[ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. Starting Load/Save RF Kill Switch Status... [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts. 2020/09/08 09:35:34 fuzzer started 2020/09/08 09:35:35 dialing manager at 10.128.0.26:45095 2020/09/08 09:35:35 syscalls: 3333 2020/09/08 09:35:35 code coverage: enabled 2020/09/08 09:35:35 comparison tracing: enabled 2020/09/08 09:35:35 extra coverage: enabled 2020/09/08 09:35:35 setuid sandbox: enabled 2020/09/08 09:35:35 namespace sandbox: enabled 2020/09/08 09:35:35 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/08 09:35:35 fault injection: enabled 2020/09/08 09:35:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/08 09:35:35 net packet injection: enabled 2020/09/08 09:35:35 net device setup: enabled 2020/09/08 09:35:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/08 09:35:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/08 09:35:35 USB emulation: enabled 2020/09/08 09:35:35 hci packet injection: enabled 09:38:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000002c0)) 09:38:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x75, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qrtr-tun\x00', 0x0) 09:38:41 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045002, &(0x7f0000000040)) 09:38:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, &(0x7f0000000140)={'batadv_slave_0\x00'}) geteuid() 09:38:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4188aea7, &(0x7f0000000000)) 09:38:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, 0x0, &(0x7f0000000140), 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000240)) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000500)={0x8}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f00000000c0)={{{0x7, 0x1}}, 0x8b, 0x401, &(0x7f0000000000)="10a9bd3af3b9ade71b1121c7478347462767baeff2a1311620f7988739c0847c6e8d7e09da84a6b379f63f97c9ac9630d8b2321c473d97d7405c48db782d047d2a947238799fd0f2de5256926399a8e091d737f9c83408e49d4599efc8d4d8ffed4180686e99533c6982c6de9a96a7edc5c50f82d64402c413edd81017a42e6a822b63bd0c0acb51fcfa82"}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x7, 0x1}}, 0xb7, 0x401, &(0x7f0000000000)="10a9bd3af3b9ade71b1121c7478347462767baeff2a1311620f7988739c0847c6e8d7e09da84a6b379f63f97c9ac9630d8b2321c473d97d7405c48db782d047d2a947238799fd0f2de5256926399a8e091d737f9c83408e49d4599efc8d4d8ffed4180686e99533c6982c6de9a96a7edc5c50f82d64402c413edd81017a42e6a822b63bd0c0acb51fcfa82fdb0c06b40a8ec1a798cde4836de6ba93b989eb29ba8f8870b7b1df49e2bbec37d41580240bf50508e4f75ed"}) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000640)=@netrom) syzkaller login: [ 247.363619][ T6882] IPVS: ftp: loaded support on port[0] = 21 [ 247.486668][ T6884] IPVS: ftp: loaded support on port[0] = 21 [ 247.635677][ T6882] chnl_net:caif_netlink_parms(): no params data found [ 247.759694][ T6886] IPVS: ftp: loaded support on port[0] = 21 [ 247.982540][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.998592][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.012643][ T6882] device bridge_slave_0 entered promiscuous mode [ 248.055759][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 248.070629][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.081638][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.091318][ T6882] device bridge_slave_1 entered promiscuous mode [ 248.136813][ T6882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.141001][ T6888] IPVS: ftp: loaded support on port[0] = 21 [ 248.245907][ T6890] IPVS: ftp: loaded support on port[0] = 21 [ 248.277940][ T6882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.392295][ T6892] IPVS: ftp: loaded support on port[0] = 21 [ 248.564886][ T6882] team0: Port device team_slave_0 added [ 248.577789][ T6882] team0: Port device team_slave_1 added [ 248.615179][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.624554][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.634097][ T6884] device bridge_slave_0 entered promiscuous mode [ 248.693218][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.706887][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.719043][ T6884] device bridge_slave_1 entered promiscuous mode [ 248.726607][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 248.742022][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.749834][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.778598][ T6882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.795333][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.805089][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.832442][ T6882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.935159][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.982100][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.023712][ T6882] device hsr_slave_0 entered promiscuous mode [ 249.032940][ T6882] device hsr_slave_1 entered promiscuous mode [ 249.065604][ T6884] team0: Port device team_slave_0 added [ 249.075748][ T6884] team0: Port device team_slave_1 added [ 249.147759][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.155187][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.166341][ T6886] device bridge_slave_0 entered promiscuous mode [ 249.180859][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.189652][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.220777][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.254589][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.268031][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.276230][ T6886] device bridge_slave_1 entered promiscuous mode [ 249.296264][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.303590][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.332119][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.344696][ T2547] Bluetooth: hci0: command 0x0409 tx timeout [ 249.450903][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 249.490546][ T6884] device hsr_slave_0 entered promiscuous mode [ 249.499352][ T2547] Bluetooth: hci1: command 0x0409 tx timeout [ 249.506450][ T6884] device hsr_slave_1 entered promiscuous mode [ 249.514010][ T6884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.522731][ T6884] Cannot create hsr debugfs directory [ 249.564527][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.582784][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 249.632372][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.747779][ T2547] Bluetooth: hci2: command 0x0409 tx timeout [ 249.775554][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 249.819281][ T6886] team0: Port device team_slave_0 added [ 249.884750][ T6886] team0: Port device team_slave_1 added [ 249.979463][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 250.015412][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.028619][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.037241][ T6888] device bridge_slave_0 entered promiscuous mode [ 250.048756][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.055948][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.085804][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.107062][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.115416][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.145580][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.187633][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.195487][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.205599][ T6888] device bridge_slave_1 entered promiscuous mode [ 250.215468][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.225460][ T2547] Bluetooth: hci4: command 0x0409 tx timeout [ 250.233552][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.242810][ T6890] device bridge_slave_0 entered promiscuous mode [ 250.266119][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.274934][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.286617][ T6892] device bridge_slave_0 entered promiscuous mode [ 250.309018][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.322853][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.334779][ T6890] device bridge_slave_1 entered promiscuous mode [ 250.347810][ T6882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.369309][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.377153][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.387097][ T2834] Bluetooth: hci5: command 0x0409 tx timeout [ 250.394858][ T6892] device bridge_slave_1 entered promiscuous mode [ 250.433682][ T6882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.473065][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.492849][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.503179][ T6882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.516644][ T6882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.540409][ T6886] device hsr_slave_0 entered promiscuous mode [ 250.552683][ T6886] device hsr_slave_1 entered promiscuous mode [ 250.561076][ T6886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.569761][ T6886] Cannot create hsr debugfs directory [ 250.580403][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.596806][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.624078][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.636790][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.726372][ T6890] team0: Port device team_slave_0 added [ 250.733505][ T6884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.751894][ T6884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.767949][ T6892] team0: Port device team_slave_0 added [ 250.782061][ T6888] team0: Port device team_slave_0 added [ 250.793863][ T6890] team0: Port device team_slave_1 added [ 250.812771][ T6884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.842127][ T6892] team0: Port device team_slave_1 added [ 250.853684][ T6888] team0: Port device team_slave_1 added [ 250.876204][ T6884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.934367][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.953688][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.985819][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.023027][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.033626][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.061416][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.076030][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.083755][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.112108][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.126458][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.135032][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.163950][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.177953][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.185564][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.217634][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.252237][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.252256][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.252266][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.318252][ T6890] device hsr_slave_0 entered promiscuous mode [ 251.326211][ T6890] device hsr_slave_1 entered promiscuous mode [ 251.339602][ T6890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.350174][ T6890] Cannot create hsr debugfs directory [ 251.412939][ T6892] device hsr_slave_0 entered promiscuous mode [ 251.421295][ T2834] Bluetooth: hci0: command 0x041b tx timeout [ 251.432782][ T6892] device hsr_slave_1 entered promiscuous mode [ 251.440712][ T6892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.440748][ T6892] Cannot create hsr debugfs directory [ 251.531802][ T6888] device hsr_slave_0 entered promiscuous mode [ 251.545349][ T6888] device hsr_slave_1 entered promiscuous mode [ 251.554003][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.562708][ T6888] Cannot create hsr debugfs directory [ 251.587763][ T2547] Bluetooth: hci1: command 0x041b tx timeout [ 251.786519][ T6886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.804050][ T6882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.822966][ T2547] Bluetooth: hci2: command 0x041b tx timeout [ 251.826990][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.855159][ T6886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.875346][ T6886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.922882][ T6886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.977678][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.986092][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.016431][ T6882] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.043701][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.053210][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.067990][ T2834] Bluetooth: hci3: command 0x041b tx timeout [ 252.093751][ T6884] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.122488][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.133857][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.149950][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.157617][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.172618][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.181573][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.195767][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.203136][ T2466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.211959][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.269261][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.286811][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.297697][ T2834] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.304951][ T2834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.316369][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.326197][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.335979][ T2834] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.343684][ T2834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.352660][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.362797][ T6890] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.367869][ T2547] Bluetooth: hci4: command 0x041b tx timeout [ 252.400944][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.413707][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.425497][ T6890] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.437071][ T6890] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.457622][ T2547] Bluetooth: hci5: command 0x041b tx timeout [ 252.464894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.524996][ T6892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.535087][ T6890] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.552764][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.576324][ T6892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.594705][ T6892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.605858][ T6892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.635585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.645984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.655169][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.665878][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.675082][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.684089][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.693018][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.701714][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.712651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.721342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.758664][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.767205][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.776747][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.785637][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.813880][ T6884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.829144][ T6888] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.850977][ T6888] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.867787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.876218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.908779][ T6888] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.931018][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.939911][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.953807][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.986906][ T6888] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.064017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.075835][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.084021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.096225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.116078][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.132696][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.141255][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.154776][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.169103][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.210479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.223530][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.232948][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.240099][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.249049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.258485][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.314063][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.326065][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.336525][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.346944][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.354095][ T8180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.363491][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.410808][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.421707][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.431846][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.442218][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.452336][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.462764][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.507722][ T2834] Bluetooth: hci0: command 0x040f tx timeout [ 253.554783][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.604950][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.631160][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.640219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.649984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.661576][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.670479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.679276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.688457][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.699941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.708349][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.716003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.726340][ T17] Bluetooth: hci1: command 0x040f tx timeout [ 253.749451][ T6882] device veth0_vlan entered promiscuous mode [ 