interrupt took 45816 ns [ 265.299557][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.308061][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.317573][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.347266][T10093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.369317][T10093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.384624][T10093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.401448][T10102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.415563][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.424187][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 11:08:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r2, r1, r2, 0x0) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="d2b10b828b057b00d326bc34be2b905abece12e97ae973e11b23eaf794e9f997984cbb4a1d1232f7148f6ccd5602371e8818372dc507f09060142aeabbaad7319e118a11871155c708072d16f082044132376d8397c675bcf257785854ab5a6ef240096f8cab2c57ae2ff8b28de25fcbba302cdf9a1a615804987889eb36f9d0329e8be9eb9c8f8e50c19e54da0cd33bcac74f8275e273e148f3ea53234da24b61285980d0b5b0321f15d14d42feb3aee1f72bb49301fde3274e35b295a71084830e7400ebde2ae990772b2976608bd174a2f13240004f1dfd31be5b494d03f96370d345c644b3dd24d84ecc95cc5b5657f3fa2c62f806", 0xf7, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xcc00000000000000) dup2(r0, r3) [ 265.462430][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.528539][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.554522][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:08:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r2, r1, r2, 0x0) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="d2b10b828b057b00d326bc34be2b905abece12e97ae973e11b23eaf794e9f997984cbb4a1d1232f7148f6ccd5602371e8818372dc507f09060142aeabbaad7319e118a11871155c708072d16f082044132376d8397c675bcf257785854ab5a6ef240096f8cab2c57ae2ff8b28de25fcbba302cdf9a1a615804987889eb36f9d0329e8be9eb9c8f8e50c19e54da0cd33bcac74f8275e273e148f3ea53234da24b61285980d0b5b0321f15d14d42feb3aee1f72bb49301fde3274e35b295a71084830e7400ebde2ae990772b2976608bd174a2f13240004f1dfd31be5b494d03f96370d345c644b3dd24d84ecc95cc5b5657f3fa2c62f806", 0xf7, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xcc00000000000000) dup2(r0, r3) [ 265.571331][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.582432][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.597129][T10097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.622701][T10104] device veth0_vlan entered promiscuous mode [ 265.646683][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.662807][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.673074][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.682854][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.724819][T10099] device veth0_macvtap entered promiscuous mode [ 265.764735][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.784138][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.800466][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.812032][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.826458][T10097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.845253][T10104] device veth1_vlan entered promiscuous mode [ 265.854324][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.868644][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.884497][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 11:08:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r2, r1, r2, 0x0) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="d2b10b828b057b00d326bc34be2b905abece12e97ae973e11b23eaf794e9f997984cbb4a1d1232f7148f6ccd5602371e8818372dc507f09060142aeabbaad7319e118a11871155c708072d16f082044132376d8397c675bcf257785854ab5a6ef240096f8cab2c57ae2ff8b28de25fcbba302cdf9a1a615804987889eb36f9d0329e8be9eb9c8f8e50c19e54da0cd33bcac74f8275e273e148f3ea53234da24b61285980d0b5b0321f15d14d42feb3aee1f72bb49301fde3274e35b295a71084830e7400ebde2ae990772b2976608bd174a2f13240004f1dfd31be5b494d03f96370d345c644b3dd24d84ecc95cc5b5657f3fa2c62f806", 0xf7, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xcc00000000000000) dup2(r0, r3) [ 265.893349][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.903579][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.913750][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.948687][T10099] device veth1_macvtap entered promiscuous mode [ 265.992913][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.019685][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 11:08:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r2, r1, r2, 0x0) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="d2b10b828b057b00d326bc34be2b905abece12e97ae973e11b23eaf794e9f997984cbb4a1d1232f7148f6ccd5602371e8818372dc507f09060142aeabbaad7319e118a11871155c708072d16f082044132376d8397c675bcf257785854ab5a6ef240096f8cab2c57ae2ff8b28de25fcbba302cdf9a1a615804987889eb36f9d0329e8be9eb9c8f8e50c19e54da0cd33bcac74f8275e273e148f3ea53234da24b61285980d0b5b0321f15d14d42feb3aee1f72bb49301fde3274e35b295a71084830e7400ebde2ae990772b2976608bd174a2f13240004f1dfd31be5b494d03f96370d345c644b3dd24d84ecc95cc5b5657f3fa2c62f806", 0xf7, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xcc00000000000000) dup2(r0, r3) [ 266.165910][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:08:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1}}) getitimer(0x1, &(0x7f0000000040)) [ 266.213703][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.235025][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.245622][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.265893][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.295051][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.312233][T10099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.325741][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.337418][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.346929][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.357577][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 11:08:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r2, r1, r2, 0x0) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="d2b10b828b057b00d326bc34be2b905abece12e97ae973e11b23eaf794e9f997984cbb4a1d1232f7148f6ccd5602371e8818372dc507f09060142aeabbaad7319e118a11871155c708072d16f082044132376d8397c675bcf257785854ab5a6ef240096f8cab2c57ae2ff8b28de25fcbba302cdf9a1a615804987889eb36f9d0329e8be9eb9c8f8e50c19e54da0cd33bcac74f8275e273e148f3ea53234da24b61285980d0b5b0321f15d14d42feb3aee1f72bb49301fde3274e35b295a71084830e7400ebde2ae990772b2976608bd174a2f13240004f1dfd31be5b494d03f96370d345c644b3dd24d84ecc95cc5b5657f3fa2c62f806", 0xf7, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xcc00000000000000) dup2(r0, r3) [ 