[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.


Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts.
2020/09/08 22:34:39 fuzzer started
2020/09/08 22:34:39 dialing manager at 10.128.0.26:34861
2020/09/08 22:34:39 syscalls: 3362
2020/09/08 22:34:39 code coverage: enabled
2020/09/08 22:34:39 comparison tracing: enabled
2020/09/08 22:34:39 extra coverage: enabled
2020/09/08 22:34:39 setuid sandbox: enabled
2020/09/08 22:34:39 namespace sandbox: enabled
2020/09/08 22:34:39 Android sandbox: /sys/fs/selinux/policy does not exist
2020/09/08 22:34:39 fault injection: enabled
2020/09/08 22:34:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/09/08 22:34:39 net packet injection: enabled
2020/09/08 22:34:39 net device setup: enabled
2020/09/08 22:34:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/09/08 22:34:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/09/08 22:34:39 USB emulation: enabled
2020/09/08 22:34:39 hci packet injection: enabled
22:36:31 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8916, 0x0)

22:36:31 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x400, 0x9, 0x7, 0x0, 0x1}, 0x40)

22:36:31 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15)

22:36:31 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000400000/0x4000)=nil, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
recvfrom$unix(r2, &(0x7f0000000300)=""/207, 0xcf, 0x2100, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4d, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x20000040)

22:36:32 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

22:36:32 executing program 5:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000000)=""/102396, 0x18ffc, 0x0)