253.762240][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.772115][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.780576][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.789316][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.802095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.810885][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.823618][ T6884] device veth0_vlan entered promiscuous mode [ 253.834881][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.848648][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.856559][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.875246][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.891440][ T6890] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.911667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.915790][ T17] Bluetooth: hci2: command 0x040f tx timeout [ 253.921605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.934708][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.941883][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.950716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.972989][ T6882] device veth1_vlan entered promiscuous mode [ 253.991842][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.005375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 254.013861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.028278][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.036644][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.043793][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.057843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.066408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.075049][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.082211][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.095318][ T6884] device veth1_vlan entered promiscuous mode [ 254.124392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.134668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.144813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.147847][ T8180] Bluetooth: hci3: command 0x040f tx timeout [ 254.154546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.168466][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.175507][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.183247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.247961][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.256943][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.267530][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.275045][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.285895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.295287][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.304472][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.313829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.323045][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.332146][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.360401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.368871][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.377227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.386639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.395288][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.404676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.414072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.424041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.436878][ T17] Bluetooth: hci4: command 0x040f tx timeout [ 254.453647][ T6890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.465774][ T6890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.480714][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.507904][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.516656][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.532460][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.543469][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.548286][ T8180] Bluetooth: hci5: command 0x040f tx timeout [ 254.562461][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.573832][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.586052][ T6882] device veth0_macvtap entered promiscuous mode [ 254.606183][ T6882] device veth1_macvtap entered promiscuous mode [ 254.616714][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.637770][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.646188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.656759][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.665917][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.693701][ T6892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.712599][ T6892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.727061][ T6884] device veth0_macvtap entered promiscuous mode [ 254.736688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.748815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.757332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.766634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.775969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.785008][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.792190][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.806141][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.834947][ T6884] device veth1_macvtap entered promiscuous mode [ 254.842337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.851463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.863793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.873084][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.904052][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.927854][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.936672][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.946757][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.953959][ T7341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.962155][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.971182][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.980112][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.989057][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.999789][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.008904][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.016394][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.049547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.066924][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.081875][ T6882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.092841][ T6882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.103043][ T6882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.112109][ T6882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.134962][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 255.148878][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.161451][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.183742][ T6886] device veth0_vlan entered promiscuous mode [ 255.197072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.216471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.226194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.241458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.250850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.260150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.269424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.278138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.286156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.307510][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.316491][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.325965][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.335081][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.351588][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 255.366162][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.379596][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.392783][ T6886] device veth1_vlan entered promiscuous mode [ 255.434402][ T6888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.455343][ T6888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.466826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.476317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.485767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.494951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.504529][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.514764][ T6884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.528540][ T6884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.537259][ T6884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.547086][ T6884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.578068][ T2834] Bluetooth: hci0: command 0x0419 tx timeout [ 255.594200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.602102][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.620095][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.682140][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.691684][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.701241][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.710412][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.718299][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.738988][ T2834] Bluetooth: hci1: command 0x0419 tx timeout [ 255.780164][ T2547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.808751][ T2547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.830723][ T6886] device veth0_macvtap entered promiscuous mode 09:38:50 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000001b80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffff070000e7ffffffff0100000018000180140002006970365f76746930"], 0x2c}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) connect(r2, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 255.918126][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.926074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.941500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 09:38:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 255.995532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.022366][ T6890] device veth0_vlan entered promiscuous mode [ 256.035467][ T17] Bluetooth: hci2: command 0x0419 tx timeout [ 256.070137][ T6886] device veth1_macvtap entered promiscuous mode [ 256.113776][ T6890] device veth1_vlan entered promiscuous mode [ 256.132677][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.144806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 09:38:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0x4) [ 256.160216][ T8212] input: syz1 as /devices/virtual/input/input5 [ 256.162217][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.205309][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.263255][ T17] Bluetooth: hci3: command 0x0419 tx timeout [ 256.310603][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.320727][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.331387][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.358644][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.378114][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 256.400527][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.412318][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 256.425831][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.439307][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.451779][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 09:38:51 executing program 0: r0 = socket(0x23, 0x80002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x2000000c, &(0x7f0000000100)={0x0, 0x50}}, 0x0) [ 256.464152][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.467766][ T2834] Bluetooth: hci4: command 0x0419 tx timeout [ 256.475561][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 256.491254][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.503463][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 09:38:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x28}}, 0x0) [ 256.555127][ T6890] device veth0_macvtap entered promiscuous mode 09:38:51 executing program 0: r0 = socket(0x11, 0x2, 0x0) connect$pptp(r0, 0x0, 0xffffffffffffff96) r1 = socket(0x29, 0x2, 0x2e2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf2504000000340001801400020076657468305f766972745f776966690014000200766c616e30000000000000000000000008000300030000005c00010000000000766c616e300000000000000000000000000000000000140002006e657464657673696d30000000000000140002007465616d5f736c6176655f310000000008000100"/154, @ANYRES32=0x0, @ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x20040010}, 0x8010) r3 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @remote, 0x2}, @ipx={0x4, 0x0, 0x0, "6c44e2f704cc"}, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote}}, 0x1e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept$alg(r4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x0, 'batadv_slave_1\x00', {0x1}, 0x60}) [ 256.604963][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.618951][ T2834] Bluetooth: hci5: command 0x0419 tx timeout [ 256.631411][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.650677][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.666117][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.684780][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 09:38:51 executing program 1: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0x0, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='\x00'}, 0x10) pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) write$rfkill(r2, &(0x7f0000000040), 0x2000) [ 256.735843][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.768773][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.783849][ C1] hrtimer: interrupt took 33938 ns [ 256.806004][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.839471][ T6886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.868877][ T6886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.904661][ T6886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.923034][ T6886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.936202][ T6892] device veth0_vlan entered promiscuous mode [ 256.966888][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.007991][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.038905][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.050821][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.060768][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.072251][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.085689][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.101005][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.116275][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.139764][ T6890] device veth1_macvtap entered promiscuous mode [ 257.156672][ T6888] device veth0_vlan entered promiscuous mode [ 257.174014][ T6892] device veth1_vlan entered promiscuous mode [ 257.186633][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.201341][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 09:38:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x80, 0x7, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0xb7, 0x0, 0x3, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x38, 0x0, 0x3, 0x2, 0x0, 0x788, 0x42080, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x3, 0x80}, 0x10100, 0x9, 0x401, 0x4, 0x5, 0x1, 0x2}, 0xffffffffffffffff, 0x0, r2, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0xfff, 0x7, 0x0, 0x100}, {0x1, 0x8, 0x0, 0x8}, {0x8, 0x3f, 0x0, 0x3ff}, {0x6, 0x5, 0x0, 0x4}, {0x2, 0x17, 0x3f}, {0xd0c, 0x6, 0x12, 0x6}, {0x2, 0x18, 0x46}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000002c0)={0x0, 0xfff, 0x905}) [ 257.256059][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.269431][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.300938][ T6888] device veth1_vlan entered promiscuous mode [ 257.319200][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 257.345541][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.370360][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 257.389286][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.405433][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 257.427397][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.442773][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.465823][ T6892] device veth0_macvtap entered promiscuous mode [ 257.521976][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.580074][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 09:38:52 executing program 2: pselect6(0x6400, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) [ 257.668507][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.677354][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.723933][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.733821][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.746694][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.786470][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.805424][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.825978][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.850450][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.868968][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.915817][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.980765][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.004034][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.078180][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.110528][ T6892] device veth1_macvtap entered promiscuous mode [ 258.132240][ T6890] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.158853][ T6890] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.226265][ T6890] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.270914][ T6890] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.347805][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.401802][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.419329][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.445713][ T6888] device veth0_macvtap entered promiscuous mode [ 258.464518][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.483223][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.505211][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.524877][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.535819][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.557880][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.578132][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.604317][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.630940][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.667246][ T6888] device veth1_macvtap entered promiscuous mode [ 