266.367685][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.376973][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.394234][T10104] device veth0_macvtap entered promiscuous mode [ 266.427083][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.475031][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.493615][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.505927][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.516209][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.529873][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.557450][T10099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.572278][T10104] device veth1_macvtap entered promiscuous mode [ 266.630029][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.652591][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 11:08:37 executing program 2: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x10001, 0x4, 0x4, 0x400000, 0x7f, {0x0, 0x7530}, {0x4, 0xc, 0xbe, 0x1b, 0x4, 0x40, "a0dadf35"}, 0x3ff, 0x4, @planes=&(0x7f0000000240)={0x0, 0xa4c2, @mem_offset=0x100, 0xff}, 0x80000000, 0x0, 0xffffffffffffffff}) getsockname$l2tp6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x20) r1 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r2, 0x1000000) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r5, 0x5453, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000140)={0xc0000000, 0x3, "f6c13c9b36e59e5b6a8294aa7975a4170e5a773c73423852b88065046284401a", 0x4, 0xa2c, 0x5, 0x8000, 0x2fb, 0x9, 0x1, 0x80, [0x1000, 0x6, 0x8, 0x2]}) close(r4) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x22e00, 0x0) getsockopt$nfc_llcp(r7, 0x118, 0x4, &(0x7f0000000400)=""/190, 0xbe) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x0, 0xc, 0x4, 0x0, 0xfffffffe, {0x77359400}, {0x2, 0xc, 0xff, 0x9, 0x0, 0x0, "59c6a14e"}, 0x2, 0x0, @planes=0x0, 0x0, 0x0, r4}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 11:08:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30848}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r3 = socket$inet(0xa, 0x80805, 0x0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={r5, 0x9, 0x1, [0x3ff]}, &(0x7f0000000240)=0xa) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r6, 0x5453, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r6, 0x1d, 0x9, 0x23, 0x3f}) getpid() r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x26}}}}, 0x108) [ 266.679448][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.700828][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.719115][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.774577][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.794215][T10102] device veth0_vlan entered promiscuous mode [ 266.862976][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.883140][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.903055][T10102] device veth1_vlan entered promiscuous mode [ 266.937810][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.006257][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.062909][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.075456][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.100975][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.127230][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.145378][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.162330][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.223120][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.276654][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.292845][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 11:08:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettaction={0x28, 0x31, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="230000005e0081aee4050c00000f00000000a300001832e0b58bc609f6d81fe1a7db51", 0x23}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000048c0)={0x0, 0x0, 0x0}, 0x0) [ 267.322802][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.364445][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.374308][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.401143][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.419702][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.440569][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.460450][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.472244][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.487352][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.512912][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.529819][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.542184][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.558662][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.580525][T10102] device veth0_macvtap entered promiscuous mode [ 267.621822][T10102] device veth1_macvtap entered promiscuous mode [ 267.708438][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.738916][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.768917][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.789356][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.803649][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.816336][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.842879][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.857221][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.869956][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.882348][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.896350][T10102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.909197][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.918752][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.928190][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.941202][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.953602][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.000550][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.029970][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.041039][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.058404][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.073073][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.084424][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.095451][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.106840][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.118243][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.135867][T10102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.145720][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.161985][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:08:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_FPEXC(0xb, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000007c0)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0ec04, 