syzkaller login: [  160.369265][ T6848] IPVS: ftp: loaded support on port[0] = 21
[  160.532671][ T6850] IPVS: ftp: loaded support on port[0] = 21
[  160.628893][ T6848] chnl_net:caif_netlink_parms(): no params data found
[  160.775187][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.783354][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.800016][ T6848] device bridge_slave_0 entered promiscuous mode
[  160.808245][ T6852] IPVS: ftp: loaded support on port[0] = 21
[  160.829045][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.836776][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.846505][ T6848] device bridge_slave_1 entered promiscuous mode
[  160.867228][ T6850] chnl_net:caif_netlink_parms(): no params data found
[  160.941692][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.989249][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.034979][ T6854] IPVS: ftp: loaded support on port[0] = 21
[  161.089764][ T6848] team0: Port device team_slave_0 added
[  161.106187][ T6848] team0: Port device team_slave_1 added
[  161.122004][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.129116][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.152147][ T6850] device bridge_slave_0 entered promiscuous mode
[  161.211349][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.218434][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.232441][ T6856] IPVS: ftp: loaded support on port[0] = 21
[  161.251598][ T6850] device bridge_slave_1 entered promiscuous mode
[  161.283493][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.297524][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.323683][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.412825][ T6850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.425141][ T6850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.436726][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.453026][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.504272][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.520592][ T6852] chnl_net:caif_netlink_parms(): no params data found
[  161.564939][ T6858] IPVS: ftp: loaded support on port[0] = 21
[  161.585795][ T6848] device hsr_slave_0 entered promiscuous mode
[  161.596266][ T6848] device hsr_slave_1 entered promiscuous mode
[  161.625704][ T6850] team0: Port device team_slave_0 added
[  161.677501][ T6850] team0: Port device team_slave_1 added
[  161.787762][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.796500][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.824965][ T6850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.839771][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.848521][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.875518][ T6850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.001733][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.008883][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.018665][ T6852] device bridge_slave_0 entered promiscuous mode
[  162.092877][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.100005][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.115410][ T6852] device bridge_slave_1 entered promiscuous mode
[  162.132728][ T6850] device hsr_slave_0 entered promiscuous mode
[  162.146438][ T6850] device hsr_slave_1 entered promiscuous mode
[  162.156167][ T6850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.164007][ T6850] Cannot create hsr debugfs directory
[  162.191123][ T6856] chnl_net:caif_netlink_parms(): no params data found
[  162.204745][ T6854] chnl_net:caif_netlink_parms(): no params data found
[  162.259292][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.302669][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.313891][ T6848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  162.329609][ T6848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  162.344475][ T6848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  162.371087][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[  162.405160][ T6848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  162.493309][ T6852] team0: Port device team_slave_0 added
[  162.506637][ T6858] chnl_net:caif_netlink_parms(): no params data found
[  162.532468][ T3923] Bluetooth: hci1: command 0x0409 tx timeout
[  162.547858][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.555849][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.564207][ T6854] device bridge_slave_0 entered promiscuous mode
[  162.583059][ T6852] team0: Port device team_slave_1 added
[  162.603913][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.615182][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.625012][ T6854] device bridge_slave_1 entered promiscuous mode
[  162.641525][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.648577][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.657632][ T6856] device bridge_slave_0 entered promiscuous mode
[  162.708280][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.718343][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.727964][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.736952][ T6856] device bridge_slave_1 entered promiscuous mode
[  162.745568][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.753272][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.770479][   T17] Bluetooth: hci2: command 0x0409 tx timeout
[  162.780985][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.819733][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.845500][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.853175][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.881020][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.933714][ T6807] Bluetooth: hci3: command 0x0409 tx timeout
[  162.936861][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.954793][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.974138][ T6854] team0: Port device team_slave_0 added
[  163.008807][ T6854] team0: Port device team_slave_1 added
[  163.069336][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.076571][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.104050][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.126860][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.134142][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.160617][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.170667][   T17] Bluetooth: hci4: command 0x0409 tx timeout
[  163.184574][ T6852] device hsr_slave_0 entered promiscuous mode
[  163.191957][ T6852] device hsr_slave_1 entered promiscuous mode
[  163.199505][ T6852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.207468][ T6852] Cannot create hsr debugfs directory
[  163.216162][ T6856] team0: Port device team_slave_0 added
[  163.254123][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.262663][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.270794][ T6858] device bridge_slave_0 entered promiscuous mode
[  163.279649][ T6856] team0: Port device team_slave_1 added
[  163.316071][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.323811][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.331990][ T6858] device bridge_slave_1 entered promiscuous mode
[  163.355576][ T6850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  163.355714][ T6807] Bluetooth: hci5: command 0x0409 tx timeout
[  163.374479][ T6850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  163.392840][ T6854] device hsr_slave_0 entered promiscuous mode
[  163.400098][ T6854] device hsr_slave_1 entered promiscuous mode
[  163.408144][ T6854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.416423][ T6854] Cannot create hsr debugfs directory
[  163.448918][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.458331][ T6850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  163.472994][ T6850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  163.493291][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.500269][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.532912][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.545943][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.577233][ T6858] team0: Port device team_slave_0 added
[  163.596508][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.605732][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.637006][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.654498][ T6858] team0: Port device team_slave_1 added
[  163.774897][ T6856] device hsr_slave_0 entered promiscuous mode
[  163.782562][ T6856] device hsr_slave_1 entered promiscuous mode
[  163.788994][ T6856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.799727][ T6856] Cannot create hsr debugfs directory
[  163.841258][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.848224][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.877692][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.895629][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.921423][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.928398][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.955411][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.049407][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.058303][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.112533][ T6848] 8021q: adding VLAN 0 to HW filter on device team0
[  164.159278][ T6858] device hsr_slave_0 entered promiscuous mode
[  164.173772][ T6858] device hsr_slave_1 entered promiscuous mode
[  164.181136][ T6858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.188681][ T6858] Cannot create hsr debugfs directory
[  164.208019][ T6852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  164.217995][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.230522][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.238850][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.246061][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.255459][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.284526][ T6852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  164.330032][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  164.339606][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  164.349335][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.356458][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.365857][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  164.378733][ T6852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  164.396679][ T6850] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.424035][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  164.433196][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  164.443036][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  164.450560][   T23] Bluetooth: hci0: command 0x041b tx timeout
[  164.453164][ T6852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  164.477287][ T6854] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  164.491356][ T6854] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  164.515022][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  164.523595][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.533198][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.559662][ T6854] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  164.585950][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  164.594863][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  164.603865][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  164.610500][   T23] Bluetooth: hci1: command 0x041b tx timeout
[  164.619487][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  164.629035][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  164.637638][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.650092][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  164.663031][ T6850] 8021q: adding VLAN 0 to HW filter on device team0
[  164.683080][ T6854] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  164.757864][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.771318][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.779756][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.786914][ T6807] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.797976][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.818205][ T6856] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  164.834907][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  164.844034][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  164.853485][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.854767][ T3923] Bluetooth: hci2: command 0x041b tx timeout
[  164.860615][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.881228][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.888677][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.897238][ T6856] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  164.919100][ T6856] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  164.935809][ T6856] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  164.981428][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.009290][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.032143][    T5] Bluetooth: hci3: command 0x041b tx timeout
[  165.059133][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.069857][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.079270][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.089586][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.112727][ T6858] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  165.139910][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.151363][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.159568][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  165.175043][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.206734][ T6858] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  165.224141][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  165.237579][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.246919][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  165.255735][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  165.264718][ T2632] Bluetooth: hci4: command 0x041b tx timeout
[  165.276100][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  165.288407][ T6858] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  165.298217][ T6858] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  165.319329][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.348661][ T6848] device veth0_vlan entered promiscuous mode
[  165.372681][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.381951][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.409896][ T6848] device veth1_vlan entered promiscuous mode
[  165.417005][ T2632] Bluetooth: hci5: command 0x041b tx timeout
[  165.433304][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  165.441682][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  165.449220][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  165.458552][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  165.467281][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  165.501501][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.532405][ T6854] 8021q: adding VLAN 0 to HW filter on device team0
[  165.542937][ T6850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.564348][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  165.574076][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  165.583370][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  165.591273][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  165.599107][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  165.636514][ T6852] 8021q: adding VLAN 0 to HW filter on device team0
[  165.647373][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  165.657365][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  165.667398][ T2632] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.674523][ T2632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.683042][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  165.691823][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.700193][ T2632] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.707316][ T2632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.725898][ T6848] device veth0_macvtap entered promiscuous mode
[  165.759076][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  165.769698][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.782977][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  165.792371][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  165.800888][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  165.809349][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  165.818399][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.825530][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.833708][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.842934][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  165.853721][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.862221][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.869289][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.877085][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.886004][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.896448][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.904960][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  165.919043][ T6848] device veth1_macvtap entered promiscuous mode
[  165.934279][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.943981][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.989151][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.997668][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  166.006558][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  166.018161][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.028413][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.041560][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.064095][ T6854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  166.075347][ T6854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.114769][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.122329][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  166.130217][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  166.142513][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.151772][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  166.160217][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.169328][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  166.177844][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  166.186228][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  166.194871][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.203956][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  166.235623][ T6856] 8021q: adding VLAN 0 to HW filter on device team0
[  166.250769][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  166.259246][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.268713][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  166.280518][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.288647][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  166.297702][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  166.306069][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  166.314517][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  166.323446][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.331773][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.344620][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.356383][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.366958][ T6850] device veth0_vlan entered promiscuous mode
[  166.385702][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.393794][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  166.403448][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  166.412716][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  166.426577][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  166.448793][ T6850] device veth1_vlan entered promiscuous mode
[  166.473959][ T6848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.501825][ T6848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.510933][ T6848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.519623][ T6848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.530824][    T5] Bluetooth: hci0: command 0x040f tx timeout
[  166.543661][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  166.556924][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.568798][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.578005][   T23] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.585115][   T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.598372][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.607146][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.616024][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.623173][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.631330][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.638741][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.646302][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.654734][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.662813][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.685317][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.701530][    T5] Bluetooth: hci1: command 0x040f tx timeout
[  166.709951][ T6858] 8021q: adding VLAN 0 to HW filter on device team0
[  166.738107][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  166.747317][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  166.757143][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  166.766220][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.775321][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.785108][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  166.822494][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.839099][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.847317][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.856429][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.865337][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.875050][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.882184][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.889832][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  166.898672][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.907767][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.930693][ T2632] Bluetooth: hci2: command 0x040f tx timeout
[  166.941442][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  166.949841][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.981306][ T6850] device veth0_macvtap entered promiscuous mode
[  167.017683][ T6856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
22:36:39 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