258.684251][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.696337][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.716702][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.727362][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.784754][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.806395][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.827988][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.852106][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.875276][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.894721][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.907357][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.927318][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.951865][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.010512][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.024752][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.056304][ T6892] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.074465][ T6892] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.110745][ T8260] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 259.121281][ T6892] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.175072][ T6892] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.247839][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.277493][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.287358][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.313633][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.337504][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.357474][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.369039][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.381896][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.413405][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.426875][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.439712][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.466567][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.488958][ T2834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.506949][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.543811][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.558272][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.569756][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.581745][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.593968][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.604493][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.625794][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.635739][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.647260][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.659959][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.673183][ T2547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.683760][ T2547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.696611][ T6888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.710137][ T6888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.722802][ T6888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.734984][ T6888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.886889][ T8274] usb usb2: usbfs: process 8274 (syz-executor.5) did not claim interface 0 before use 09:38:54 executing program 3: bpf$ENABLE_STATS(0x8, 0x0, 0x0) 09:38:54 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/adsp1\x00', 0x0, 0x0) [ 259.933960][ T8274] usb usb2: usbfs: process 8274 (syz-executor.5) did not claim interface 0 before use 09:38:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-camellia-aesni)\x00'}, 0x58) 09:38:54 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000300)=@v2={0x0, 0x0, 0x0, 0x0, 0x3c, "a5e149df3048d486d14cba27da6aed8119f420af6f7526234dbb889a8c1c99860051cba353cb440899cbde4b1d3fd7c9820d2b56604845c5aa5ea13c"}, 0x45, 0x0) setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@ng, 0x2, 0x0) 09:38:54 executing program 1: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x8010, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 09:38:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 09:38:54 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x9}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 09:38:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x2c8, 0x3, 0x218, 0xd0, 0x240, 0x240, 0x0, 0x0, 0x180, 0x328, 0x328, 0x180, 0x328, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x1, 0x6}}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 09:38:54 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014092108ab12a190eb0900000001090224"], 0x0) 09:38:54 executing program 4: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) mmap$xdp(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x13, r0, 0x0) mmap$xdp(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 260.309885][ T8308] SET target dimension over the limit! 09:38:55 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) bind$can_raw(r0, &(0x7f0000000200), 0x10) 09:38:55 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x18, r0, 0xf07, 0x0, 0x0, {0x2, 0x6}, [@HEADER={0x4}]}, 0x18}}, 0x0) 09:38:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket(0x10, 0x3, 0xc) sendmmsg$alg(r1, &(0x7f0000003280)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="100200000102ade96a02c3813985b185", 0xa}], 0x300, 0x0, 0x0, 0xa381e5ec56af0e20}], 0x492492492492357, 0x12) 09:38:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/205, 0xcd}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 260.473103][ T8189] usb (null): failed to copy DMA map 09:38:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x500, 0x0, 0x0) [ 260.603036][ T8333] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.3'. 09:38:55 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) fcntl$setownex(r0, 0x7, &(0x7f00000039c0)) 09:38:55 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) [ 260.667831][ T8189] usb 1-1: new high-speed USB device number 2 using dummy_hcd 09:38:55 executing program 4: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x89a1, &(0x7f0000000000)={@local}) 09:38:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) socket(0x2, 0x3, 0x200000000000ff) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)={'raw\x00'}, &(0x7f0000000780)=0x54) r0 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000001800)={0xac, r0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdca3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40) [ 260.841149][ T27] audit: type=1326 audit(1599557935.624:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8340 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 09:38:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 260.947944][ T8189] usb 1-1: Using ep0 maxpacket: 8 [ 261.068116][ T8189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.085010][ T8189] usb 1-1: config 0 has no interfaces? [ 261.144317][ T8189] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 261.222808][ T8189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.296488][ T8189] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 261.364008][ T8348] IPVS: ftp: loaded support on port[0] = 21 [ 261.600777][ T27] audit: type=1326 audit(1599557936.384:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8340 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 262.032587][ T8349] IPVS: ftp: loaded support on port[0] = 21 09:38:58 executing program 0: r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket(0x15, 0x5, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:38:58 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x140, 0x140, 0x148, 0x140, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@ipv4={[], [], @private}, @private1, [], [], 'veth0_to_bridge\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 09:38:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000e17a80d2dccd47039be68c59179000000fa7cc9bc1f5866aa9ab19c2ee474da060e0b8a44c93a980900537c738c7edf5b3d24e32aa20e6edb92d888db42e3a593b2934d2ee48a221ba73ec696b643ce5302058d96d03e440280343212805af87abff6c1f3cbed74e442222b60ba4f9c1b690fff56a54cbb34547bbee68609058b3833f04be204583fa3a8e8b243a7716b", @ANYRES16=r1, @ANYBLOB="0100000000000000000025000000bbb3625f733a5ddf8703ed2685bad8bdff0751910c9b4f181dc829af434e7e299401d169c43b7dc7f046cb4034142d54ca683e6b322111438dc643258d73702ea4433049c2efa1d94387057fc23484d4f1e5282fc1cfafa337d7f2e508ee000a030b886828708da7aad149ea4d8d0bd617"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200"/16], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1107], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@ipv6_getnetconf={0x34, 0x52, 0x200, 0x0, 0x0, {}, [@NETCONFA_PROXY_NEIGH={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xa64}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffb}, @NETCONFA_RP_FILTER={0x8}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 09:38:58 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 09:38:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20007, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/250, 0x3b, 0xfa, 0x8}, 0x20) [ 263.311023][ T17] usb 1-1: USB disconnect, device number 2 [ 263.466524][ T8402] BPF: type_id=0 offset=0 size=0 [ 263.531430][ T8402] BPF: 09:38:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x26e1, 0x0) write$UHID_INPUT(r0, &(0x7f00000015c0)={0x8, {"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", 0x1000}}, 0xfffffd6d) 09:38:58 executing program 2: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000100)=0x1, 0x4) [ 263.565846][ T8402] BPF:Invalid type_id [ 263.574587][ T2538] tipc: TX() has been purged, node left! [ 263.661521][ T8402] BPF: [ 263.661521][ T8402] 09:38:58 executing program 0: r0 = socket(0x29, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtaction={0x1000, 0x30, 0x0, 0x0, 0x0, {}, [{0x1fc, 0x1, [@m_vlan={0x144, 0x0, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c}]}, {0xe1, 0x6, "916cc07c9b0595464712a0ee8a3aab67d2c693ccc8ff1d23a9c5e122f25fc9d6420ead49cfb940e896536863c10641b34a08ce4e99dffdd973bec1db8e3222af3d1f809e5ee969d0f9de34487d4f2d3458b3a904f2fd3be25d2d8c7a6bf3c6494c14fee8b1db6b7524cf7dd9013d923b19850a9a7420e0da11ef3894ccfe113f1c76e7a72da2ca732c8bfd475751886c93ed59bc3e402087be82747b801894e9043a0c24a9b910d24c3cbddccda2a703b947a871aa260afc87fca89e3f0295a6f17723cd18f78316d9b9cfa8ca7a04df56330c43483163ddbbefd35464"}, {0xc}, {0xc}}}, @m_mirred={0xb4, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x5, 0x6, 'W'}, {0xc}, {0xc}}}]}, {0xdf0, 0x1, [@m_ct={0x40, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0xd, 0x6, "976e94be037e1cfb89"}, {0xc}, {0xc}}}, @m_csum={0xdac, 0x0, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0xd7d, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x1000}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000066c0)={0x0, 0x0, &(0x7f0000006680)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 263.724080][ T8417] BPF: type_id=0 offset=0 size=0 [ 263.772617][ T8417] BPF: [ 263.793679][ T8417] BPF:Invalid type_id [ 263.826163][ T8417] BPF: [ 263.826163][ T8417] 09:38:58 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$usbmon(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) 09:38:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x2, 0x20001) write$midi(r0, &(0x7f00000001c0)='j', 0xffffff1f) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)) 09:39:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) 09:39:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="8500000005000000350000000000000085000000080000009500000000000000f4670880261ec0c956ce3503200ffa956445c037c5a142dfa8d76287066c5197fabd5f7010e81ae0b737126ea6f7dc39cd34d5aeed8d38e65cb6adac27d75c71ef0fc265561f22acf483e22ff5f6a6713adde54704d25c79949c23e2eb15d7f409e0c4210255a2e194f448eb264f51320e1382c0f8612c10b109edb450b0d3712c7e93363af3c075ff1e23166a32d95433bb755a2dd576090c4867a7b68536b2413d92e96c7209d031f40f3012e9576e51a7f550afc852003b2f7846c744ae6af3e4195cc03710212324d85cec074c6949e1298901ebb39522f6649dd76d0647fe5f17fdab0f4104dbaba46aa43a815b1e5c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c110ef4b253d110ee282ab76f593d928cf95846be6277c04b8c5324812696b623cd8a4f8dc8dcba00b1b2d2547c45b0c52087b5efabf8496b9a951667d510ba0e37b56c0ebfb19a34268335648e1f844ce328c10752a42dca52fb98c1452b6518a6e06297f7b2744419a2f238f173d0cd46dafc6ac550075d9c07d8d591a4dac604bf45c31b78863e629b3b2246dfe551a8be8deb545340244821d69f42377805f7425266d88c61f27d1211de055695d0e0365f5794c2ec85b7c47af0d28336b9a107c007bf860baab2aff412dcee9168394c065d205b89c26620982a4b07580ee67478d1eefb7c01bc3c7fc9165b9fc237cd0dbe6a901506e0b972fdca9fa9448388fe59c2febbe7117882463bd88d6964a895b7040736b245230b8486e6c4d6157fe34b4f837208ec2d407369428b2fac73477b43953fd9f6a1eaf690f23d6aab110cdb8423544a8a13b98ed431d475a58d486e1f4e9bc134e944e4ec6e76e0bca5ce21dbfe1269370870000000087d1444e91cf6f8879cf948c6cf5e61617137b9888b1288b6fa31ab6e504f6f01ef2633e4e677b18644805532757f2aa7acb7891a010f013ea00f50aa5abb349"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 09:39:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)="0d6e018e8849cf762dc7ce28f214064cbb9556f5c9dc87086067a67df4550485", 0x20}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 09:39:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x5, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x48}}, 0x0) 09:39:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 09:39:10 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x2, @in={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @local, 0x4}, @hci, 0x4}) 09:39:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') 09:39:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000005e0001177d4b72de89e9fdbe753cbaab92dcbc8b52"], 0x2c}], 0x1}, 0x0) 09:39:10 executing program 5: syz_genetlink_get_family_id$smc(&(0x7f0000000200)='SMC_PNETID\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 09:39:10 executing program 2: iopl(0x3) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) 09:39:10 executing program 0: syz_mount_image$afs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000017c0)='./file1\x00', &(0x7f0000001800)='bpf\x00', 0x14, 0x0) 09:39:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@unspec, 0xc) 09:39:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x40) 09:39:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') rt_sigprocmask(0x0, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 09:39:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x45040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x181100, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) 09:39:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff7e) 09:39:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)={0xa, 0x4e20, 0x0, @remote, 0xfffffffc}, 0x1c) 09:39:10 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x1, [], 0x0, 0x16, r2, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x8, 0xc5a0, 0xe5fb}, 0x10}, 0x78) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x7) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x12, r3, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000f, 0xb03bb99b2dea6cb1, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x7) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0) 09:39:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) getpgid(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200004) statx(0xffffffffffffffff, 0x0, 0x100, 0x9, &(0x7f0000002bc0)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1800c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000000)) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x7, 0x1, {0xb, '/dev/vcsa#\x00'}}, 0x14) 09:39:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 275.894371][ T27] audit: type=1804 audit(1599557950.674:4): pid=8496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir750886605/syzkaller.8U0YRm/8/bus" dev="sda1" ino=15790 res=1 errno=0 09:39:10 executing program 0: set_mempolicy(0x1, 0x0, 0x0) fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) [ 276.148191][ T27] audit: type=1804 audit(1599557950.934:5): pid=8513 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir662221987/syzkaller.ABngo9/10/bus" dev="sda1" ino=15825 res=1 errno=0 09:39:11 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) exit(0x0) dup2(r1, r0) 09:39:11 executing program 3: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=@ccm_128={{0x303}, "ed60d8d5677a635f", "86f7a7c07d32dc63eff6e62500b45e96", 'uvDq', "34f84dc2413b9fc2"}, 0x28) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000004a40)) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000200)=""/128, 0x80, 0x101, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x101c01) write$6lowpan_control(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x24, 0xc5d}, 0x40) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x2000) [ 276.196950][ T8495] IPVS: ftp: loaded support on port[0] = 21 09:39:11 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000000)) 09:39:11 executing program 0: set_mempolicy(0x3, &(0x7f0000000380)=0x7fff, 0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) 09:39:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x50, "fcc402", "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"}}, 0x110) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x5411, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) [ 276.624627][ T27] audit: type=1804 audit(1599557951.394:6): pid=8535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir750886605/syzkaller.8U0YRm/8/bus" dev="sda1" ino=15790 res=1 errno=0 [ 276.821386][ T27] audit: type=1804 audit(1599557951.404:7): pid=8507 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir750886605/syzkaller.8U0YRm/8/bus" dev="sda1" ino=15790 res=1 errno=0 [ 276.894624][ T8498] IPVS: ftp: loaded support on port[0] = 21 [ 276.961097][ T27] audit: type=1804 audit(1599557951.434:8): pid=8507 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir750886605/syzkaller.8U0YRm/8/bus" dev="sda1" ino=15790 res=1 errno=0 [ 277.086699][ T27] audit: type=1804 audit(1599557951.434:9): pid=8536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir750886605/syzkaller.8U0YRm/8/bus" dev="sda1" ino=15790 res=1 errno=0 [ 277.308301][ T2538] tipc: TX() has been purged, node left! 09:39:16 executing program 5: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x16e}, 0x0) syz_genetlink_get_family_id$devlink(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) 09:39:16 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000140)=@newtaction={0x70, 0x31, 0x32b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 09:39:16 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttynull\x00', 0x6080, 0x0) 09:39:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r2) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 09:39:16 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 09:39:16 executing program 1: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531100}) clock_gettime(0x5, &(0x7f0000000240)) 09:39:16 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000005e00)='/dev/dlm_plock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 09:39:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000040), 0x0, [{}, {}, {}]}, 0xc7) 09:39:17 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x1ff]}, 0x8, 0x800) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) getuid() r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200300, &(0x7f0000000080)}, &(0x7f0000000080)="59a5be2a856f", 0x0, 0x4, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) 09:39:17 executing program 2: fsopen(&(0x7f0000000340)='exfat\x00', 0x0) 09:39:17 executing program 4: bpf$MAP_CREATE(0x8, 0x0, 0x0) 09:39:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000047ec4d00000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000000000000000", 0xb8) [ 282.871737][ T8576] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.180841][ T8576] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.400157][ T8576] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.557359][ T8576] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.673363][ T8576] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.686917][ T8576] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.700253][ T8576] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 09:39:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x388, 0xb8, 0x0, 0x0, 0xc938}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x1881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) r3 = socket(0x18, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 09:39:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x10}, 0xe68000}}, 0x0) 09:39:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000002100)='/dev/vcs#\x00', 0xcb, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 09:39:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9) 09:39:18 executing program 4: r0 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x20000054}}, 0x0) 09:39:18 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x8003, 0x8020001) write$UHID_INPUT(r2, &(0x7f0000000200)={0x8, {"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", 0x1000}}, 0x1006) fallocate(r1, 0x0, 0x0, 0x8020001) [ 283.716916][ T8576] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 09:39:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x13, 0x1, {0x2, @win={{}, 0x0, 0x96000, 0x0, 0x0, 0x0}}}) 09:39:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=/:file0']) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x400000000000002, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4000) getdents64(r0, 0x0, 0x0) 09:39:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="501971d62bf100a76c7b3363e17b3380a34e9eeae8c7e30ea53de3d3ab1cd34e", 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="f22b27cda947f3249b38a09e89cc406de77bfe72cf02dea713497bef1e3bb784", 0x20) 09:39:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}, 0x0) 09:39:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000480)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x8, 0x14, [0x0, 0x0, 0x0, 0x0, 0x0]}) 09:39:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b49915270425cbdbe1f87d3d738617f41196ad45e71a61dcaf9727e42c1f610fbe7cf4dbce06165c3d75d3261eba59f8a2fe7abac9a805214f416963811544b9a492a7c847be060de22582696cc0d0f0a96c574dbb6abe164386af60def6e8b1d22b789e691644c4604b0cab838ae6723318fb794bb113e32953a06df60666facd5ade36ea527541769ad08966ebdf246bf423343e65b000628201ce49cb1f524ab652edfd063b6cbda2021be5c13daecd43d59b445d82fb30145d5bede62e932ce2915c8f58d843ebaea70e6b0ee96fe5a2fb296ed57dd07035c5f91845842df4f81792a86fabfb6542c1218263558468d5b866a6aa3e2db7317cdba5787b1bc2d79f97f2509497f48533dda0f2f6c71d0be7d3469b49f64dbcd3453c259495a73cbc750fe28e9d8096234c0e1e70576993f46072603f30700d7c505d9e3c", 0x13f, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000480)="988a82babf2414e8c0eddbb5df11e757278f2f5352ebf3538ea4bc564ae15d5826790f121ef03e5356324359678b71d472b16b6852b98c7f175b1bf997a63ea8bf210085dc9293a11d9dad99196b22298a9f76e83125d71f973572bfca889119f6d96431cf021941f37dda3f3dc9ff90f4d403c801405d197fa186040bc7c9315451f93f645929f73b1113503ce8a95dccfd54b9614216fe9ac99cbf417a4deadf43d3572bef072c1debd473b5d6c615", 0xb0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000017c0)={r0, r0, r1}, 0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={'blake2b-160\x00'}}) 09:39:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7fff}, 0x20) 09:39:19 executing program 0: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x52fef88399c4a30c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=""/139}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r2}, 0x3c) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000680)={r1, r2, 0x9}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000240)={0x0, 0x3, 0x2c, {0x2c, 0x10, "06d49e04da20de036bc2291c25382183d24607094962eb7a2f68e1c4dcf5fb6745bfaba42f6bab5ec014"}}, &(0x7f0000000280)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "cfa37644926a0eb3d0ee11ccedd3ca9549fd90b1883f1aa41c508803d86b218e4d2a57deadee2064847bbacf"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x40, 0x0, 0xa1, "bcb2473a8c49b79d82116adc6fedf85efacfd2586ab2aae8da63accbdbebfffc4f10777b12039e05e353609401c20e5928f2831c9bc334bcbfd7fd0fd312a20f53a7d2471f7ad5301a0dfe70793ff85609cc78c5be2c9805b24b7c2774cf20c5ba577d01fd88226dc36e2029ecf1833ba29455893c7ed86cdfa2281bb553db19d41bfe9966e13b1a004939e5de5832549b9f8cab1f8f805c485bcff255a698e5bd"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x3, "ad64b4"}, &(0x7f0000000500)={0x20, 0x84, 0x1, ';'}, &(0x7f0000000540)={0x20, 0x85, 0x3, "15a855"}}) memfd_create(&(0x7f0000000600)=':*^-$\x00', 0x1) ioctl$RTC_UIE_ON(r3, 0x7003) 09:39:19 executing program 1: r0 = socket(0x29, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0xffffff97}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 09:39:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x58}}, 0x0) 09:39:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:39:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x80, 0x7, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0xb7, 0x1, 0x3, 0x0, 0x0, 0x2}, r0, 0xb, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x38, 0x1, 0x3, 0x2, 0x0, 0x788, 0x42080, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x3, 0x80}, 0x10100, 0x9, 0x401, 0x4, 0x5, 0x1, 0x2}, 0xffffffffffffffff, 0x0, r2, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x1, 0x3}, 'port1\x00', 0x36, 0x4002e, 0x5, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0xfff, 0x7, 0x0, 0x100}, {0x1, 0x8, 0xc0, 0x8}, {0x8, 0x3f, 0x0, 0x3ff}, {0x6, 0x5, 0x0, 0x4}, {0x2, 0x17, 0x3f, 0x8be7}, {0xd0c, 0x6, 0x12, 0x6}, {0x2, 0x18, 0x46}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000002c0)={0x0, 0xfff, 0x905}) 09:39:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 09:39:19 executing program 3: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0d05605, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0xff, 0x0, 0x6, 0x0, 0xdd3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x10020, 0x7, 0x0, 0x9, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfff0000000000000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x541b, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7ff) r2 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0xa02) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)={0x7fff, 0x4, 0x4, 0x10, 0x6, {}, {0x3, 0xe, 0x90, 0x81, 0x5d, 0x7f, "7097f2fa"}, 0x6, 0x2, @planes=&(0x7f00000004c0)={0x20, 0x6, @mem_offset=0x3, 0x81}, 0x6}) write$char_raw(r2, &(0x7f0000003000)={'0'}, 0xfffffdef) ioctl$CHAR_RAW_ZEROOUT(r2, 0x127f, &(0x7f0000000440)={0x100000000, 0x1}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x100000000) r3 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0xa02) write$char_raw(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052c22ed60000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000"/500], 0xfffffdef) ioctl$CHAR_RAW_FRASET(r3, 0x1264, &(0x7f0000000180)=0x6) 09:39:19 executing program 1: unshare(0xc020000) semget$private(0x0, 0x20000000102, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xd9, 0x1800}], 0x1, 0x0) unshare(0xc020400) 09:39:20 executing program 3: mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x32}) 09:39:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) [ 285.420394][ T8720] 9pnet: Insufficient options for proto=fd [ 285.461448][ T8720] 9pnet: Insufficient options for proto=fd [ 285.828249][ T27] audit: type=1326 audit(1599557960.604:10): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8699 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 [ 285.958911][ T27] audit: type=1326 audit(1599557960.604:11): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8699 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 286.075819][ T27] audit: type=1326 audit(1599557960.604:12): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8699 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 286.150096][ T27] audit: type=1326 audit(1599557960.604:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8699 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45d5b9 code=0x7fc00000 [ 286.206388][ T27] audit: type=1326 audit(1599557960.744:14): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8699 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 09:39:21 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531100}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) 09:39:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000010040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000580), 0xefee) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 09:39:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x334) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x3c}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 09:39:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) bpf$MAP_CREATE(0xf, &(0x7f0000000000)={0x3, 0x4, 0x400000, 0x0, 0x0, 0x0}, 0x2c) 09:39:21 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x4020032, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4020032, 0xffffffffffffffff, 0x8000000) 09:39:21 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x100000, 0x4) 09:39:21 executing program 3: socket$inet(0x2, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @in={0x2, 0x0, @local}, @tipc, @xdp, 0x30cf}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @in={0x2, 0x0, @local}, @tipc, @xdp, 0x30cf}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, @in={0x2, 0x0, @local}, @tipc, @xdp, 0x30cf}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, @in={0x2, 0x0, @local}, @tipc, @xdp, 0x30cf}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={0x2, @in={0x2, 0x4e23, @local}, @l2tp={0x2, 0x0, @dev, 0x3}, @xdp={0x2c, 0x0, 0x0, 0x1}, 0x30cf}) setsockopt$inet_udp_encap(r4, 0x84, 0x2, 0x0, 0xfffffd25) 09:39:21 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5c240, 0x17c) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 09:39:21 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/238, 0xee}, {0x0}], 0x2, 0x0) 09:39:21 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x9) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 09:39:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r0, r1) socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r2 = dup(0xffffffffffffffff) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x8}}}, 0x18) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000580), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 286.900167][ T8968] IPVS: ftp: loaded support on port[0] = 21 09:39:21 executing program 3: syz_emit_ethernet(0xfc0, &(0x7f00000000c0)={@remote, @dev, @val, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0xfaa}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e763b2", 0x0, "c1dc9f"}, "180305a16263d2311de75cd8fa26b682f10da336fdd60fafcfdda6666d57a62126015dc981a2df26cd87e2a3cad3f297b635b74a65569d5d6bfad23cba065ff04c138a1b56bec0e45ac2202c64a6d373cdc8a2715a8cb15df8bf1a451b80df4a17ed37b78af7793e836df78486c558ca5dbf92b374b4872bab0b7d32cf68a01af4cfd1898768bfee66cc3adcf85142e84c0ef8dd771b60394908dd488c9b25dc4e54ff63301131974012a8e0ca70737e6172dc59266f5c2af91c28b94647a3302ca2f34a6c86a23545fd86a3a0af039f00d4ec5e6452bf22847d5a0d7ac4c51cebbd783022087d7a78e7febaa1e7b40ac8c6fd3d7892013e4ff70e2084cf83be7221fdcad959009e0b3a2b26396a81f51e8f5c3838d62cdcb51d690e6ec5bebf64e226fcf3c225e37b9a10b2c5d20cc4cc4e64563b1c227b57bc6d2527eacaa48c434c761ff74d1af5257203ede6e14c7e34c30205b64cc642571d398f6ea74e9461a8f663a585c215ffacbe01bfb33f102df73985c2c5b534cde1823e4a97c4c5df19da3a6565ce9fa078d99028b39c3cdfb417ca024121dd7364fd84a829d4598b61125fbb690a9b2721ef8b6a07dbf4ce708d5a94e06c4aa1c505f83a147abf8141a7aad6faf4d1dc2e693a0cecfad749325007799e374a1d79006e402bc7a90e6ae466e300508c65b10ff11d873f6421d41f8e68e94294a4b50d4afe18eb1b6eb3358063fee8aa75aeca33e71684b1102d71554b3fdff84040262c03b7506fb64482f7be2e3ace364d2feb7859206aac5fe7b18a288c52c863c4281d8585fbd358b51801b17967ad57fdd4652c188bf0f679ab820c7fede5e74ea239b6fa4f84d52565d7e769ad9e30176045f1985b3798a5cd735554a0bb651a16a8e1da416df779db65e9923c1670ab5531e14dfa7d2a7f30d7c3d0c972dd33e0f01800afc6fa0bd68be79be3fe9fc8a4581cf79cfcfdbb9e101862c9b66c3d706ab41ec92c85fb84d4d363d942254ccb5005713a5234b55c3202a6ff4e0efed1da27e1caa9d2b9b9c768040385f97252b02877d5a2ebe1ffc71c495969ad3dab17fad69363840431c0ff29553d85807dbe7c7a5df8c8d9a4dd8df705d22ff512d7174326a45b99f8f78184dd7ee4e0d52fa2b7255b15a9d4b7e0b3b72943c7f3b09545dee3dc81ef2f04a074508204abdd284d4bf911d1481a40017075cedccd57239f3a89bad0d3ac2117ba190b20b9242ed589abbc0efc91b49d8717ad9fdd1e05557b81348b68f256d1efb16e2bec226cae28a6c33395fee0404fa93c989620d56e9146f44a777ef1b8f53b75cb1ac13c973472c800c1225129f301382f374ba6b15844f2616123d32e6176746efc23aac44bc0650bbd4a890730bbc463966215ca51542d6f1bc101a24778289f26857764c07ec19dbcfae8467768827e1b7c85820237b44b9d69d1b7707b5939a7b2f2efa404f0df99112c4aca1a427eba91393cfb9fa072b09fd15fd4333b6902fed2ef8c59f56213962fcca1577f522001f74cc58f3f7c8dd4086d18693834e57aeff966b2036be9d9719945295ecd03c4c844bcff2e92344702ea771f3f02c3e3dbd4b067fa101b128b1958fa3f372470749d8cce2db4cc2bcb82d3d4469918373f7002db69e616907fa8995375974972a76882815cdc34477747eda7a710fec339605e88c0a0cc83fedf9ddc8a1804d0bb8c1b0a982dd7a98bffc82319987529e401e9f0eabfd4b77874e9c7908a17defeec32423a4170a7dcc61ea166199578b00f487cd35e46de92ca1424ac08903f86262abb8a9728a395cc45173027d73773217e00f3535cb6cb9b6edcb8c9a45cd0bb1b2aff75b36c75068cf0670ecebf03738e3054fca5b345d1ade3320d442adf9c985f13ae297c9b32519bc9d2034878cdefb1713f43a91d61d6c6a6e34be051835debb7342ce903c7d7caaadb8b7f3e263d84d9d270c23e07bda71451d9da2702790b01f3089d9669973cdb1567c6289af9a178016badde83ac169c3a4aad7c1d54df5c58151b31f3f91c57217471bff2619352a4f67549e8bdbc837468216273ea1858934ced9ab9f8a9fd433c33a54437d81894bf8c47131775c3f6b67b7e60831e7c52b22b89672558f27dac838c2793f676cf3f50e72c6f5a3afd3a6ae641553cc64adc3797880689efc6caccd7bb99f3bb4cb979cd88cd7d4768727de9cb65716155762fe42d11e24bb5ed4e211c7b8035bdbf3d74a6c15154fe70e38a55c8bc9f70bea6558d4ad6835892bb8ea01b59fccfa812c3139ad31ae44e88cb7b04a3fd0ea915618ddd30ff4e963dcff5874dca50465933cee21a48646dc4bb3ac5ddf68a724121133bf9101750accab35b6e6e158a376938c1178ffc165e13ee2a381d05d5741bf7ece44b82b53aa7e3d0574b463287b5761d57e95ae53db67bf28f2687ebf960c007fdbe465844f613dbe42874a5d806f3b438e021b4b1d13112658ce5bf8b0f1be75d0fdb2df6eb813bec0493e332d422ba9bef3bef53ec0ea8efd2ab17b798d5d3166b38c073cb44c916dc93cddb17356591a2f4978558f3c6322193f5457995ace615bc91567fd3bc5031360ceea3cef4a26c6293eb3b535fb5c2a5649c039247286be97620f3d2d19b1ae64f507169b1f6de139818e2b95ba5f024733ede082acbfaf11cc1a94a7bf7f659c474b0cf6a95f9a3ab66f9ea1f87c37dbdbb5fc0be4928172371384a6a1ada9c3db813cff66d065541304862126e1d98912569bad38ae992458e2b029f9b7861aff3d6f2bd93c8976206bd04ce878c772f354e8c40c73275da2364f3ffcb6296492a011d671c4f98217f46701edcd831113c429e308f4d48e8dc4ccad38a67f8939e0fbb3184985989aa143f6097451aae1425cd3f12bc63adae464ea2fb94c920609f5691568bd35a23e7b55d22a92880689410de62d4de273cca90cbdec7e11f3d58900b6fddcc3710b703f138a3e4629556c926e71f19e62012ce49d58501f64bc873ed8225a5535d62480e98e5f61ee6d977f3a1bda8e070d47cad16f1aa9e40c6ac8672346d6f068c0fbcdd4d6d88a8a2c1b2b54be6f2cc83746b554483bb32612111124798fbadc600060a8b984292455da579c69911d0d064bc0e3ec5aa5539048eee6f371b100a30a69caa21761180b322bde25ed531fb455299d8d2d0630331a6882ba039965e2ad0f655d4d86b3d3d1778349f44eb33a2de8cf162687a7403b6c08b64a6fcca7602f1903c6caf95fc9f7d064d93308ee497abde78a2638a4225286da2a1632a38dec9827fc38121a7534f9de4175036c29a86964f01875c4848be848990f86eddf557c4876c2e5840ee1a4b0bc32391f2eff5cb861636b8116415220e6dd22ebabe1c809db98e209b8958bae5181ea22c5eeb2bb2d2351b3e089595542e38639aaecea9e7ef17d573939c2ec5c4eed94860ed14595c2c7696641f18ded12e20e22a2dfaa91fbec5a9497cfbbeb9ee7f989b21f0dae9b3fcf754838c5fb1f4892b09ad33b103895d64cf89df8cf9c45a85289df66f9626e1eb491b618ec5ce1c1bcd1517968d3023c17acea04f1171e1c845ab92928cec3a33aa1dcd75d08d4e4511fc248387d135488ea052d0f3d2fe6a127b523f3043a153906815685351355d6c23230dadf1efca0a589e48c6055729044160ccaac49e88c4a3e7be635ec1549f72b7a78b43268cd896076d65dcc242685c5058257ce98ac48674d5b6d763f18a35107a9a3c04f7242179d0bdb421d1b652e6a1fe59e4b1f2152b150800d3004e0814ac1b6645faa1dd74bd91f8c92e7875b0c82447a7e1e3706966d57bf1ca8103d277efb2f69d7d8338fefee4fc6ab7b02ff0f4e831b22b6e214e1c1c378e3081170ec1c32bef98112c6ccf85703741fb57d1f2ca35e4d603f74f9285d41663750a7f1838e893a09401545b484387701298d2c8ef5135d4c1679bfdd772e8d3d044d525d249e0ac71b6df46a0f10a544fc1cfd8c0d6c436fdd76de1fd02a507bc9cc950b0f7c31072c6ea9a4f9687f644f5f471b122955336f8d7df242f282059153837e701b601f8432baa97009fe190d41f22ff46dd4c63faad693052c534f899bc07bb788907cad3070644bbfa9d68adb2dd257f2a2091c31a34e7edff9b38d1a9221f0138018ff943663ec26e87e457153477af8db8266704b600d6bf863dfc1df77c8796fc2e7c2c8a676de1c04d89e8ada7c45ab2a092a6d12d9ebb87384ee87f1583bb0be6533a6dbf4996795c34ea43dd0134852e655ba532201f06eae247e9c83dc88005c9bb3e6cce340478ce67ac8fcf4cb2b873d3827b2a6eb56bbbb8918d999ab1cf80208a7c700d09c4ab2e8921c99d6439d068d3d0cbfbb88801c5583625a64e168ad1323b832a42fd2c32ef319c40de72018cb8b66b649d0eda832495739c64f4850949c0ec74d3b2eca224721bacd3ce6e13b9f8dd119c06145cf15848d47d9f34ed80689a65418737c900a80e08f21c3327593ba2271dc0765ba3cdef8982beda89208b11f140fb057c6dc1a8c5dbe84e5da1279361e03e8ce3585b048724c093cce179423e1bd6962299e1064b1c70043203ed58f817d0c72424b29fe87b2c714f5af2fe550d6dda4c4263c776d137fb5c3a41bf979e8d094f5089d7a312faecf6536e619895b6b3078e91a92039e96b9f3730365037d6efbe1aa22c4cd0ebb771b77fe6e21ee45bb0a0c240c508d31e9c3dc10ba18f21d26df1b41162ae91a5a0ee44070cf6105af3908e1afbaa45651d560652e6a04d7c446ad8c43cd5e0c65cd4fc3edb7636e0a37375ca475ecb8f82e1bca9c045178711746e53c81d8aadb4b3aa0332615dd5ec1dc81c7ed2550d16eb820da221dd50887af76c1f7bb807ce76efc3996c13b4e70cc56343bf7b96b9ad50b3314b56343d646f77a9bd1e14f8f5a1c774f2b45eaee39f3850eb1f6dfdfd343e7636b5939ddd116b0e16f0780a77bfe8f660c582a449a3dcc07a3f47a53747f29a8ddf16fd6c439cc805ca7a619bfdaf467cf6a33dc6001790c979ffa2f6292de8d692d3ab831627a54fb515f606a412f79dc1bf9d65defddfed6291889f563a6d1b6dcddac5247e4bab5c0e8c5b865785fdc30b164af3e9979114ec4bd20e630df7d95743bbcd579a007300a389253b565e6fb428d3392577f548b348d7ff6af44731ee72300c107c17deeb1aff51cab284f04610333d0cb701eef281847ea5bbba63232e22426e6a945d2640516ead50a04e103fb916374b917c44bf85e25360a74796d97d7f61c7384584e0799ac587e337f959af7f1b4b782b32cdf0d2b3637b061050062b74b5f0200dee66989980fd6e7f9346eb195d2b4a17d14519e705b6d6212671392d5f7e55c8673048383295925b84be150878b154281b882e5f8f8509d9fc98ca873b505d46e01b396849bf6cb46c8c8a61431653e719e45e9c29c764e6e44f05c7790b5eb1eb7a9eab47daf6b90f3e8d9a4f82a7b849cd1b1ef61207125ca02296fb917d0b3fb934a7f9c3abe0e5d565ee90836c1237d4c076722d4e2dcfcbff86f562adba6bc8bde289d9a2e18e3570d11850367a29db0af259d4575d37c544"}}}}}, 0x0) 09:39:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x101000, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@increfs, @release={0x400c630f}], 0x0, 0x0, 0x0}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000f2f000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r3, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f00000000c0)) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2012, r0, 0x64000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) r4 = socket(0x2, 0x3, 0xfa) syz_open_dev$binderN(&(0x7f00000010c0)='/dev/binder#\x00', 0x0, 0x803) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40) mmap$fb(&(0x7f0000f2f000/0x2000)=nil, 0x2000, 0x1000000, 0x50, 0xffffffffffffffff, 0xd5000) ioctl$SIOCGETLINKNAME(r4, 0x890c, &(0x7f0000000000)={0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}) 09:39:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3300000026000166"], 0xe0}}, 0x0) [ 287.717993][ T9042] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.754426][ T8979] IPVS: ftp: loaded support on port[0] = 21 [ 287.848928][ T9038] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.002718][ T9042] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'. 