0x0, 0x0, 0x0, 0x2000000000002) clock_gettime(0x0, &(0x7f0000000480)) 11:08:39 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) 11:08:39 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5453, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x440000, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x2d, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r4, 0x5453, 0x0) ioctl$TCSETSW(r2, 0x5453, 0x0) r5 = fcntl$dupfd(r2, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000140)='threaded\x00', 0xffffff1f) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000140)={0x4, @raw_data="7934f5608b907de954d10cd817fc024452055253cb6e197417ec7b2a931e99dbd7cee95db8c0a546b52c269277477ddce65499ea66c3b1ecb3c02f8c7fc8ffe3b82fd8b1f21be53670b7f005bafe4d0cdfeb9f51a163107271fabf467486da409b7ce1cee4756dcde52c959d233382a85cecbb96b7f588487d65b290954c15e5a4e87dd5c9b4f6ba9683336f5ae60d2135959d5e164141eddd76f32343de268f0fd5d7dc8c6935114ea89036d8ed0229af64b5af054b0484a950bc259aa879536652fb38bb76eda3"}) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0201fdffffff0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 11:08:39 executing program 3: set_mempolicy(0x0, &(0x7f00000000c0)=0x6, 0x27) shmget(0x1, 0x4000, 0x1209, &(0x7f000096d000/0x4000)=nil) uselib(&(0x7f0000000000)='./file0\x00') r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6777dd2c59b255af, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x6b5a729cd8838c77) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r2 = socket$unix(0x1, 0x8000000000000005, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xffffff1f) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000100)={0x400, 0x0, 0x0, 0x800}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x3, r5, 0x10001}) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) bind$unix(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)) eventfd2(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x2000)=nil, 0x6761393fcea4c555) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:08:39 executing program 1: syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$cifs(&(0x7f0000000000)='cifs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x6, &(0x7f0000000480)=[{&(0x7f0000000100)="6b981ec9c89ac9e32c607ee1f368bc74187f499a52956d4c00d2c22e41185cb8d8c4f47ce3af009dc2d7eb16f5402239d54138789ce51e1d12310da0a9a6992dfba70b9079aa9d727cf9c2b2e67020a27ca8fdd7d7e27a2d148d421f75d9641ddb9dd2ab07f90df7aad912785ccaf0fb24db6d761fb458993ccc2c0f98869c4c1701076de6c765", 0x87, 0x2}, {&(0x7f00000001c0)="24062f7081a98b08042ee400a333ad660ea98187d7810bdf6b0a9a6a81ba599272881e3f08ce6c005b580109fe7903558a284f8d4d39a38644969720a42f4530a44a0eb03d0ac08da12942f5fc5db48d78bb2b38d90fc4bf62297b233fddc0cff0837c0db6db34f85c", 0x69, 0x5}, {&(0x7f0000000240)="d4f30671cb1c12422f96111cae9b9864d11783415c46c84fb9f0c80d91aeb7be94157d42ec15c91d99e46a021cdc4f3b05d0ef91b5603ac46d4e4582852fe1039d3a27676f7ad716f3127dfe1c51877956ed654216b567e92b15de9cad715c8b727ec0ad8b36d08a2fd6303acc81fccde2b1977ce130d5eded36", 0x7a, 0x7f}, {&(0x7f00000002c0)="bec6e37cc46164f000e305d12b081bed8d66f550604e07dffd23b0f77a811aefdf668047721a8d1d8153d6bdf0e356489c50e34b56", 0x35, 0xfffffffffffffffe}, {&(0x7f0000000300)="382feefd1091932d935af0efad084fd4eb8cdbd62ef6fa9f4c2617b04358b5c7e0b3f748418c7c9af61bec5fd687db492eca86bded4772cc5c003908b9d6e10a16132e588d5951cf2b92f348d6828adc56f7a2b41bce49ffc5a978fd481aa86fe8b48a9a6183d3430f95c83c7200db080b3cdca8088ef524e28d464de17262c11dba402eda62444a7d793f591cde55f27e454cd1adbbf95359bfc263fcf70801c185840bdf4f30cc58765d7da1da19008afd0948ddcc3ed62fa8f2690e9959", 0xbf, 0xd7d}, {&(0x7f0000000580)="0e7fcb6b0114493b370cae5aab029ad6927291a98a9efe26af267e071093c3dd47ca91e493d09af62918c7b749fa7487a8d03df72d3adacb8028f4a349f0430126684486fcafc5e4149d641dc4ea2d6a6087008733a59cecec9348bdf65c5af45f945fddac7dbbf65035a1d34a91ab7ef7bf1f0c3c9684cbb6a107c9cdb27c67c682f4614c486a29551cfcc58eb5a9d034916c4c2b0cb32be444db58a113e097e64ea84379bff37d99f1955aee24fd85", 0xb0, 0x100000001}], 0x1060, &(0x7f0000000540)='erofs\x00') 11:08:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) r2 = openat$autofs(0xffffffffffffff9c, 0xffffffffffffffff, 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000080)={0x100, 0x1, 'client0\x00', 0xffffffff80000001, "d279f17a3b09f961", "46140d0259c70ee11ceb6184d477c5c5246547f519b3bec319d6b8825e0252d5", 0x8, 0x84dc}) syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r3 = gettid() tkill(r3, 0x40020000000c) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='v', 0x1}], 0x1) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x4000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x8001002, 0x7, 0x1}) 11:08:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) getitimer(0x2, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2c00, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000016008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a0005007fffffff03000e12050000000000812fa800080008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x4) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x102) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x8, 0x0, 0x2004, 0xfffffff8, 0x3, 0x5, 0xd73}) [ 268.466307][T10206] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 268.488219][T10214] mmap: syz-executor.4 (10214) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 268.643561][T10206] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock 11:08:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x803, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0xffffff1f) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x1, 0x9, 0x4, 0x200000, 0x1ff, {r3, r4/1000+10000}, {0x2, 0x1, 0x40, 0xff, 0x3, 0x3, "05102794"}, 0x1ff, 0x1, @userptr=0x5, 0xfffff4b5, 0x0, r1}) mq_timedreceive(r5, &(0x7f0000000440)=""/164, 0xa4, 0x5, &(0x7f0000000100)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 11:08:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100000000000000000000000008c8815b45af1c0adec47ba0000005e4589899eb67066aeb076a9366acae70b66"], 0x14}}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400100, 0x0) r4 = socket$inet(0xa, 0x80805, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x6234, 0x2, 0xf87}, &(0x7f0000000100)=0x10) [ 268.845177][T10220] loop0: p1 p2 p3 < > p4 11:08:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r2 = socket$inet(0xa, 0x80805, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r4, 0x7}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x6, 0x14, @link_local}]}}}]}, 0x40}}, 0x0) [ 268.904811][T10220] loop0: partition table partially beyond EOD, truncated [ 268.912419][T10220] loop0: p1 start 10 is beyond EOD, truncated [ 269.084722][T10220] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 269.159108][T10220] loop0: p3 start 225 is beyond EOD, truncated 11:08:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x15}) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 269.243439][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.263411][T10220] loop0: p4 size 3657465856 extends beyond EOD, truncated 11:08:40 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5453, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000480)='./file0\x00', 0x80000001, 0x0, 0x0, 0x18c9842, &(0x7f00000005c0)=ANY=[@ANYBLOB="73657373696fffffffff000000003030303030303030303030302c00197eac101f8e3d1ebaa6a5e50707ed3ad61e4d3b29ec1ed7901625501bd3786b57a5c8e48e733bede71fe76c210bb06d4405c2fe7cf0c72e45bc23d71aee89f0e6cf69e54f774af7a81ad60b17d97a01d3d1a5b7bf68e46874c40b888459e757095fc130d9e0437ac05b8596bc93b061d71f610013148cae2854df87772487e7a54c22cbd817558d2ec1081dc2f1b3c8013ac6aedad19e8a8cfa976cb3a288b9acc8d48710d74ccc191a3027d3ae4352d2e3dfcf79c374d4f800"/226, @ANYRESOCT, @ANYRESHEX=r0]) 11:08:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x2]}, &(0x7f0000000080), &(0x7f0000000180)={0x77359400}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000000)) 11:08:40 executing program 2: getpid() perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r6, 0x5453, 0x0) r7 = dup3(r6, r3, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x800ad21, 0x1, 0x1, r7}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x102, 0x0) fanotify_mark(r9, 0x2, 0x0, r10, &(0x7f0000000380)='./file0\x00') sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local, 0x4}, {0xa, 0x0, 0x4, @mcast1}, r12}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @dev={0xfe, 0x80, [], 0x16}}, r12}}, 0x48) r13 = syz_open_dev$vcsa(0x0, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f00000004c0)={0x0, 0xf1d, 0x0, 'queue0\x00', 0x273}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00') 11:08:40 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000680)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0xa7, 0x4, 0x4, "05390e3e2040f5bcbb92361e5616b6f6", "62108894bca42fbb87a4d21775372270f0412bc4ae57dd06727186c1e774be378de80ff53da17a5528229e7a503a35175d9abb87decdf2e00b6cf09df454d065843b2e78cf7cfd37b1a67077f7b615e1c2e30a22eb8cbea1ef4956335235a597b486a787fbb530f3012a2074240e3d5e152b63c5d69e015f001263a40aea5b802bff9e8b36aae9d949a941a0ce45a74df7cf"}, 0xa7, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5453, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x27a3, 0x5, r2, 0x0, &(0x7f0000000140)={0x9a0914, 0xe4, [], @p_u16=&(0x7f0000000000)=0x2}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xffffff1f) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000640)={@remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d1980000", @ANYRES16=r5, @ANYBLOB="000226bd7000fddbdf25010000000000000008410000001c0018000000046574683a76657468305f746f5f626f6e64000000"], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x0, [], [{0x32, 0x40, 0xfffffffffffffff7, 0xffffffff, 0x5, 0x80000000}, {0x0, 0x3ff, 0x3, 0xffffffffffffb50d, 0xe9e, 0x8000000}], [[], [], [], [], [], []]}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000580)={0xe65, 0x8000, "3d0a8d1e0042b6ee82884321a6b99694d5268591e62698b4", {0x8001, 0xffff0001}, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000600)={0x2, 0x3ff}) 11:08:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = accept4(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000080)=0x80, 0x80800) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x1, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40810) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3}}}}}}]}, 0x48}}, 0x0) 11:08:41 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x7d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2c18}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) 11:08:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000680)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0xa7, 0x4, 0x4, "05390e3e2040f5bcbb92361e5616b6f6", "62108894bca42fbb87a4d21775372270f0412bc4ae57dd06727186c1e774be378de80ff53da17a5528229e7a503a35175d9abb87decdf2e00b6cf09df454d065843b2e78cf7cfd37b1a67077f7b615e1c2e30a22eb8cbea1ef4956335235a597b486a787fbb530f3012a2074240e3d5e152b63c5d69e015f001263a40aea5b802bff9e8b36aae9d949a941a0ce45a74df7cf"}, 0xa7, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5453, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x27a3, 0x5, r2, 0x0, &(0x7f0000000140)={0x9a0914, 0xe4, [], @p_u16=&(0x7f0000000000)=0x2}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xffffff1f) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000640)={@remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d1980000", @ANYRES16=r5, @ANYBLOB="000226bd7000fddbdf25010000000000000008410000001c0018000000046574683a76657468305f746f5f626f6e64000000"], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x0, [], [{0x32, 0x40, 0xfffffffffffffff7, 0xffffffff, 0x5, 0x80000000}, {0x0, 0x3ff, 0x3, 0xffffffffffffb50d, 0xe9e, 0x8000000}], [[], [], [], [], [], []]}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000580)={0xe65, 0x8000, "3d0a8d1e0042b6ee82884321a6b99694d5268591e62698b4", {0x8001, 0xffff0001}, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000600)={0x2, 0x3ff}) 11:08:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffff1f) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000440)=""/240) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000001c0)) 11:08:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x400}) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000140)='threaded\x00', 0xffffff1f) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r3}) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000200)={r8}, 0x8) r9 = dup2(r7, 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r11, @ANYBLOB="01000000000068010000b552923840ea5d1f5aa312e4b0fe7400000000000c41"], 0x2}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000428}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r11, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}}, 0x1) close(r0) 11:08:43 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0x13800000000000, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0xffffff1f) connect$x25(r2, &(0x7f0000000180)={0x9, @remote={[], 0x3}}, 0x12) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)='W', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000080000000000000000000000000000004000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 11:08:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c00000010003b0e000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=r0, @ANYPTR], 