22:36:39 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  167.058661][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.090770][ T3923] Bluetooth: hci3: command 0x040f tx timeout
[  167.101732][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  167.119310][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.138629][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.145795][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
22:36:39 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  167.165469][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.178190][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  167.196943][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
22:36:39 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  167.233311][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  167.252016][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  167.275434][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
22:36:39 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  167.287510][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.343021][ T6850] device veth1_macvtap entered promiscuous mode
[  167.354643][ T3923] Bluetooth: hci4: command 0x040f tx timeout
[  167.365119][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  167.376150][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
22:36:39 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  167.416284][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.454449][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  167.465549][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  167.491958][   T23] Bluetooth: hci5: command 0x040f tx timeout
22:36:39 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  167.524167][ T6854] device veth0_vlan entered promiscuous mode
[  167.551304][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  167.559694][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  167.596471][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  167.607837][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  167.625250][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  167.635835][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  167.678195][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  167.686689][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  167.711194][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.729365][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.756921][ T6854] device veth1_vlan entered promiscuous mode
[  167.767340][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  167.784918][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.798618][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.816225][ T6852] device veth0_vlan entered promiscuous mode
[  167.839539][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  167.857620][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.872150][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.883832][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  167.894947][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.906601][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.915755][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  167.928132][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  167.936874][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  167.949858][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.958408][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.971069][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  167.979525][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.992399][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.001135][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.013897][ T6858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.029306][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  168.064008][ T6854] device veth0_macvtap entered promiscuous mode
[  168.074279][ T6850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.085828][ T6850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.095239][ T6850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.104537][ T6850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.115329][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  168.124228][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  168.133424][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  168.142220][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  168.150473][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  168.158905][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  168.173054][ T6852] device veth1_vlan entered promiscuous mode
[  168.193325][ T6854] device veth1_macvtap entered promiscuous mode
[  168.211582][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  168.219638][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  168.269500][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.306748][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  168.319627][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  168.340688][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  168.353300][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.374282][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  168.398012][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
22:36:40 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), 0x0)