09:39:59 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)="1a", 0x1}, 0x68) 09:39:59 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2f7, 0x69, 0x4300, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xe5, 0x6000000000000000}, 0x28) 09:39:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:59 executing program 2: r0 = socket(0x2, 0x3, 0x8) sendto$llc(r0, 0x0, 0x7, 0x0, &(0x7f0000000180)={0x2}, 0x10) 09:39:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e22, @loopback}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000014c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) readv(r0, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) 09:39:59 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)=@v3={0x3000000, [{0x5}]}, 0x18, 0x0) stat(0x0, 0x0) setregid(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000002c0)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) 09:39:59 executing program 2: bpf$MAP_CREATE(0x5, &(0x7f0000000000)={0x1e, 0xff01, 0x0, 0x0, 0x820005, 0x0}, 0x40) 09:40:00 executing program 4: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000014c0)=0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) readv(r0, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) 09:40:00 executing program 1: bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}, {0x0, 0x0, 0x80000001}], 0x0, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10060, 0x0) 09:40:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xc0830, 0xffffffffffffffff, 0x0) socket(0xa, 0x0, 0x0) 09:40:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 09:40:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x9, 0x0, &(0x7f0000000200)) 09:40:00 executing program 3: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') 09:40:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x4) 09:40:00 executing program 5: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x100) 09:40:00 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0xb}, 0xfffffdef) 09:40:00 executing program 3: wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x3, 0x6, @dev}, 0x10) 09:40:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) set_mempolicy(0x1, 0x0, 0x0) 09:40:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) [ 326.054932][ T9151] device lo entered promiscuous mode [ 326.085467][ T9149] device lo left promiscuous mode [ 326.111222][ T9155] device lo entered promiscuous mode [ 326.144957][ T9149] device lo left promiscuous mode 09:40:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r1, 0x1, r0}) 09:40:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) 09:40:01 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000040)=""/37) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) 09:40:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 09:40:01 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfe2d) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) 09:40:01 executing program 3: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000100)=""/114) 09:40:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="a00100001800010400000000000000a10294"], 0x1a0}], 0x1}, 0x0) [ 326.467743][ T8189] usb (null): failed to copy DMA map 09:40:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000000c0)={0x6000006, 0x1, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c87400"}, 0x0, 0x0, @fd}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "415685d8"}, 0x0, 0x6000000, @fd}) 09:40:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000000}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 09:40:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="93379d0ed6fbde25dc17c8c788a59b2da020aca652", 0x15, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x40, &(0x7f0000000080)={@multicast2, @remote}, 0x8) [ 326.592600][ T9182] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.617694][ T8189] usb 2-1: new high-speed USB device number 2 using dummy_hcd 09:40:01 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc040565f, &(0x7f0000000100)={0xa, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b00df9f5"}, 0x0, 0x0, @planes=0x0}) 09:40:01 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$usbmon(r0, &(0x7f00000001c0)=""/239, 0xfffffcd9) [ 326.872218][ T8189] usb 2-1: Using ep0 maxpacket: 8 [ 326.987884][ T8189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 327.011842][ T8189] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 327.037510][ T8189] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 327.059120][ T8189] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 327.107767][ T8189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 327.131005][ T8189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.152591][ T8189] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 327.154966][ T27] audit: type=1326 audit(1599558001.914:15): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9160 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 09:40:02 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x3) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) syz_io_uring_setup(0x3c91, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) [ 327.222503][ T27] audit: type=1326 audit(1599558001.914:16): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9160 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 327.253843][ T27] audit: type=1326 audit(1599558001.914:17): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9160 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 327.284529][ T27] audit: type=1326 audit(1599558001.914:18): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9160 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45d5b9 code=0x7fc00000 09:40:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x0, 0x0, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044844}, 0x15) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r4 = socket(0xa, 0x5, 0x0) sendto$l2tp6(r4, &(0x7f0000000040)="10", 0x1, 0x48040, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0xa]}, 0x3}, 0x20) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x4, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7fff}, 0x406, 0x0, 0x1, 0x2, 0x8, 0x2, 0x81}, r3, 0xd, r1, 0x5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getpeername$l2tp6(r0, 0x0, &(0x7f0000000040)) 09:40:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 09:40:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004f40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)='D', 0x1}], 0x2}], 0x1, 0x0) 09:40:04 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00\b\x00', 0xc, 0x2f, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}}}}}, 0x0) 09:40:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)) 09:40:04 executing program 5: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x1000, &(0x7f0000000240), 0x0, 0x0, {0x23}, &(0x7f0000000300)=""/69, 0x45, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000540)={0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100), {0x36}, &(0x7f0000000140)=""/37, 0x25, &(0x7f0000000180)=""/176, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x0, 0x2}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TIOCGPGRP(r1, 0x5411, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8) r2 = request_key(&(0x7f0000000380)='encrypted\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000480)='[\x00', r0) keyctl$describe(0x6, r2, &(0x7f0000000700)=""/120, 0x78) [ 329.314546][ T17] usb 2-1: USB disconnect, device number 2 09:40:04 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="08000000000000d60000000000003300", 0x10) 09:40:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$ax25(r0, 0x0, 0x0) 09:40:04 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, 0x0}}, {{&(0x7f0000001780)=@caif=@rfm={0x25, 0x0, "c2a0ec97d95e630603813de191d7c91f"}, 0x80, 0x0, 0xa}}], 0x2, 0x0) 09:40:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 09:40:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0xa32) socketpair(0x1e, 0x0, 0x2, &(0x7f0000000040)) 09:40:04 executing program 2: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000004c0)={0x845, 0x0, 0x0, 0x0, 0x0, "692ae465b4f883a773a883ca1e11d7efe53992"}) [ 329.761462][ T9253] mmap: syz-executor.4 (9253) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 09:40:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x4c}]}}, &(0x7f0000000300)=""/251, 0x26, 0xfb, 0x1}, 0x20) 09:40:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000100)={0x400, 0x800}) 09:40:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x16, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000004a40)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}, 0x10) socketpair(0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 09:40:04 executing program 2: r0 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000500)='posixacl\x00', 0x0, 0x0) 09:40:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000240)) 09:40:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCADDRT(r0, 0x89a1, &(0x7f0000005680)={0x1000000000000fc, @l2tp, @xdp={0x2c, 0x0, 0x0}, @nfc={0x27, 0x1, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x300}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r2, 0xf01, 0x0, 0x0, {0xf}, [@HEADER={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000008300)={0x0, @l2tp={0x2, 0x0, @private=0xa010100, 0x4}, @tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}, 0x2}}, @xdp={0x2c, 0xb, r1, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000082c0)='netpci0\x00', 0x9, 0x2, 0x7}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f000000cd00)={&(0x7f000000c700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f000000cb80)=[{&(0x7f000000c780)=""/152, 0x98}, {&(0x7f000000c840)}, {&(0x7f000000c880)=""/150, 0x96}, {&(0x7f000000c940)=""/187, 0xbb}, {&(0x7f000000ca00)=""/145, 0x91}, {&(0x7f000000cac0)=""/173, 0xad}], 0x6, &(0x7f000000cc00)=""/209, 0xd1}, 0xe0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001540)={0x0, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @xdp={0x2c, 0xc, r4, 0x36}, @rc, 0x1f, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001500)='netpci0\x00', 0x4eb, 0x2008b721}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={0x0, @ethernet={0x6, @broadcast}, @in={0x2, 0x4e21, @remote}, @xdp={0x2c, 0x6, r7, 0x3b}, 0x400, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)='caif0\x00', 0x7, 0x401, 0x80}) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f000000d640)={0x0, @xdp={0x2c, 0x4, r8, 0x2f}, @sco={0x1f, @none}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x3, 0x0, 0x0, 0x0, 0x8, &(0x7f000000d600)='erspan0\x00', 0x8001, 0x1}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000160c0)={&(0x7f0000014900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000015f40)=[{&(0x7f0000014980)=""/4096, 0x1000}, {&(0x7f0000015980)=""/92, 0x5c}, {&(0x7f0000015a00)=""/248, 0xf8}, {&(0x7f0000015b00)=""/94, 0x5e}, {&(0x7f0000015b80)=""/223, 0xdf}, {0x0}, {&(0x7f0000015d00)=""/117, 0x75}, {&(0x7f0000015d80)=""/144, 0x90}, {&(0x7f0000015e40)=""/73, 0x49}, {&(0x7f0000015ec0)=""/83, 0x53}], 0xa, &(0x7f0000016000)=""/167, 0xa7}, 0x40000100) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8d890015854001cb173af811eea4d2858c740d61e6f2f83ebba10ac33da352bdf1803392b62bafc13e4bd8bce452693030497dd54c055b", @ANYRES16=0x0, @ANYBLOB="080029bd7000fddbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="08000d000500000032002400fb4fe61c59f965bfae32a3fce8ed752ba8d4740d7cb7eac8513f07fa88ec0baea11674b4aa0199f8141c15dbefb700000400cc0008000c000100008008000300", @ANYRES32=r9, @ANYBLOB="04002400"], 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f000000cf80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000cf40)={&(0x7f000000cd40)={0x1ec, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40}, 0x20000020) 09:40:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r0, 0x0, 0x0, 0x2cbd) 09:40:04 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 09:40:05 executing program 5: r0 = socket(0x18, 0x0, 0x0) getpeername(r0, 0x0, &(0x7f0000000100)) 09:40:05 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 09:40:05 executing program 0: write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x101202) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7fff) syz_genetlink_get_family_id$batadv(0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x68, 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000400)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20010}, 0x4000004) 09:40:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x2e, 0x0, &(0x7f0000000080)) 09:40:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340), 0x0, 0xd7dc0d5f, r0}, 0x38) 09:40:05 executing program 4: r0 = socket(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private1}, @in6={0xa, 0x4e23, 0x0, @remote}], 0x38) 09:40:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000001040)={0xa, 0x0, 0x0, @remote, 0x2a}, 0x1c) 09:40:05 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={[], 0x10}}, 0x8) connect$bt_sco(r0, &(0x7f0000000080), 0x8) 09:40:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x18, r1, 0x101, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 09:40:05 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 09:40:05 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x80, 0x8, 0x0, 0x8, 0x0, 0x0, 0xc0582, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x38c, 0x0, 0x0, 0x0, 0xc938, 0x2, 0x9}, r0, 0x0, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x80, 0x8, 0x0, 0x8, 0x0, 0x0, 0xc0582, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x38c, 0x0, 0x0, 0x0, 0xc938, 0x2, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x80, 0x0, 0x4, 0x8, 0x0, 0x0, 0x80582, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x38c, 0x0, 0x0, 0x0, 0xc938, 0x7, 0x9}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x1, 0x7f, 0x0, 0x7f, 0x0, 0x3f, 0x500, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7}, 0xf50c, 0x4, 0xfffffffc, 0x6, 0xffffffffffffffe0, 0xb7f, 0x6}, 0x0, 0x7, r2, 0x2) getpid() r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0x7f, 0xff, 0x7f, 0x0, 0x6000000000000, 0x10, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x94, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10010, 0x400, 0x4, 0x5, 0x3, 0x401, 0x4961}, r0, 0x4, r3, 0xa) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae60, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xc008ae67, 0x400009) 09:40:05 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:40:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) socket(0x1f, 0x5, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) getsockname$l2tp6(r1, &(0x7f0000000000), &(0x7f0000000080)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) 09:40:05 executing program 1: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 09:40:05 executing program 4: r0 = socket(0x28, 0x1, 0x0) bind$can_j1939(r0, &(0x7f0000000000), 0x18) 09:40:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000001c0)) 09:40:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000003cc0)=@newae={0x5c, 0x1e, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@private1}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x0) 09:40:05 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000000)) 09:40:06 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x0, 0x8001}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) 09:40:06 executing program 1: r0 = socket(0x23, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_getlink={0x20}, 0x20}}, 0x80) bind$qrtr(r0, &(0x7f0000000300)={0x2a, 0x3, 0x2}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000940)=[{&(0x7f00000000c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) recvfrom$llc(r0, &(0x7f0000000000)=""/163, 0xa3, 0x20010060, &(0x7f00000000c0)={0x1a, 0x1b, 0xff, 0x0, 0x20, 0x3, @multicast}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x100) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46802) io_setup(0xfd1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={0x0, 0x34}}, 0x0) 09:40:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'tunl0\x00'}) 09:40:06 executing program 2: waitid(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) r0 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x2, r0, 0x0) clone3(&(0x7f0000002440)={0x100200, &(0x7f0000002280), 0x0, 0x0, {0x27}, 0x0, 0x0, &(0x7f0000002380)=""/79, &(0x7f0000002400)=[0xffffffffffffffff], 0x1}, 0x58) clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 09:40:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(r0, r1, 0x0) 09:40:06 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x2ad14c103baa03ce}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 09:40:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x3}}, 0x1c}}, 0x0) 09:40:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5505, 0x0) 09:40:06 executing program 4: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x4}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x400000000000ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:40:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35, 0x7}, [@call]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xfeff, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe60, 0x10, 0x0, 0xffffff8b}, 0x2b) 09:40:06 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04"], 0x34}}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x7ffffffff000}, {&(0x7f0000000440)=""/107, 0x6b}], 0x2}, 0x0) 09:40:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0xc9c0dddd7bb2f2ec) sendmmsg$inet6(r0, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000000f40)="1711459b39ae12553e58ab36f6f42eb07f944335264074a33411d9fcd2ecdb011c732c1e9d054e23ae2dfc2d8e2ba6720f51872f19bc44cc7165a89a03c3b98c17572e366086b2051c7323d4ebfd909350a3f7dd7eb2621e834439d382ef49258536eea506d7fd96dbaa9602f690f7f8efc3474ad2d60292789edd953de56eaed16cd48a3a9357489bd021527ac61c162bbd611617b04c0c706d88e939de0fe1ce6292ab7735ac04d3f1a6eb4b9e223ef4544d6aee8ad956b6b76d50027a610f0461c24b2a2e3c281f9ea71db4992bcf7fecf5748736e30896c02d66", 