0x5}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8000, 0x410080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x28) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000140)='threaded\x00', 0xffffff1f) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl(r4, 0x0, &(0x7f0000000000)="080db5055e0bcfe8478071") 11:08:43 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x90400, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x10600) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000880)="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", 0x1000}], 0x2, 0x55da) exit(0x0) r1 = shmget(0x0, 0x4000, 0xa8000303, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000180)=0x80) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x400000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000240)=0x1e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 11:08:43 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r2 = accept4$packet(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x14, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000300)={r2, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="c4618dc65800b8f3470f09f3400f07460f01c566b814010f00d0430f01c5400f01f80f79d566b831018ed866b80d018ed0", 0x31}], 0x1, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0xffffff1f) write$P9_RWSTAT(r5, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) stat(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x2, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11:08:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000003c0)={r1, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000001540)={0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000001580)={0x0, 0x0, 0x4, 0x0, 0x0, {r5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d8926c37"}, 0x0, 0x0, @fd}) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/361], 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r7 = socket$inet(0xa, 0x80805, 0x0) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000000)={r9, 0x400}, 0x8) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) [ 273.322530][T10348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:08:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000100000000000000000000000010014000000000005000600000000000a00000000000000fffffffffeffffff000000df00000000000000000000000001001600000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0x80}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r2 = socket$inet(0xa, 0x80805, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r4, 0xfffffc01, 0x20}, &(0x7f0000000040)=0xc) 11:08:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x2, 0x9, 0xb4, "5bceca038553bf1c08a4a80abe261741f39a76cb62e2359ef9773b764fd4c1be1c79c2c9e004b2904f7abd93baddb4224ffb162332b1c2c4ab2782f2650862", 0x38}, 0x60) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5453, 0x0) r2 = dup2(r1, 0xffffffffffffffff) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x7, @ipv4={[], [], @multicast1}, 0x8, 0x3}, 0x20) umount2(&(0x7f0000000000)='./bus\x00', 0x1) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc0042, 0x0) sendfile(r3, r0, 0x0, 0x8001) 11:08:44 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}}, r0, 0xc000000000000000, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x18, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}) 11:08:45 executing program 0: syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x7f, 0x2) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xffffff1f) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ecb9cfa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0xffffff1f) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xffffffffa27708d2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000140)='threaded\x00', 0xffffff1f) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, &(0x7f0000000200)=0x1) [ 274.108817][T10368] team0: Device ipvlan1 failed to register rx_handler 11:08:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x20000080}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5453, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) wait4(r3, 0x0, 0x80000000, 0x0) r4 = getpid() getgid() r5 = socket(0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$IOC_PR_REGISTER(r6, 0x401870c8, &(0x7f00000004c0)={0x194, 0x5a9}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) tkill(r4, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x400001000000001b, &(0x7f0000000280)=0x1, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r9 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) [ 274.600990][T10369] team0: Device ipvlan1 failed to register rx_handler 11:08:45 executing program 4: llistxattr(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)=""/158, 0x9e) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000580)=""/242) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x9c, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x3c}, 0x0, @in6=@local, 0x0, 0x3, 0x0, 0x6}}, 0xe8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 275.359121][ T27] audit: type=1804 audit(1580036926.268:31): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir869487544/syzkaller.AnJhiO/13/file0/file0" dev="sda1" ino=16564 res=1 11:08:46 executing program 4: llistxattr(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)=""/158, 0x9e) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000580)=""/242) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x9c, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x3c}, 0x0, @in6=@local, 0x0, 0x3, 0x0, 0x6}}, 0xe8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 11:08:46 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}}, r0, 0xc000000000000000, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x18, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}) [ 275.649572][T10400] team0: Device ipvlan1 failed to register rx_handler 11:08:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) msgget$private(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}, 0x0, 0x0, 0x0, 0x9a1d7a3afdbb1bd4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x0, 0x64}, 'port1\x00', 0xc4, 0x20, 0xed6, 0x8, 0x20, 0xd5, 0x8, 0x0, 0x2, 0x81}) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040004, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) listen(0xffffffffffffffff, 0x7) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 11:08:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffff1f) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6) 11:08:46 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xffffff1f) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f00000021c0)={0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f000064c000/0x1000)=nil, 