[  168.429786][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.453074][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  168.471798][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  168.488728][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  168.498737][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  168.512804][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  168.527346][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.539189][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  168.550779][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.582185][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.610921][ T2470] Bluetooth: hci0: command 0x0419 tx timeout
[  168.620123][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.639981][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.662015][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  168.673500][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  168.692670][ T6854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.703827][ T6854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.713213][ T6854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.725430][ T6854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.752266][ T6856] device veth0_vlan entered promiscuous mode
[  168.762676][ T6852] device veth0_macvtap entered promiscuous mode
[  168.769762][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  168.779156][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  168.793241][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  168.803552][ T2470] Bluetooth: hci1: command 0x0419 tx timeout
[  168.826953][ T6856] device veth1_vlan entered promiscuous mode
[  168.837350][ T6852] device veth1_macvtap entered promiscuous mode
[  168.847373][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  168.856081][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  168.864571][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  168.872524][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  168.881063][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  168.889535][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  168.947013][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  168.965045][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  168.979960][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.991621][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  169.005729][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.011004][ T3923] Bluetooth: hci2: command 0x0419 tx timeout
[  169.019894][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  169.034603][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.048390][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.067690][ T6856] device veth0_macvtap entered promiscuous mode
[  169.076850][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.086820][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  169.111404][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  169.131430][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  169.140161][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  169.148897][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  169.159723][ T6858] device veth0_vlan entered promiscuous mode
[  169.178303][   T23] Bluetooth: hci3: command 0x0419 tx timeout
[  169.188457][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  169.208168][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.219353][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  169.230057][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.240187][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  169.251631][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.263413][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.291662][ T8206] device geneve2 entered promiscuous mode
[  169.298390][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  169.314005][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  169.322594][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  169.333113][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  169.341641][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  169.356426][ T6858] device veth1_vlan entered promiscuous mode
[  169.377355][ T6852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.386241][ T6852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.399216][ T6852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.407978][ T6852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.417266][ T3923] Bluetooth: hci4: command 0x0419 tx timeout
[  169.436319][ T6856] device veth1_macvtap entered promiscuous mode
[  169.539053][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  169.562143][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  169.570151][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  169.580071][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  169.589530][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  169.602480][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  169.614529][ T2470] Bluetooth: hci5: command 0x0419 tx timeout
[  169.624374][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.636926][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  169.648667][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.666623][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  169.717961][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.793630][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  169.854574][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.903165][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.938391][ T6858] device veth0_macvtap entered promiscuous mode
[  169.963735][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  170.011281][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.019950][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.067458][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  170.108197][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.128659][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  170.179377][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.269962][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  170.309575][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.333199][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  170.359039][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.384993][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.448737][ T6858] device veth1_macvtap entered promiscuous mode
[  170.490108][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.516779][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.579123][ T6856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.621667][ T6856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.663397][ T6856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.712044][ T6856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.908723][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  170.984653][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.024606][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  171.092151][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.133756][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
22:36:43 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
connect$bt_rfcomm(r1, &(0x7f00000001c0), 0xa)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x0, 0x0)