0xdc}, {&(0x7f0000001040)="8c5beeafdb46f4e674a04165c68f80c533aceb9b89e97da46ab81c6b0bc5d4aa9329619a53749f3dcdd325fb295c69a6d01711aea861aa73843180e2a64927f52cc296f46b05d58303386bd0aed19b81b17ed21cfdb93aaca29b582bb5018ddf03e3c8ced29f359836a101f2d049d029a8872c92986ceb81d082e883fef2918ecb734478454dd2c4de93925d5135bbde9f541eda1e98ecf9edf4234c5517915952b55497b42723e44f11e15b03cb962a982dea9f", 0xb4}, {&(0x7f0000000800)="e1276d129fbbe6517b6f190e17579c77826aef405afa6b4fe04fbf5ccda9e744f41cc47fd527943144378fc1e6232cbacc84bcc745fbd82725d8ba0541beb4667c871d771d1837ad4eb5d116b993937b", 0x7fffde70}, {&(0x7f0000001240)="1b81c9d7a65b34c1c6dc5d829f2ccb935378028edba2440b46afa17127c0c101c8071ed15fd1b95dd736ca3afe529c54972b434bab4806f03216770532acf436c3e91f50c887d0b061471dc80891cf2dc9bb217a5f8763da8ddd3e81ac40baccc8cb467e40c0282e1f7af220420e60b77a9e85c275f8f06c8e2f3e10bdfa13803d7824e60fa81bf050da80be0469a43c83b1716bef56b5b97b5fc7842341f0", 0x9f}], 0x5, &(0x7f0000000a00)=[@hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo, @pad1]}}}, @dstopts={{0x70, 0x29, 0x37, {0x0, 0xa, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @ra, @padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, [], [@ra]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @dstopts={{0x80, 0x29, 0x37, {0x0, 0xd, [], [@calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @pad1, @jumbo, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hopopts={{0x110, 0x29, 0x36, {0x0, 0x1e, [], [@jumbo, @generic={0x0, 0x90, "c23bcd2f7ef7b2d089ab0046a6526860c1e731720e23e609a29058a789c52ff02dab6e82f48deb5a601114f3589bdc61a4a03bafdd89a3075051f9e0a91f0ac8d736f4f233ab046fa67050725a339502a24abbdd666136164c10a8da302031ddb0c30100422c43787c14a2732e2bd553d3e344dc77e17eda8702ae5e5c91fb6faebda2f1ba85d5a440ab9a4e7415fecf"}, @jumbo, @enc_lim, @calipso={0x7, 0xfffffffffffffd45, {0x0, 0x12, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}], 0x278}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000003700)="1b70f19115fb2d309e4690066be585c847dc30e778374e3b0b2b1a893f336d4bbc1e6f0457b64e634b19ff40bd8810e730c7c3ebb7326a58921418c261a04ddbf19a6c46873f8fd8cd266d02c92439f7a4541fa12022001bbcd2a4ec6e4bbd0104014a0b7b80adba523b420a5997ad47cadd45c6d3b609303e51d166b0b7521c6493377eee99582b01752202aa700b22d348b2149fb7c8cc85eea598466d3e7f8b6bea23ac3554f2b90efeb91353d6474f6a26f36941a8bc0c504fb8d2db037d012882", 0xc3}, {&(0x7f0000003800)="be1c2cb36a3390543470d73a6082b5a3c287c38331437767ee57729c1452cb3b6aae95d4cb1ea29438cd386af97b358818a08f8b6bdb3956586ecf9ddb0546323e7f6101fcfb961788ab8b77a2e3fa963a888fe6793d646fcecdad9aa18250ed61c4f50e9d5b94159b0f33092313597a37c26b11c86301d8e7daa7f203911a36291c281cbf190808", 0x88}], 0x2, &(0x7f00000038c0)=[@dstopts={{0x58, 0x29, 0x37, {0x0, 0x7}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, [], [@calipso={0x7, 0x65, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}, @flowinfo={{0x14}}, @dstopts={{0x110, 0x29, 0x37, {0x0, 0x1e, [], [@enc_lim, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}}}, @dstopts={{0x0, 0x29, 0x37, {0x0, 0x0, [], [@ra]}}}, @flowinfo={{0x14}}], 0x290}}, {{&(0x7f0000001600)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000003b80)="a307701631659f6d02aca3eda9a8e92804677a708f4d9917bd53473beab31af0a760b33672937c0c3204435786ca103f2dd46e56e736b1da9179fcc9cbe79a0b65273744c9b5ea3a39885c46addbe6077474cb27673225e523abd691d98265a701953f8810e2d1af2cb6de238f042905fa95620f376b74faa2", 0x79}, {&(0x7f0000003c00)="0791ac4a40850172bec2a3ce397a61d945b8a32623bafe9f0b9b4b366dfa7ec852c2367d02e1fcf4ea91548eb88c41825b737715a7772191dd2f6490b786ec21683a73b46b64642a30c54cea2cc3989b9fd0762f32c2ee87a6b2be8f0bb55ec8659faf2446795abc2a79a8c61a54812add3be6ed766fadea98a87e5981a2812b945691916db3bfc424fbae1a34d336259229c86c40509b84d3b8e2553719b9633a611a1ec7d595e87891d615775f02c7f9120dd448632340b7", 0xb9}, {&(0x7f0000003cc0)="bb6336abd72532391c46da2de75beee24da5a3381b794f38cce784d1c693235f11eec70bb4a05735e15477ade545991fbe8ff7aea683f888dbd505d70887fe4d47f7c40550d49bc3ebc1961f83ad8e1e2abe0bc7d1c10971bc9040190164e68f1b4c1e19acf3b1e02fdf106861efe60f", 0x70}, {&(0x7f0000003dc0)="c2387488fbb73d964953b1e2498030487a84cdfb23b213a538643a945302d9cbac64ef4cbc4b9a386ce4647ddb6ca273d9793c258023641fbc460e01172c6a89c1f3f23f3cfeb6376600260bb5db70b49ec95c9d5bc507fa7e5d577205cae161c1749fe88e0b776b84933151", 0x6c}, {&(0x7f0000003e40)="d06113c99759177e5534871f982787d7af6ccc6f99f4d50acfec9f1f187793ccf492fa2654fa07779b87d40aba08e9bb8002878f38e0eae5017f40e2cd94c2f8c937acd33f63e57742b4", 0x4a}, {&(0x7f0000003ec0)="2943c310ecd8a8cfcbdbc306b8ed705b147ca6665c30bde0dab03799e1288afcd38db7d0fca69c0f0e8f68bb436cde", 0x2f}], 0x6}}], 0x3, 0x0) [ 332.068869][ T9384] IPVS: ftp: loaded support on port[0] = 21 [ 332.436362][ T9391] IPVS: ftp: loaded support on port[0] = 21 09:40:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00') pread64(r0, 0x0, 0x0, 0x2) 09:40:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x800005, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f00000001c0)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f0000000040)) 09:40:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x0) [ 332.697514][ T2834] Bluetooth: hci5: command 0x0407 tx timeout [ 333.554587][ T170] tipc: TX() has been purged, node left! [ 334.777446][ T2547] Bluetooth: hci5: command 0x0405 tx timeout 09:40:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc0842, 0x0) sendfile(r1, r2, 0x0, 0x200004) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) 09:40:10 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000040)={'bridge_slave_1\x00', @ifru_data=&(0x7f0000000000)="f32f88fb493926334ddd79f5a0cfcfe8b57d131a77e02801f98f0ab25b85b222"}) 09:40:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x24, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) 09:40:10 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000240)) 09:40:10 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') setns(r0, 0x0) 09:40:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x7}, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x2, 0x82031, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), 0x0, {0x800}, &(0x7f0000000240)=""/211, 0xd3, &(0x7f0000000340)=""/93, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x16, &(0x7f0000000000)) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000b00)={0xfffffc00, 0x7fff, {r2}, {}, 0xa3, 0x1000}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7fff, 0x100) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000000)) 09:40:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x405c5503, 0x404f00) 09:40:10 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) 09:40:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8041, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x3) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) r6 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x6) socket(0x10, 0x0, 0x2) 09:40:10 executing program 5: r0 = syz_io_uring_setup(0x36cf, &(0x7f0000000080), &(0x7f0000000000/0x3000)=nil, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) io_uring_enter(r0, 0x4a8f, 0x0, 0x0, &(0x7f0000000040)={[0x80000020]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 09:40:10 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000000), 0x4) 09:40:10 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x8141, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x800c5012, 0xd00700) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x67c) 09:40:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}}, 0x0) 09:40:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@routing={0x0, 0x4, 0x4, 0x0, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev]}, 0x28) 09:40:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xae60, 0x0) 09:40:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0x1c08) 09:40:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002000}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 09:40:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:12 executing program 3: openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)={0x1cb4c2}, 0x18) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)='/dev/loop', 0x9, 0x0) 09:40:12 executing program 4: r0 = socket(0xa, 0x1, 0x0) connect$pptp(r0, &(0x7f0000000080)={0xa, 0x2, {0x0, @empty}}, 0x1e) 09:40:12 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x1}, 0x24}}, 0x0) 09:40:12 executing program 2: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x1a0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000500)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x40801}, 0xc090) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0xffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x5, 0x4}, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x5, 0x2, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xe855}}, 0x10) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 09:40:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20}, 0x0) 09:40:12 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x8001) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:40:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') read$fb(r0, &(0x7f0000000440)=""/255, 0xff) 09:40:12 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x14, 0xf6180917707847e1, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4, 0xd00}]}, 0x18}}, 0x0) 09:40:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000000400)={0x1000, &(0x7f0000000240), 0x0, &(0x7f00000002c0), {0x23}, &(0x7f0000000300)=""/69, 0x45, &(0x7f0000000380)=""/19, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) clone3(&(0x7f0000000540)={0x1000900, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x36}, &(0x7f0000000140)=""/37, 0x25, &(0x7f0000000180)=""/176, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x0) 09:40:13 executing program 4: r0 = socket(0x18, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x200000000000ff) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="bc", 0x1}], 0x1}, 0x890) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000010000000000003000000400001802c0004001400010002001400020002004e22e000000200000000000000000d0001007564703a73797a3000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1c0, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd3d}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x984c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa960}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x66d1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaeca}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @empty, 0x8}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f00000008c0)={'tunl0\x00', r4, 0x7800, 0x80, 0x5, 0x91, {{0x29, 0x4, 0x3, 0x5, 0xa4, 0x67, 0x0, 0x80, 0x29, 0x0, @private=0xa010101, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x1e, 0x1, 0x4, [{@empty, 0x80000001}, {@local, 0x9}, {@multicast1, 0x7f}]}, @ssrr={0x89, 0x13, 0x26, [@empty, @multicast1, @rand_addr=0x64010101, @remote]}, @ssrr={0x89, 0x17, 0x9b, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @lsrr={0x83, 0x7, 0x6b, [@broadcast]}, @cipso={0x86, 0x1d, 0x3, [{0x5, 0xf, "38493a397d076670b2258bf6f0"}, {0x2, 0x8, "81295fe8dcc0"}]}, @timestamp_addr={0x44, 0x14, 0x3d, 0x1, 0x7, [{@multicast2, 0x1000}, {@local, 0x1}]}, @ssrr={0x89, 0xf, 0xdb, [@empty, @rand_addr=0x64010102, @remote]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)={0x258, 0x0, 0x304, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xce}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x0, 0x88, 0x4, 0xfff}, {0x3, 0x0, 0x7, 0x40}, {0x25d, 0x3, 0x7}, {0x5, 0x4, 0x1f, 0x9}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000540)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2d8, 0x13, 0x400, 0x70bd27, 0x25dfdbfb, {0x2a, 0x7, 0xf, 0x5, {0x4e22, 0x4e23, [0x7, 0x1f, 0x6, 0x9], [0x80, 0x99, 0x1, 0x8], r4, [0x3ff, 0x5]}, 0x5, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "c685b9c044edd0e9e700fae08ba61c49c1cce83439667f0b43a804ab1b0b8153943960a02899cd9a4ed72c754737c042b0eee88f475d64e36a43671bc68fa06ed394ecf7cb12"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "057b05a65f7e18d7455ad66827c6469ed5b25eea803210de86fca19e3a33f90e5fe3cc9e2fc813763a3736231dc070d662185beef6cba93b89362ac8fba4740a7ce320a8fa4d7178bb19f48e70559471bed06db9a2a6b873fed0dbca98070b63bcceafc94280eedc58f017eca9eb1c6a17094dad9ea0a0efcc76abf509c5dd0aed1583cb60cbb650c5df7b27de76bd0f"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "bb4ac19c43e3c3205c262bca3e667f860c068b947480f26e8d64cc08197ee43b41633a6260015a2f33ce780ba851a18ec9df08eeb93fbf9bff80c40d9502670e8584284499d37baf03c9616f0009f798ce2f112ee8f95b3fb20d6eb9de57178aeb16e9632b10c5f5b7d91ee85233c141cbb1fd60d2c85a1c97c60cf756dea7bfb12c986522d7d785ae83e1b28ac2c98ddc0eb7e2ff2e6b7a3569247e54e3a30078346307c02b4d8b7b475809ae880a0f97c2f9fc0403a864657fbf"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a69c524d51465dde14ad5124daa907994c42"}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "b9a64c8fe0caf1f1a4cc2f7c63f90b0c55ec7c5cca080265624f5d13cf3c9c8798bdbd5341bd5963ea600a7c18cf537050df6541a1617310d8390bbd829902e2bcea4422b2f46348af7b1754eb73ef7e045ce634b81ca82a72b178fa5dca2b073a476e222cedc4e2c0e63725813df8a642406defeb48be6c7c0db7bc89a75704d8784dc8768e95f8217ce581491fdd74dd502b394567191ab139344b74e77f1f269d6c2e19b97a02109ecd49b9c954fd226d284018ab90f4ea9218706580db30c98f63051ffb292d04a7857c4e"}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x10}, 0x40850) sendto$l2tp(r0, &(0x7f0000000000)="265f2cece1b8c45fb7dacc8f9f86f6e70790762a4835fa9868627967e91ca0d065dbf1e2cb15fcbfdeee4a11496b2dc5debc1dd9aa9e64b5318eb105140ea5e16c0853566b4f531af820db8f7f3259749dba305ddfeb1c1b61958dd25ff0e9153a655b99351347416f437b654478ef7520f7563f3e50a443", 0x78, 0x4000800, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0x0, 0x2, @mcast1, @ipv4={[], [], @broadcast}, 0xff00, 0x8000, 0x6, 0x9}}) 09:40:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/9, 0x9}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x11b, &(0x7f0000000300)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 338.382633][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.669484][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 09:40:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x59) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:13 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x20) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e], [], @loopback}}, 0x20) 09:40:13 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(r0, 0x0, 0x3fffff) 09:40:13 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) read$char_raw(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 09:40:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x58100, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r5, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 09:40:14 executing program 2: getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)) select(0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x3, 0x9}, &(0x7f00000002c0)={0x5, 0x536d30e2, 0x100000000, 0x0, 0x0, 0x6, 0xfff, 0x9}, 0x0) 09:40:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)=ANY=[@ANYBLOB="5a2560235348ff03000000eb6fcb3853790b76d2"]) open(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e23, 0x0, @mcast1, 0x2}, {0xa, 0x4e24, 0x8001, @ipv4={[], [], @private=0xa010100}, 0x7}, 0x7, [0x0, 0x1f, 0x4, 0x0, 0x0, 0x7, 0x4, 0x8]}, 0x5c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_genetlink_get_family_id$devlink(0x0) gettid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x800, 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 339.586389][ T9704] ion_buffer_destroy: buffer still mapped in the kernel 09:40:14 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x404, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000004c0)={0x0, 0x0, 0x0, {0x2, @pix_mp}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffd95, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x20}, 0x2404c001) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200", 0x6, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f0000000540)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) socket$netlink(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:40:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x58100, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r5, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 09:40:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xc701) 09:40:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0xbb15b5b8b90e75f5}, 0x14}}, 0x0) [ 340.290857][ T9719] ISOFS: Unable to identify CD-ROM format. [ 340.414427][ T9719] ISOFS: Unable to identify CD-ROM format. 