0x1000, 0xb) 11:08:46 executing program 2: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d5, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000340)={0x9b0000, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9b0970, 0x3ff, [], @p_u32=&(0x7f00000002c0)=0xfffff8b7}}) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4}, 0x8) r5 = dup2(r3, 0xffffffffffffffff) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r6, 0x5453, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r9}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r9, r8}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r7, &(0x7f0000000700)={0xa, 0x4, 0xfa00, {r9}}, 0xc) fstat(r6, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x6, 0x9, &(0x7f0000001900)=[{&(0x7f00000004c0)="c2e4642b3dcd4eda1d62649da60dee52579bcbed", 0x14, 0x4}, {&(0x7f0000000500)="bee7e5372de0e7368c3158cabd915a2920dc32658a86217e79db9e1836e1326789a9c76eff1e6c7d5b7bf547bff7629aee7a8f0400c32e7ffa7a4a1b81763774f8c99e55c24c", 0x46, 0x8}, {&(0x7f0000000580)="8e00659104560d02ee28e63b7230c4c9a3a273935cfc1846ad73ca9a18505f58add0d30efbb3312f49f1f23f22bcaae37b4003a4d608220122c09e6492cea9ee37985cad7bdd4d2d70307d2c9fd7ddefa6691d0f4e641d4aaa43e14d943e5098956f72f29f63a95cb42f9e3d3292f2b96f051ba883", 0x75, 0x6}, {&(0x7f0000000600)="df2d53ce2110168df8df7078a219536b7a228ce91c708f6e0206fb64f76b97bdad2a43316259bd05", 0x28, 0x1}, {&(0x7f0000000640)="30452dac760620cde8216aec4d0921c2838754b0e8270aed51268fcb2ee485c4b3abf5365fe9690e463c0fff710939fa4848664c28958f9d0b5da768429f5a6ea73cad3d359ff5c3494b59fa9dc0951c1fa94df61866baffd708ced4919fea2272995851b138f6c22ffd555e0437d7c416c2224329ceb3f5221d7460cf8a4272f8f40af654f0f44eb1b314", 0x8b, 0x8}, {&(0x7f0000000700), 0x0, 0x100000001}, {&(0x7f0000000740)="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", 0x1000, 0x4}, {&(0x7f0000001840)="ac41f5782d30e48304a99f85352c403651b32a383c98da0cf638d22f5896469d6e4afe24754912e513415fe9a1e6424aca707cd7a2a8dc6f520a2a2776ba0373f4988c55d428ab6342c5fde1dbf0856f3faf0e20e32ec78ed8", 0x59, 0x6}, {&(0x7f00000018c0)="872346bb3835bc326d4835a931005b7eef7d54a7dd6a893c57994bb97f45ef9502c4", 0x22, 0x9}], 0x8101, &(0x7f0000001a80)={[], [{@fsname={'fsname', 0x3d, 'memory.events\x00'}}, {@uid_gt={'uid>', r11}}, {@hash='hash'}, {@subj_type={'subj_type', 0x3d, 'vmnet1ppp0(ppp0'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x32, 0x61, 0x66, 0x36, 0x32, 0x33, 0x64], 0x2d, [0x34, 0x65, 0x32, 0x33], 0x2d, [0x61, 0x33, 0x36, 0x61], 0x2d, [0x0, 0x35, 0x32, 0x34], 0x2d, [0x38, 0x63, 0xf742227ac7704a34, 0x0, 0x61, 0x64, 0x39, 0x33]}}}, {@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 'memory.events\x00'}}]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r13, @ANYBLOB="01000000000068010000b552923840ea5d1f5aa312e4b0fe7400000000000c41"], 0x2}}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r14, &(0x7f0000000140)='threaded\x00', 0xffffff1f) openat$cgroup_ro(r14, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000428}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r13, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000001b40)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="00000083868be497e89c6e00804130af04c195e139fe950c00147388c315945cd113c3a8254f1b652b63bf1080f2b2d91a22503f6c041bfda3af947e97f0622324628edcbccb486ad2f87f024f7457d738320805887ec6f37923691125130d48545b1ec1c939069d95511b"], 0x3}, 0x1, 0x0, 0x0, 0x4040080}, 0x8850) [ 276.150194][T10417] binder: 10408:10417 ioctl 40086602 20000000 returned -22 11:08:47 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}}, r0, 0xc000000000000000, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x18, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}) [ 276.609966][T10412] XFS (loop2): Mounting V4 Filesystem [ 276.725408][T10412] XFS (loop2): empty log check failed [ 276.730858][T10412] XFS (loop2): log mount/recovery failed: error -5 11:08:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0xffffff1f) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x646, 0x230040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xffffff1f) getsockname$netrom(r4, &(0x7f0000000200)={{0x3, @default}, [@netrom, @null, @netrom, @netrom, @bcast, @rose, @netrom, @netrom]}, &(0x7f0000000280)=0x48) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'netpci0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x3, [0x8b1, 0xbd, 0x101]}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x24c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4624, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 276.788800][T10433] team0: Device ipvlan1 failed to register rx_handler [ 276.862974][T10417] binder: 10408:10417 ioctl 40086602 20000000 returned -22 11:08:47 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000200)={0x0, &(0x7f00000000c0)="275041106a909e1b2fc23c0c1291dfd55d299f321a64c7c633b39c420ada51b02a1493d4cc615dca544b215a4f2108ec56e3e2279a214aa2b14633a48fcfa125cc0fb4338ea06a91f79c939ad48fc91b4aeb7ebf7b7e57a83209740b36a3ea36fff6510ffaad037f06eb098b12b13cb1772447644438c014fd0af0a9b9e4e114be47329d8824c711765b12338f63a1c5380898337180fe3df313806ce7c9e517608d8ca6e0d33fedb47e47ce383b86cd", 0xb0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_MCAST_IGMP_VERSION={0x5}]}}}]}, 0x44}}, 0x569ba10aebce7fdf) [ 277.074561][T10412] XFS (loop2): log mount failed 11:08:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) msgget$private(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}, 0x0, 0x0, 0x0, 0x9a1d7a3afdbb1bd4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x0, 0x64}, 'port1\x00', 0xc4, 0x20, 0xed6, 0x8, 0x20, 0xd5, 0x8, 0x0, 0x2, 0x81}) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040004, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) listen(0xffffffffffffffff, 0x7) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 11:08:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_deladdr={0x4c, 0x15, 0x600, 0x70bd2d, 0x25dfdbfb, {0x2, 0x3f, 0x1, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x11}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'bond0\x00'}, @IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44000) open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x108) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xffffff1f) openat$cgroup_ro(r4, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) 11:08:48 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x24002, 0x0) flistxattr(r3, &(0x7f0000000180)=""/222, 0xde) 11:08:48 executing program 2: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d5, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000340)={0x9b0000, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9b0970, 