22:36:43 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  171.178490][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.210043][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  171.277404][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.308522][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  171.337628][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.359159][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.405502][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.415638][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.457834][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  171.471122][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.482309][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  171.496302][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.506990][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  171.519575][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.531164][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  171.542330][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.562213][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  171.574283][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.586837][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.611410][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.632535][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
22:36:43 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

[  171.676953][ T6858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.702276][ T6858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.747887][ T6858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.770544][ T6858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
22:36:44 executing program 5:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000000)=""/102396, 0x18ffc, 0x0)

22:36:44 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r3}}]}, 0x144}}, 0x0)
socket(0x0, 0x0, 0x0)

22:36:44 executing program 3:
socketpair(0x0, 0x0, 0x0, 0xffffffffffffffff)

22:36:44 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

22:36:44 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)

22:36:44 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

[  171.949608][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  171.964273][    C0] hrtimer: interrupt took 56784 ns
22:36:44 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

22:36:44 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58)
perf_event_open(0x0, r0, 0xb, 0xffffffffffffffff, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
read$FUSE(r2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x1}, 'port1\x00', 0x36, 0x0, 0x5, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0xfff, 0x7, 0x0, 0x100}, {0x1, 0x0, 0xc0, 0x8}, {0x8, 0x3f, 0x0, 0x3ff}, {0x6, 0x5, 0x0, 0x4}, {0x2, 0x17, 0x3f, 0x8be7}, {0xd0c, 0x6, 0x12, 0x6}, {0x2, 0x18, 0x46, 0x1000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0105303, &(0x7f0000000040)={{0x10}, 'port0\x00'})

22:36:44 executing program 5:
clone3(&(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

22:36:44 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  172.188601][ T8540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
22:36:44 executing program 4:
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

22:36:44 executing program 0:
syz_open_dev$vim2m(0x0, 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

22:36:44 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r3}}]}, 0x144}}, 0x0)
socket(0x0, 0x0, 0x0)

22:36:44 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)

22:36:44 executing program 4:
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

22:36:44 executing program 0:
syz_open_dev$vim2m(0x0, 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  172.486223][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
22:36:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r3 = socket(0xa, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, 0x0}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2, @in=@local}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8)
ftruncate(r2, 0x200004)
r4 = socket(0xa, 0x3, 0x7)
sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000340)=""/243, 0x0)
sendfile(r1, r2, 0x0, 0x80001d00c0d0)

22:36:44 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58)
perf_event_open(0x0, r0, 0xb, 0xffffffffffffffff, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
read$FUSE(r2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x1}, 'port1\x00', 0x36, 0x0, 0x5, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0xfff, 0x7, 0x0, 0x100}, {0x1, 0x0, 0xc0, 0x8}, {0x8, 0x3f, 0x0, 0x3ff}, {0x6, 0x5, 0x0, 0x4}, {0x2, 0x17, 0x3f, 0x8be7}, {0xd0c, 0x6, 0x12, 0x6}, {0x2, 0x18, 0x46, 0x1000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0105303, &(0x7f0000000040)={{0x10}, 'port0\x00'})

22:36:44 executing program 4:
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

22:36:44 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r3}}]}, 0x144}}, 0x0)
socket(0x0, 0x0, 0x0)

22:36:44 executing program 0:
syz_open_dev$vim2m(0x0, 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

22:36:44 executing program 4:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

[  172.826849][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  172.881247][ T8599] 
[  172.905585][ T8599] =============================
22:36:45 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58)
perf_event_open(0x0, r0, 0xb, 0xffffffffffffffff, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
read$FUSE(r2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x1}, 'port1\x00', 0x36, 0x0, 0x5, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0xfff, 0x7, 0x0, 0x100}, {0x1, 0x0, 0xc0, 0x8}, {0x8, 0x3f, 0x0, 0x3ff}, {0x6, 0x5, 0x0, 0x4}, {0x2, 0x17, 0x3f, 0x8be7}, {0xd0c, 0x6, 0x12, 0x6}, {0x2, 0x18, 0x46, 0x1000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0105303, &(0x7f0000000040)={{0x10}, 'port0\x00'})