09:40:16 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0xff, 0xfa, 0x0, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2000, 0x85f6, 0x0, 0x6, 0x97a2, 0x0, 0x100}, 0x0, 0xa, r0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x1, 0x2, 0x80, 0x6, 0x0, 0x7, 0x4501, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xe13, 0x5}, 0x0, 0x1, 0x100, 0x9, 0x5ca, 0x1, 0xf012}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000380)=0x1) 09:40:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 09:40:16 executing program 5: syz_emit_ethernet(0x4f, &(0x7f00000000c0)={@multicast, @empty=[0x5, 0xfc, 0x38, 0x0, 0x0, 0x25], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x19, 0x3a, 0xff, @initdev={0xfe, 0x88, [0x8], 0x0, 0x0}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x0, 0x0, "720096"}]}}}}}}, 0x0) 09:40:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 09:40:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0x6802, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008108e00f80ecdb4cb9d90163190405000b00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 09:40:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x11, r0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)='\x00') 09:40:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000006540)) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getneigh={0x20, 0x1e, 0xb0b}, 0x20}}, 0x0) 09:40:16 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001340)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af30, &(0x7f00000003c0)={0x0, 0x4}) 09:40:16 executing program 1: pipe2$9p(&(0x7f00000000c0), 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, &(0x7f0000000100)={0x0, 0x2710}) 09:40:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x2, 0x10, 0xfa00, {0x0}}, 0x18) 09:40:16 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x0, 0x0, "5a81ad4d7c56"}}) 09:40:16 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x8}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp6}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0x8, 0x8, 0x58, @private1, @mcast2, 0x7800, 0x1, 0x100, 0x5}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0x7fffffff, 0xb, 0x4, 0x20, 0x7f, {0x77359400}, {0x2, 0x2, 0xc1, 0x1, 0x3, 0x7, "9c181c19"}, 0x586, 0x4, @userptr=0x32ee, 0x6}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x1, 0x3f, 0x81, 0x0, 0x8000000000000, 0x903, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x61, 0x1, @perf_config_ext={0x1, 0x100}, 0x40000, 0x3, 0x5, 0x7, 0x401, 0x4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x8}, 0x3c) inotify_rm_watch(0xffffffffffffffff, 0x0) 09:40:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) 09:40:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x541b, 0x0) 09:40:17 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00002ad000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000345000/0x2000)=nil, 0x2000, 0x1000000000008) 09:40:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0), 0xa) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) sendmmsg(0xffffffffffffffff, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmmsg(r0, &(0x7f00000063c0)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000), 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x11c, 0x0, 0x30472951ee590c0, 0x0, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) 09:40:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="0400000900000000666174000404090a0200027400f801", 0x17}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 09:40:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0845657, &(0x7f0000000200)) 09:40:17 executing program 2: io_setup(0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x18, r2, 0x703, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 09:40:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x2}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) 09:40:17 executing program 5: mlockall(0x5) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) munlockall() 09:40:17 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x400000000}, 0x22) 09:40:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x40002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) [ 342.855795][ T27] audit: type=1326 audit(1599558017.634:19): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9793 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 [ 342.923844][ T27] audit: type=1326 audit(1599558017.634:20): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9793 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 09:40:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9718}}}, 0x90) 09:40:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000002d80)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="d7f6ca07f8a73661a5fd9417a447c600"}) 09:40:17 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x1a, 0x0, &(0x7f00000002c0)) 09:40:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 342.972222][ T27] audit: type=1326 audit(1599558017.634:21): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9793 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 343.058367][ T27] audit: type=1326 audit(1599558017.634:22): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9793 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45d5b9 code=0x7fc00000 09:40:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x26, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "171f52ed"}]}}, 0x0}, 0x0) 09:40:17 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x43) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 09:40:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4c032, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)) 09:40:17 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)='n', 0x1}]) [ 343.171927][ T9848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 09:40:18 executing program 1: ioperm(0x0, 0x80, 0x199) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) [ 343.234220][ T9856] kvm [9844]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 343.389403][ T8189] usb (null): failed to copy DMA map 09:40:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x311}, 0x14}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:40:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1f, 0x7f, 0x9, 0x0, 0x0, 0x8001, 0x8000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x6}, 0x4f905, 0x8, 0x2, 0x0, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235008000000f30f30f09460f72f1a8c401317427b9a6010006b800400000ba000000000f30400f01db420fc79ce80d00000064430ff7d00f009ecc59e2220fae32", 0x48}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x10, 0x1, 0x300}}], 0x10}, 0x0) 09:40:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x24420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 09:40:18 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) [ 343.537681][ T8189] usb 3-1: new high-speed USB device number 2 using dummy_hcd 09:40:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48cc2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)) 09:40:18 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x4, 0x3, 0x21f}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x4, 0x3, 0x21f}, 0x40) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="1805000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000071170c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) r2 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r2, r1, 0x25, 0x8}, 0x10) 09:40:18 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000380)="aa", 0x1, 0x0, 0x0, 0x700000000000000) [ 343.937979][ T8189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.971102][ T8189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.043365][ T8189] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 344.084985][ T8189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.171249][ T8189] usbip-host 3-1: 3-1 is not in match_busid table... skip! 09:40:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f00000001c0)={[{@fat=@gid={'gid'}}]}) 09:40:21 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000005500)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 09:40:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:40:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x8a001, 0x0) r2 = dup2(r1, r1) write$FUSE_ENTRY(r2, &(0x7f00000005c0)={0x90}, 0x90) dup2(r0, r1) 09:40:21 executing program 5: syz_mount_image$btrfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001800)='./file0/../file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000001c40)='nfs\x00', &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, &(0x7f0000002080), 0x20000, &(0x7f0000002100)='\x00') 09:40:21 executing program 0: socket(0x29, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 346.231138][ T7341] usb 3-1: USB disconnect, device number 2 09:40:21 executing program 4: timer_create(0x3, &(0x7f0000000080)={0x0, 0x20, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000140)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 346.475641][ T9953] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) 09:40:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xc008ae67, 0x400009) 09:40:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x300) 09:40:21 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15, 0x2, @thr={&(0x7f0000000340), &(0x7f0000000840)="13df7d4646bb341244537ef49acd64f38cb5620e018a8355707cc542aa8557f5001ccc42036a81a2e88360db43ff8a85e64b2546f0ee3933b4bb3df69129f1e0cb972b46689673e5c68a203dfe7e710f3a329827430d4b5dcea5d689aa499e871ea08611718393f2fef1"}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 09:40:21 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x200, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x125d, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0481273, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x30000000000000, 0x3, 0x0, 0x0, 0x0, "a200ccf65496a736b4a4b7a55454ccc347da8edec3f23b1ae465ea59ccd1561337549694124fb72b2c417eba915cb15de2544b36e6c069045ce2f66bdb8adaea", "4a383408328f916509183b9a6d611a03df7779165b25dec62bc63a384b98ac0fbe2cdf8e39d1c8281e21a70e895e2883d85687a9c4b46103317a96acf61cf34e", "364196e685e6ff8664270df40194d6794138031ad2971ef575dac100"}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x1f, 0x0, "a161f708cc5c3443bbaf302af5a1ddb6339b273cf29948b538e4823cae70258a78d58b570e4062f565ef0fa72111c4f0b32a11beb704a2b8fa999c1a764092eb", "f170f49c06dfe990411bdf32e8325cba49e6c91456537a784fa620d8c3e7bf107e55d35d6a26620427d7a48186655f5b7712dcaf721ae180e884d618027d53f0", "6cc74d8b2976d61a68cfa1be35b61fd9dc4b00a94a8e4f4cfcd68e34cea94616", [0x8]}) 09:40:21 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$qrtr(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/65, 0x7ffff000}], 0x1}, 0x20000538, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0}], 0x492492492492494, 0x0) 09:40:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x28}}, 0x0) 09:40:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r0, 0x1000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101202, 0x0) sendfile(r1, r0, 0x0, 0xeefffdef) 09:40:21 executing program 5: io_uring_setup(0x0, &(0x7f0000000000)) r0 = socket(0xa, 0x3, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa}, 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x7a) 09:40:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x26e1, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100), 0xfffffdef) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') perf_event_open(&(0x7f00000003c0)={0x4, 0x70, 0x0, 0x6, 0xff, 0xa2, 0x0, 0x2, 0x1608b, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xab4c, 0xebcf3dcac6e8a3c6, @perf_config_ext={0x4, 0x806}, 0x1, 0x0, 0x5b, 0x0, 0x4000001, 0x9, 0x1b}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x334) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x20600, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) accept4$ax25(r1, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @netrom, @bcast, @default, @netrom, @remote, @netrom, @null]}, &(0x7f00000001c0)=0x48, 0x80800) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000002c0)={0x0, 0x5}) r2 = memfd_create(&(0x7f0000000440)='\x00', 0x1) lseek(r2, 0x81, 0x1) 09:40:22 executing program 4: syz_mount_image$hfsplus(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@index_off='index=off'}]}) [ 347.414075][ T2547] libceph: connect (1)[d::]:6789 error -101 [ 347.435762][ T2547] libceph: mon0 (1)[d::]:6789 connect error [ 347.481364][ T9980] ceph: No mds server is up or the cluster is laggy [ 347.494990][ T17] libceph: connect (1)[d::]:6789 error -101 [ 347.519066][ T17] libceph: mon0 (1)[d::]:6789 connect error 09:40:22 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 347.540259][T10017] overlayfs: missing 'lowerdir' 09:40:22 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), 0x4) 09:40:22 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmmsg(r0, &(0x7f00000050c0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="a5d8acedb9df83444993915aa72f7db5", 0x10}, {&(0x7f0000000100)="34539752", 0x4}], 0x2}}], 0x1, 0x0) 09:40:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000600)="9c", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r1}, &(0x7f0000000640)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'rmd160-generic\x00'}}) 09:40:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 09:40:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x28}}, 0x0) [ 348.078652][T10016] IPVS: ftp: loaded support on port[0] = 21 09:40:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r0, r1, 0x0, 0xc604) 09:40:23 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, 0x0) 09:40:23 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) pselect6(0x10, &(0x7f0000000000)={0x8}, &(0x7f0000000080), 0x0, 0x0, 0x0) 09:40:23 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) read$usbfs(r1, &(0x7f0000000140)=""/147, 0x93) mmap$snddsp_status(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x82000000) [ 348.434740][ T27] audit: type=1400 audit(1599558023.214:23): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=10050 comm="syz-executor.1" [ 348.623769][T10018] IPVS: ftp: loaded support on port[0] = 21 [ 349.792468][ T9664] tipc: TX() has been purged, node left! 09:40:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000001300)) 09:40:35 executing program 4: syz_init_net_socket$rose(0xffffffffffffffff, 0x5, 0x0) 09:40:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001240)=[{0x0, 0x0, 0x7}, {0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f00000012c0)) 09:40:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="eb", 0x1}], 0x1, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20e}}], 0x20}], 0x1, 0x0) 09:40:35 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x41800, 0x0) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1340064, &(0x7f00000002c0)) 09:40:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x78}}, 0x0) 09:40:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002880)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000100)='\"', 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0xfffffffffffffccc, 0x0, 0x0, 0x0) 09:40:35 executing program 0: socket(0x2, 0x2, 0x0) socket(0x15, 0x5, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x101702) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080)={'veth0_macvtap'}, 0x10) 09:40:35 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) [ 360.650196][T10097] ISOFS: Unable to identify CD-ROM format. 09:40:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x401870c8, &(0x7f0000000040)={0x0}) 09:40:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x134, 0x17, 0x0, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@ipv4={[], [], @private}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2}, {{@in=@loopback, @in=@multicast1}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x13}}, @algo_crypt={0x0, 0x2, {{'cbc-serpent-sse2\x00'}, 0x0, "50bfb566f6ac8916eee86890f25110780b8ff884ab4b3be9dac391a1f6bc03032bdcbcf48f6ab09aefb876f8fcd397eea35070ef657aa51373"}}]}, 0x33fe0}}, 0x0) [ 360.792488][T10097] ISOFS: Unable to identify CD-ROM format. 09:40:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, 0x0, 0x0) 09:40:35 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x5, 0x80, 0xf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x2) syz_open_dev$loop(&(0x7f0000001380)='/dev/loop#\x00', 0x8, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x6) 09:40:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3, @ANYBLOB="443c3d3c834cfa9d683826e7673405fcda4522e51baaeb8b90a6f914cd"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 361.067506][T10128] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 09:40:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140), 0x4) [ 361.296836][T10136] bond1: (slave veth3): making interface the new active one [ 361.374851][T10136] bond1: (slave veth3): Enslaving as an active interface with an up link [ 361.441630][T10128] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 361.510056][T10136] bond1: (slave veth5): Enslaving as a backup interface with an up link [ 361.609049][T10114] EXT4-fs (sda1): re-mounted. Opts: 09:40:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000540), 0x118) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:40:36 executing program 4: r0 = socket$inet6_mptcp(0x2, 0x3, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000580)) 09:40:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0) r1 = clone3(&(0x7f00000014c0)={0x100000000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x31}, &(0x7f0000001280)=""/124, 0x7c, &(0x7f0000001300)=""/199, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r0}}, 0x58) r2 = getpid() r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r3, 0x0) r4 = fcntl$getown(r0, 0x9) r5 = getpid() r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0x0, r6, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone3(&(0x7f0000001580)={0x8200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000001480), {0x41}, &(0x7f0000000100)=""/4080, 0xff0, &(0x7f0000001100)=""/165, &(0x7f0000001440)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0x0, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r7}}, 0x58) ftruncate(r0, 0x40000) write$qrtrtun(r0, &(0x7f00000016c0)="845c1a592db2b5c3411c5154ebd1c63f7b6527192fa756d986cdbf786c9ab0831368d79802e6e4cdbecb44431cb170e298f633aba0a98342531064dec6f556571e2210c77f2877594000", 0xffffffd6) 09:40:36 executing program 2: io_uring_setup(0x6e9d, &(0x7f0000000040)={0x0, 0x0, 0x15}) 09:40:36 executing program 5: keyctl$set_timeout(0xf, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000400)=ANY=[], 0xc6) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0) [ 361.643672][T10190] EXT4-fs (sda1): re-mounted. Opts: 09:40:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0910b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x0, 0x0) 09:40:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x178, 0x0, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x7}}}, @common=@unspec=@limit={{0x48, 'limit\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'tunl0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 09:40:36 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x1dc5a6097d1032d2, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000480) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) [ 362.010807][T10214] xt_limit: Overflow, try lower: 0/0 09:40:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x9}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) [ 362.147885][ T12] usb (null): failed to copy DMA map 09:40:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0xd8}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0}) 09:40:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7}) pselect6(0x40, &(0x7f0000000280)={0x3f}, 0x0, 0x0, 0x0, 0x0) 09:40:37 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000200)=""/2, 0x2) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x5890, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x1) mount(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f0000001240)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) [ 362.297340][ T12] usb 5-1: new high-speed USB device number 2 using dummy_hcd 09:40:37 executing program 3: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) [ 362.577471][ T12] usb 5-1: Using ep0 maxpacket: 16 09:40:37 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x1c}, @dev={0xac, 0x14, 0x14, 0x35}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) [ 362.728205][ T12] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 362.764417][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 09:40:37 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000100)='./bus\x00', 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 09:40:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000040)=@in={0xa, 0x4e23, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) 09:40:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4) [ 362.799903][T10248] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 362.814245][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.828551][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 362.856028][ T12] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 