0x3ff, [], @p_u32=&(0x7f00000002c0)=0xfffff8b7}}) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4}, 0x8) r5 = dup2(r3, 0xffffffffffffffff) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r6, 0x5453, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r9}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r9, r8}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r7, &(0x7f0000000700)={0xa, 0x4, 0xfa00, {r9}}, 0xc) fstat(r6, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x6, 0x9, &(0x7f0000001900)=[{&(0x7f00000004c0)="c2e4642b3dcd4eda1d62649da60dee52579bcbed", 0x14, 0x4}, {&(0x7f0000000500)="bee7e5372de0e7368c3158cabd915a2920dc32658a86217e79db9e1836e1326789a9c76eff1e6c7d5b7bf547bff7629aee7a8f0400c32e7ffa7a4a1b81763774f8c99e55c24c", 0x46, 0x8}, {&(0x7f0000000580)="8e00659104560d02ee28e63b7230c4c9a3a273935cfc1846ad73ca9a18505f58add0d30efbb3312f49f1f23f22bcaae37b4003a4d608220122c09e6492cea9ee37985cad7bdd4d2d70307d2c9fd7ddefa6691d0f4e641d4aaa43e14d943e5098956f72f29f63a95cb42f9e3d3292f2b96f051ba883", 0x75, 0x6}, {&(0x7f0000000600)="df2d53ce2110168df8df7078a219536b7a228ce91c708f6e0206fb64f76b97bdad2a43316259bd05", 0x28, 0x1}, {&(0x7f0000000640)="30452dac760620cde8216aec4d0921c2838754b0e8270aed51268fcb2ee485c4b3abf5365fe9690e463c0fff710939fa4848664c28958f9d0b5da768429f5a6ea73cad3d359ff5c3494b59fa9dc0951c1fa94df61866baffd708ced4919fea2272995851b138f6c22ffd555e0437d7c416c2224329ceb3f5221d7460cf8a4272f8f40af654f0f44eb1b314", 0x8b, 0x8}, {&(0x7f0000000700), 0x0, 0x100000001}, {&(0x7f0000000740)="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", 0x1000, 0x4}, {&(0x7f0000001840)="ac41f5782d30e48304a99f85352c403651b32a383c98da0cf638d22f5896469d6e4afe24754912e513415fe9a1e6424aca707cd7a2a8dc6f520a2a2776ba0373f4988c55d428ab6342c5fde1dbf0856f3faf0e20e32ec78ed8", 0x59, 0x6}, {&(0x7f00000018c0)="872346bb3835bc326d4835a931005b7eef7d54a7dd6a893c57994bb97f45ef9502c4", 0x22, 0x9}], 0x8101, &(0x7f0000001a80)={[], [{@fsname={'fsname', 0x3d, 'memory.events\x00'}}, {@uid_gt={'uid>', r11}}, {@hash='hash'}, {@subj_type={'subj_type', 0x3d, 'vmnet1ppp0(ppp0'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x32, 0x61, 0x66, 0x36, 0x32, 0x33, 0x64], 0x2d, [0x34, 0x65, 0x32, 0x33], 0x2d, [0x61, 0x33, 0x36, 0x61], 0x2d, [0x0, 0x35, 0x32, 0x34], 0x2d, [0x38, 0x63, 0xf742227ac7704a34, 0x0, 0x61, 0x64, 0x39, 0x33]}}}, {@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 'memory.events\x00'}}]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r13, @ANYBLOB="01000000000068010000b552923840ea5d1f5aa312e4b0fe7400000000000c41"], 0x2}}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r14, &(0x7f0000000140)='threaded\x00', 0xffffff1f) openat$cgroup_ro(r14, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000428}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r13, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000001b40)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="00000083868be497e89c6e00804130af04c195e139fe950c00147388c315945cd113c3a8254f1b652b63bf1080f2b2d91a22503f6c041bfda3af947e97f0622324628edcbccb486ad2f87f024f7457d738320805887ec6f37923691125130d48545b1ec1c939069d95511b"], 0x3}, 0x1, 0x0, 0x0, 0x4040080}, 0x8850) 11:08:48 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x4, 0x8, 0x800}], 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffff1f) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5453, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0xa30000, 0x4, 0xfffffff8, r2, 0x0, &(0x7f00000001c0)={0xa2093e, 0x800, [], @ptr=0xd68}}) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000030003dfa00000000000000000000000044000100400001000e00010074756e6e000028000280080007000000000008000300ac1e0001ff02000000000000000000000000000104000600000000000000"], 0x58}}, 0x0) [ 278.135208][T10474] XFS (loop2): Mounting V4 Filesystem [ 278.203046][T10488] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.311144][T10474] XFS (loop2): empty log check failed 11:08:49 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x0, 0x300) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x7, 0x300) pipe(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = getpid() ftruncate(0xffffffffffffffff, 0x3) tkill(r2, 0x0) sched_getparam(r2, &(0x7f0000000200)) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r3, 0x5453, 0x0) read(r3, &(0x7f0000000100)=""/144, 0x90) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) [ 278.358282][T10447] syz-executor.0 (10447) used greatest stack depth: 22264 bytes left [ 278.444278][ T7] [ 278.446694][ T7] ===================================== [ 278.452231][ T7] WARNING: bad unlock balance detected! [ 278.457783][ T7] 5.5.0-rc7-syzkaller #0 Not tainted [ 278.463370][ T7] ------------------------------------- [ 278.469096][ T7] kworker/u4:0/7 is trying to release lock (&file->mut) at: [ 278.476532][ T7] [] ucma_event_handler+0x711/0xef0 [ 278.483400][ T7] but there are no more locks to release! [ 278.490166][ T7] [ 278.490166][ T7] other info that might help us debug this: [ 278.498236][ T7] 4 locks held by kworker/u4:0/7: [ 278.503259][ T7] #0: ffff88821aad2528 ((wq_completion)ib_addr){+.+.}, at: process_one_work+0x88b/0x1740 [ 278.513341][ T7] #1: ffffc90000cdfdc0 ((work_completion)(&(&req->work)->work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 278.524664][ T7] #2: ffff88809e4d4390 (&id_priv->handler_mutex){+.+.}, at: addr_handler+0xaf/0x3d0 [ 278.534183][ T7] #3: ffff888095bfe660 (&file->mut){+.+.}, at: ucma_event_handler+0xb3/0xef0 [ 278.543058][ T7] [ 278.543058][ T7] stack backtrace: [ 278.548968][ T7] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.5.0-rc7-syzkaller #0 [ 278.557383][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.567624][ T7] Workqueue: ib_addr process_one_req [ 278.572964][ T7] Call Trace: [ 278.576338][ T7] dump_stack+0x197/0x210 [ 278.580683][ T7] ? ucma_event_handler+0x711/0xef0 [ 278.585946][ T7] print_unlock_imbalance_bug.cold+0x114/0x123 [ 278.592323][ T7] ? ucma_event_handler+0x711/0xef0 [ 278.597540][ T7] lock_release+0x5f2/0x960 [ 278.602211][ T7] ? lock_downgrade+0x920/0x920 [ 278.607133][ T7] ? _raw_spin_unlock_irqrestore+0x90/0xe0 [ 278.613066][ T7] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 278.619058][ T7] __mutex_unlock_slowpath+0x86/0x6a0 [ 278.624453][ T7] ? wait_for_completion+0x440/0x440 [ 278.629840][ T7] ? lockdep_hardirqs_on+0x421/0x5e0 [ 278.635141][ T7] mutex_unlock+0xd/0x10 [ 278.639399][ T7] ucma_event_handler+0x711/0xef0 [ 278.644449][ T7] addr_handler+0x2e9/0x3d0 [ 278.648967][ T7] ? cma_work_handler+0x1f0/0x1f0 [ 278.654087][ T7] ? lockdep_hardirqs_on+0x421/0x5e0 [ 278.659413][ T7] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 278.664957][ T7] ? __this_cpu_preempt_check+0x35/0x190 [ 278.670616][ T7] ? retint_kernel+0x2b/0x2b [ 278.675299][ T7] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 278.681586][ T7] process_one_req+0x106/0x680 [ 278.686505][ T7] process_one_work+0x9af/0x1740 [ 278.691613][ T7] ? pwq_dec_nr_in_flight+0x320/0x320 [ 278.697174][ T7] ? lock_acquire+0x190/0x410 [ 278.701974][ T7] worker_thread+0x98/0xe40 [ 278.706522][ T7] kthread+0x361/0x430 [ 278.710628][ T7] ? process_one_work+0x1740/0x1740 [ 278.715831][ T7] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 278.721558][ T7] ret_from_fork+0x24/0x30 [ 278.734665][T10474] XFS (loop2): log mount/recovery failed: error -5 11:08:49 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffd9a, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a280930a600200ffa84308910000003900080008000a00010000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000", 0x55}], 0x1}, 0x0) [ 278.891084][T10474] XFS (loop2): log mount failed 11:08:50 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='setgroups\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0xffffff1f) getpeername$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r4, 0x5453, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x36, &(0x7f0000000040)="5696c4de0c0c4d3c3d725dfc11727b8b520804c2b22eb9e4a7aa1beafcbedbd19eb46135badd7e58c3f4ffd59b1d8e0d82b0db823fde", 0x8d, 0x0, &(0x7f0000000080)="ee9fc2ffd2dbee3b775f3fc09e53cdd803bc34b860daa94eee6d7ffad02fcfb2ce6c9447252dc4938bc057a1dc370cfce3352642654a0b0547c1bfee0d1fbff1517bf6b64f8889e75c6bd01eae7f13941a2c7119d58ccd1eadefedc3cbb13fa69f0acc28ed5d35476820223279ed39b908f4d2eccdde03eeda8326d9e8f7f0d334551db9ab5a6113f2aa5b2da6"}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1518c2, 0x0) sendfile(r5, r0, 0x0, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000140)='threaded\x00', 0xffffff1f) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000003c0)={r7, @dev={0xac, 0x14, 0x14, 0xd}, @remote}, 0xc) [ 279.274142][T10506] IPv6: Can't replace route, no match found [ 279.312890][T10509] IPv6: Can't replace route, no match found 11:08:50 executing program 4: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) mlockall(0x1) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2008001) r2 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x0, 0xfffffffffffffffd}]) 11:08:50 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x0, 0x300) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x7, 0x300) pipe(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = getpid() ftruncate(0xffffffffffffffff, 0x3) tkill(r2, 0x0) sched_getparam(r2, &(0x7f0000000200)) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r3, 0x5453, 0x0) read(r3, &(0x7f0000000100)=""/144, 0x90) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) 11:08:50 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x20043, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bond_slave_1\x00'}, 0x18) ioctl$TCSETSW(r0, 0x5453, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5453, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r3, 0x5453, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000680)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000006c0)={0x3, 0x2, 0x4, 0x100, 0x1000, {0x77359400}, {0x5, 0x2, 0x0, 0x80, 0x6, 0x4, "553b5ec6"}, 0x0, 0x3, @userptr=0x7, 0xffff, 0x0, 0xffffffffffffffff}) recvfrom$inet(r5, &(0x7f0000000740)=""/101, 0x65, 0x100, &(0x7f00000007c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xffffffffffffff19) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000140)='threaded\x00', 0xffffff1f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet_mreqn(r8, 0x0, 0x4, &(0x7f0000000280)={@rand_addr, @loopback}, 0xc) [ 279.804004][ T27] audit: type=1804 audit(1580036930.708:32): pid=10513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir370289044/syzkaller.NmIfWj/13/bus" dev="sda1" ino=16553 res=1 [ 279.923946][T10522] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 0, id = 0 [ 279.925553][T10521] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.018440][ T27] audit: type=1800 audit(1580036930.928:33): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16553 res=0 [ 280.047046][T10521] device ip6gretap0 entered promiscuous mode [ 280.053300][T10521] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. 11:08:51 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='setgroups\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0xffffff1f) getpeername$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r4, 0x5453, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x36, &(0x7f0000000040)="5696c4de0c0c4d3c3d725dfc11727b8b520804c2b22eb9e4a7aa1beafcbedbd19eb46135badd7e58c3f4ffd59b1d8e0d82b0db823fde", 0x8d, 0x0, &(0x7f0000000080)="ee9fc2ffd2dbee3b775f3fc09e53cdd803bc34b860daa94eee6d7ffad02fcfb2ce6c9447252dc4938bc057a1dc370cfce3352642654a0b0547c1bfee0d1fbff1517bf6b64f8889e75c6bd01eae7f13941a2c7119d58ccd1eadefedc3cbb13fa69f0acc28ed5d35476820223279ed39b908f4d2eccdde03eeda8326d9e8f7f0d334551db9ab5a6113f2aa5b2da6"}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1518c2, 0x0) sendfile(r5, r0, 0x0, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000140)='threaded\x00', 0xffffff1f) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000003c0)={r7, @dev={0xac, 0x14, 0x14, 0xd}, @remote}, 0xc) 11:08:51 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x0, 0x300) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x7, 0x300) pipe(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = getpid() ftruncate(0xffffffffffffffff, 0x3) tkill(r2, 0x0) sched_getparam(r2, &(0x7f0000000200)) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r3, 0x5453, 0x0) read(r3, &(0x7f0000000100)=""/144, 0x90) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) 11:08:51 executing program 4: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) mlockall(0x1) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2008001) r2 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x0, 0xfffffffffffffffd}]) 11:08:51 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x0, 0x300) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x7, 0x300) pipe(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = getpid() ftruncate(0xffffffffffffffff, 0x3) tkill(r2, 0x0) sched_getparam(r2, &(0x7f0000000200)) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r3, 0x5453, 0x0) read(r3, &(0x7f0000000100)=""/144, 0x90) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) [ 280.710511][T10521] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.041519][ T27] audit: type=1804 audit(1580036931.948:34): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir370289044/syzkaller.NmIfWj/14/bus" dev="sda1" ino=16586 res=1 [ 287.985188][ T0] NOHZ: local_softirq_pending 08