362.880542][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.903995][ T12] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 363.091058][ T27] audit: type=1804 audit(1599558037.864:24): pid=10260 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir271616631/syzkaller.R53GHf/61/bus" dev="sda1" ino=15873 res=1 errno=0 [ 363.183140][ T27] audit: type=1804 audit(1599558037.964:25): pid=10261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir271616631/syzkaller.R53GHf/61/bus" dev="sda1" ino=15873 res=1 errno=0 09:40:39 executing program 4: r0 = socket(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) 09:40:39 executing program 3: unshare(0x40000000) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) accept(r0, 0x0, 0x0) listen(r0, 0x0) sendto$inet(r0, &(0x7f0000000000)="d2", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000600309ff5bffff00c7e5ed5e232e725839c97b910000", 0x104}], 0x1) 09:40:39 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145403, &(0x7f00000000c0)) 09:40:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) 09:40:39 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8912, &(0x7f0000000000)) 09:40:39 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000034c0)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) [ 364.953096][ T29] usb 5-1: USB disconnect, device number 2 [ 365.039864][T10284] IPVS: ftp: loaded support on port[0] = 21 09:40:39 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 09:40:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:40:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000040)="31f6440d9d5d2503005960f688a8", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 09:40:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) 09:40:40 executing program 4: getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x10) 09:40:40 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) 09:40:40 executing program 5: socket(0x26, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 365.739163][T10305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.815350][T10284] IPVS: ftp: loaded support on port[0] = 21 [ 366.204942][T10305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.056772][T10305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.291384][T10305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.367071][T10305] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.384622][T10305] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.404610][T10305] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.417150][T10305] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 09:40:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000b40)=0x10) 09:40:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000080)=0x4) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0xffffffff, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b41, &(0x7f0000000140)={0x0, 0x11, 0x0}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) 09:40:43 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0xa, 0x0, 0x0, 0x100000}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000000300)="b2", 0x1}], 0x1}, 0x0) 09:40:43 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) 09:40:43 executing program 0: syz_mount_image$gfs2(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531104}) syz_mount_image$gfs2(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:40:43 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) socket$inet6(0xa, 0x400000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 368.448193][ T9649] tipc: TX() has been purged, node left! [ 368.489884][T10374] tipc: Trying to set illegal importance in message [ 368.516058][T10374] tipc: Trying to set illegal importance in message 09:40:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) 09:40:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000080)=0x4) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0xffffffff, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b41, &(0x7f0000000140)={0x0, 0x11, 0x0}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) 09:40:43 executing program 0: syz_mount_image$ocfs2(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',afid=0x0000000000008000,version=9p2000']) 09:40:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x40e60c) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 09:40:43 executing program 1: ioperm(0x0, 0x100, 0x1ff) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002240)={0x88140}, 0x18) 09:40:43 executing program 2: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x4001, &(0x7f0000000b80)) [ 368.742304][T10390] tipc: Trying to set illegal importance in message 09:40:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') read$snddsp(r0, 0x0, 0x0) 09:40:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000380)=0x4) [ 368.900621][T10406] gfs2: not a GFS2 filesystem [ 368.971148][T10406] gfs2: not a GFS2 filesystem 09:40:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x13, 0xa, 0x101}, 0x14}}, 0x0) 09:40:44 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local, 0x6}}, 0x24) 09:40:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 09:40:44 executing program 2: syz_mount_image$gfs2(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x8}, &(0x7f0000000080), 0x0) 09:40:44 executing program 5: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f000031153e", 0x23}], 0x1}, 0x0) 09:40:44 executing program 0: syz_mount_image$gfs2(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x18) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x18) linkat(r1, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0/file0\x00', 0x0) 09:40:44 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 09:40:44 executing program 2: pidfd_open(0x0, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000900)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x0, 0x0, 0x0}) 09:40:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/1172], 0x494}}, 0x20000080) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xd488}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) 09:40:44 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{&(0x7f0000003c40)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000004340)=[{&(0x7f0000003c80)='G', 0x34000}], 0x1}}], 0x1, 0x200448d4) 09:40:44 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)=@xdp={0x2c, 0x8, r1}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000280)="cd", 0x1}], 0x3}}], 0x1, 0x0) 09:40:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 09:40:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1486, &(0x7f0000000200)) syz_io_uring_setup(0x497a, &(0x7f0000000000)={0x0, 0x0, 0x36, 0x0, 0x0, 0x0, r0}, &(0x7f0000831000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 09:40:44 executing program 0: socketpair(0x25, 0x805, 0x4, &(0x7f0000004a40)) 09:40:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) 09:40:44 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)) ppoll(&(0x7f0000000300)=[{r0, 0x3372}], 0x1, 0x0, 0x0, 0x0) [ 369.959910][ T27] audit: type=1804 audit(1599558044.744:26): pid=10455 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir296698501/syzkaller.3Ik4eE/68/bus" dev="sda1" ino=16104 res=1 errno=0 [ 369.993529][T10455] EXT4-fs warning (device sda1): ext4_group_add:1658: No reserved GDT blocks, can't resize 09:40:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'batadv_slave_0\x00', @ifru_flags}) 09:40:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000e7ffffff851000000300000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095000000000000009500003f000000000000005300094d5e3690e9a652125c3512eda0ba6704cc8cda606cc86a07f964db1b8a9a3f39d206f4620cb4619b39124d883d35dfefbee97fc2a674f09682e07f13f3f4c81b34a7d24fc5d11f61cb2a00a19725dd"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 370.057549][ T2547] Bluetooth: hci0: command 0x0406 tx timeout [ 370.069807][ T2547] Bluetooth: hci1: command 0x0406 tx timeout 09:40:44 executing program 5: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) [ 370.096959][ T27] audit: type=1804 audit(1599558044.854:27): pid=10473 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir296698501/syzkaller.3Ik4eE/68/bus" dev="sda1" ino=16104 res=1 errno=0 [ 370.127488][ T2547] Bluetooth: hci2: command 0x0406 tx timeout 09:40:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x13, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}]}, 0x5c}}, 0x0) 09:40:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000000)={"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"}) [ 370.162649][ T2547] Bluetooth: hci3: command 0x0406 tx timeout [ 370.242475][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 09:40:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:40:45 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x9) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) 09:40:45 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) [ 375.177365][ T29] Bluetooth: hci4: command 0x0406 tx timeout [ 513.896935][ T1172] INFO: task syz-executor.4:10468 blocked for more than 143 seconds. [ 513.905154][ T1172] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 513.913971][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.922840][ T1172] task:syz-executor.4 state:D stack:29800 pid:10468 ppid: 6890 flags:0x00004004 [ 513.943095][ T1172] Call Trace: [ 513.946547][ T1172] __schedule+0xea9/0x2230 [ 513.955354][ T1172] ? io_schedule_timeout+0x140/0x140 [ 513.970234][ T1172] schedule+0xd0/0x2a0 [ 513.974362][ T1172] schedule_timeout+0x1d8/0x250 [ 513.985086][ T1172] ? usleep_range+0x170/0x170 [ 514.002451][ T1172] ? lock_downgrade+0x830/0x830 [ 514.010570][ T1172] ? do_raw_spin_lock+0x120/0x2b0 [ 514.015635][ T1172] ? _raw_spin_unlock_irq+0x1f/0x80 [ 514.024886][ T1172] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 514.032896][ T1172] ? _raw_spin_unlock_irq+0x1f/0x80 [ 514.041953][ T1172] wait_for_completion+0x163/0x260 [ 514.049244][ T1172] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 514.055863][ T1172] io_uring_setup+0x1495/0x29a0 [ 514.065590][ T1172] ? io_sq_thread+0xe00/0xe00 [ 514.071798][ T1172] ? io_issue_sqe+0x5bb0/0x5bb0 [ 514.080437][ T1172] ? io_wake_function+0x2e0/0x2e0 [ 514.085556][ T1172] ? put_timespec64+0xcb/0x120 [ 514.091630][ T1172] ? ns_to_timespec64+0xc0/0xc0 [ 514.100764][ T1172] ? check_preemption_disabled+0x50/0x130 [ 514.108036][ T1172] ? syscall_enter_from_user_mode+0x20/0x290 [ 514.114239][ T1172] ? lockdep_hardirqs_on+0x53/0x100 [ 514.121551][ T1172] do_syscall_64+0x2d/0x70 [ 514.127299][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.133236][ T1172] RIP: 0033:0x45d5b9 [ 514.139553][ T1172] Code: Bad RIP value. [ 514.143894][ T1172] RSP: 002b:00007fd7f3c7bbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 514.153999][ T1172] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 000000000045d5b9 [ 514.162731][ T1172] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 000000000000497a [ 514.171413][ T1172] RBP: 000000000118d038 R08: 0000000000000000 R09: 0000000000000000 [ 514.181759][ T1172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020ffd000 [ 514.190308][ T1172] R13: 0000000020831000 R14: 0000000000000000 R15: 0000000000000000 [ 514.199068][ T1172] INFO: task io_uring-sq:10472 blocked for more than 143 seconds. [ 514.207534][ T1172] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 514.214568][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.224829][ T1172] task:io_uring-sq state:D stack:31120 pid:10472 ppid: 2 flags:0x00004000 [ 514.235232][ T1172] Call Trace: [ 514.239167][ T1172] __schedule+0xea9/0x2230 [ 514.243629][ T1172] ? io_schedule_timeout+0x140/0x140 [ 514.250301][ T1172] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 514.258413][ T1172] schedule+0xd0/0x2a0 [ 514.262510][ T1172] ? __do_sys_io_uring_enter+0x1940/0x1940 [ 514.269394][ T1172] schedule_preempt_disabled+0xf/0x20 [ 514.274858][ T1172] kthread+0x2ac/0x4a0 [ 514.279980][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 514.285151][ T1172] ret_from_fork+0x1f/0x30 [ 514.290508][ T1172] [ 514.290508][ T1172] Showing all locks held in the system: [ 514.303117][ T1172] 1 lock held by khungtaskd/1172: [ 514.308857][ T1172] #0: ffffffff89c67500 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 514.319492][ T1172] 1 lock held by in:imklog/6690: [ 514.324432][ T1172] #0: ffff88809657cdb0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 514.334476][ T1172] [ 514.337671][ T1172] ============================================= [ 514.337671][ T1172] [ 514.346088][ T1172] NMI backtrace for cpu 1 [ 514.350539][ T1172] CPU: 1 PID: 1172 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 514.359993][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.370047][ T1172] Call Trace: [ 514.373411][ T1172] dump_stack+0x198/0x1fd [ 514.377746][ T1172] nmi_cpu_backtrace.cold+0x44/0xd7 [ 514.383004][ T1172] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 514.388667][ T1172] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 514.394722][ T1172] watchdog+0xd89/0xf30 [ 514.398890][ T1172] ? trace_sched_process_hang+0x2e0/0x2e0 [ 514.405160][ T1172] kthread+0x3b5/0x4a0 [ 514.409212][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 514.414317][ T1172] ret_from_fork+0x1f/0x30 [ 514.419034][ T1172] Sending NMI from CPU 1 to CPUs 0: [ 514.425454][ C0] NMI backtrace for cpu 0 [ 514.425463][ C0] CPU: 0 PID: 6697 Comm: rs:main Q:Reg Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 514.425470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.425475][ C0] RIP: 0010:__lock_acquire+0xd0c/0x5570 [ 514.425493][ C0] Code: 0a 41 bf 01 00 00 00 0f 86 83 00 00 00 89 05 ab dc c9 0a eb 7b 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 <0f> 85 ae 33 00 00 48 81 3b c0 54 f9 8b 0f 84 bb f3 ff ff 83 fe 01 [ 514.425498][ C0] RSP: 0018:ffffc9000a0ef468 EFLAGS: 00000046 [ 514.425507][ C0] RAX: dffffc0000000000 RBX: ffffffff89c67500 RCX: 1ffff9200141de9f [ 514.425513][ C0] RDX: 1ffffffff138cea0 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.425519][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 514.425525][ C0] R10: fffffbfff15796c1 R11: 0000000000000000 R12: 0000000000000000 [ 514.425531][ C0] R13: 0000000000000000 R14: ffff888094cec480 R15: 0000000000000002 [ 514.425537][ C0] FS: 00007fc986d7f700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 514.425542][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.425548][ C0] CR2: 00007fa19f36e000 CR3: 0000000095122000 CR4: 00000000001506f0 [ 514.425554][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 514.425560][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 514.425564][ C0] Call Trace: [ 514.425568][ C0] ? find_held_lock+0x2d/0x110 [ 514.425572][ C0] ? mark_lock+0xbc/0x1710 [ 514.425576][ C0] ? mark_held_locks+0x9f/0xe0 [ 514.425581][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 514.425586][ C0] ? page_outside_zone_boundaries+0x1f9/0x340 [ 514.425591][ C0] ? check_preemption_disabled+0x50/0x130 [ 514.425595][ C0] ? page_outside_zone_boundaries+0x1f9/0x340 [ 514.425600][ C0] ? preempt_count_add+0x74/0x140 [ 514.425604][ C0] lock_acquire+0x1f3/0xae0 [ 514.425609][ C0] ? get_mem_cgroup_from_mm+0x13/0x410 [ 514.425613][ C0] ? get_page_from_freelist+0x273c/0x3720 [ 514.425617][ C0] ? lock_release+0x8f0/0x8f0 [ 514.425622][ C0] ? lock_acquire+0x1f3/0xae0 [ 514.425626][ C0] get_mem_cgroup_from_mm+0x3b/0x410 [ 514.425631][ C0] ? get_mem_cgroup_from_mm+0x13/0x410 [ 514.425635][ C0] mem_cgroup_charge+0x18f/0x9c0 [ 514.425640][ C0] __add_to_page_cache_locked+0xa7c/0x10a0 [ 514.425644][ C0] ? file_write_and_wait_range+0x200/0x200 [ 514.425649][ C0] ? mod_lruvec_state.constprop.0+0x160/0x160 [ 514.425654][ C0] add_to_page_cache_lru+0x176/0x5b0 [ 514.425658][ C0] ? add_to_page_cache_locked+0x40/0x40 [ 514.425663][ C0] ? alloc_pages_current+0x18f/0x280 [ 514.425667][ C0] ? __page_cache_alloc+0x10b/0x420 [ 514.425672][ C0] pagecache_get_page+0x3ce/0xf70 [ 514.425677][ C0] grab_cache_page_write_begin+0x64/0x90 [ 514.425681][ C0] ext4_da_write_begin+0x35c/0x11d0 [ 514.425685][ C0] ? __ext4_journal_stop+0x107/0x1f0 [ 514.425690][ C0] ? ext4_write_begin+0x1510/0x1510 [ 514.425694][ C0] ? compat_import_iovec+0x3d0/0x3d0 [ 514.425699][ C0] ? balance_dirty_pages_ratelimited+0xa33/0x1840 [ 514.425704][ C0] generic_perform_write+0x20a/0x4f0 [ 514.425709][ C0] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 514.425713][ C0] ? down_write_killable+0x170/0x170 [ 514.425718][ C0] ext4_buffered_write_iter+0x235/0x4a0 [ 514.425722][ C0] ext4_file_write_iter+0x1f0/0x13f0 [ 514.425726][ C0] ? aa_file_perm+0x5e2/0x1100 [ 514.425731][ C0] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 514.425736][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 514.425740][ C0] ? aa_path_link+0x2f0/0x2f0 [ 514.425744][ C0] new_sync_write+0x422/0x650 [ 514.425748][ C0] ? new_sync_read+0x6e0/0x6e0 [ 514.425753][ C0] ? lock_downgrade+0x830/0x830 [ 514.425757][ C0] ? lock_is_held_type+0xbb/0xf0 [ 514.425761][ C0] ? __sb_start_write+0x1d5/0x470 [ 514.425765][ C0] vfs_write+0x5ad/0x730 [ 514.425769][ C0] ksys_write+0x12d/0x250 [ 514.425774][ C0] ? __ia32_sys_read+0xb0/0xb0 [ 514.425779][ C0] ? syscall_enter_from_user_mode+0x20/0x290 [ 514.425783][ C0] ? lockdep_hardirqs_on+0x53/0x100 [ 514.425787][ C0] do_syscall_64+0x2d/0x70 [ 514.425792][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.425796][ C0] RIP: 0033:0x7fc9897c31cd [ 514.425807][ C0] Code: c2 20 00 00 75 10 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ae fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 f7 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 514.425811][ C0] RSP: 002b:00007fc986d7e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 514.425822][ C0] RAX: ffffffffffffffda RBX: 00007fc97c0238a0 RCX: 00007fc9897c31cd [ 514.425828][ C0] RDX: 000000000000044d RSI: 00007fc97c0238a0 RDI: 0000000000000006 [ 514.425833][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.425839][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fc97c023620 [ 514.425845][ C0] R13: 00007fc986d7e5b0 R14: 000055ff66eb5360 R15: 000000000000044d [ 514.426645][ T1172] Kernel panic - not syncing: hung_task: blocked tasks [ 514.921709][ T1172] CPU: 1 PID: 1172 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 514.931146][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.941371][ T1172] Call Trace: [ 514.944650][ T1172] dump_stack+0x198/0x1fd [ 514.949036][ T1172] panic+0x347/0x7c0 [ 514.952951][ T1172] ? __warn_printk+0xf3/0xf3 [ 514.957541][ T1172] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 514.963166][ T1172] ? preempt_schedule_thunk+0x16/0x18 [ 514.968533][ T1172] ? watchdog.cold+0x22d/0x24b [ 514.973301][ T1172] ? watchdog+0xc59/0xf30 [ 514.977629][ T1172] watchdog.cold+0x23e/0x24b [ 514.982228][ T1172] ? trace_sched_process_hang+0x2e0/0x2e0 [ 514.987949][ T1172] kthread+0x3b5/0x4a0 [ 514.992022][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 514.997140][ T1172] ret_from_fork+0x1f/0x30 [ 515.002836][ T1172] Kernel Offset: disabled [ 515.007190][ T1172] Rebooting in 86400 seconds..