[  172.964205][ T8599] WARNING: suspicious RCU usage
[  173.004261][ T8599] 5.9.0-rc4-syzkaller #0 Not tainted
22:36:45 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, 0x0, 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  173.048370][ T8599] -----------------------------
22:36:45 executing program 4:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

[  173.080978][ T8599] drivers/net/bonding/bond_main.c:395 suspicious rcu_dereference_check() usage!
[  173.166995][ T8599] 
[  173.166995][ T8599] other info that might help us debug this:
[  173.166995][ T8599] 
22:36:45 executing program 3:
setresuid(0x0, 0xee01, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x14, 0x31, 0x17b}, 0x14}}, 0x0)

22:36:45 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, 0x0, 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  173.238143][ T8599] 
[  173.238143][ T8599] rcu_scheduler_active = 2, debug_locks = 1
22:36:45 executing program 4:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

[  173.302290][ T8599] 1 lock held by syz-executor.1/8599:
[  173.328917][ T8599]  #0: ffff888091abda68 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{3:3}, at: xfrm_netlink_rcv+0x61/0x80
[  173.399619][   T28] audit: type=1800 audit(1599604605.525:2): pid=8593 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15763 res=0 errno=0
[  173.435715][ T8599] 
[  173.435715][ T8599] stack backtrace:
[  173.478105][ T8599] CPU: 0 PID: 8599 Comm: syz-executor.1 Not tainted 5.9.0-rc4-syzkaller #0
[  173.486725][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  173.496779][ T8599] Call Trace:
[  173.500079][ T8599]  dump_stack+0x1d6/0x29e
[  173.504420][ T8599]  bond_ipsec_add_sa+0xf2/0x200
[  173.509283][ T8599]  xfrm_dev_state_add+0x416/0x6c0
[  173.514324][ T8599]  xfrm_add_sa+0x2aaf/0x3ae0
[  173.518940][ T8599]  ? __nla_parse+0x3c/0x50
[  173.523370][ T8599]  xfrm_user_rcv_msg+0x3e6/0x650
[  173.528316][ T8599]  ? xfrm_netlink_rcv+0x61/0x80
[  173.533207][ T8599]  netlink_rcv_skb+0x190/0x3a0
[  173.537978][ T8599]  ? xfrm_netlink_rcv+0x80/0x80
[  173.542845][ T8599]  xfrm_netlink_rcv+0x70/0x80
[  173.547533][ T8599]  netlink_unicast+0x786/0x940
[  173.552321][ T8599]  netlink_sendmsg+0xa57/0xd70
[  173.557104][ T8599]  ? netlink_getsockopt+0x9e0/0x9e0
[  173.562310][ T8599]  ____sys_sendmsg+0x519/0x800
[  173.567105][ T8599]  ? import_iovec+0x12a/0x2c0
[  173.571799][ T8599]  __sys_sendmsg+0x2b1/0x360
[  173.576405][ T8599]  ? __might_fault+0xf5/0x150
[  173.581095][ T8599]  ? trace_lock_release+0x149/0x1a0
[  173.586556][ T8599]  ? __might_fault+0xf5/0x150
[  173.591252][ T8599]  ? __might_fault+0xf5/0x150
[  173.595940][ T8599]  ? lock_is_held_type+0xb3/0xe0
[  173.600884][ T8599]  ? check_preemption_disabled+0x51/0x140
[  173.606610][ T8599]  ? syscall_enter_from_user_mode+0x24/0x1a0
[  173.612595][ T8599]  ? lockdep_hardirqs_on+0x79/0x100
[  173.617798][ T8599]  ? syscall_enter_from_user_mode+0x24/0x1a0
[  173.623789][ T8599]  do_syscall_64+0x31/0x70
[  173.628211][ T8599]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  173.634128][ T8599] RIP: 0033:0x45d5b9
[  173.638031][ T8599] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  173.657641][ T8599] RSP: 002b:00007fe4d05c8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.666087][ T8599] RAX: ffffffffffffffda RBX: 000000000002cf00 RCX: 000000000045d5b9
22:36:45 executing program 5:
socketpair(0x0, 0x0, 0x0, &(0x7f0000004a40))
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

22:36:45 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, 0x0, 0x20045, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

22:36:45 executing program 2:
r0 = socket(0xb, 0x803, 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r1 = socket(0x11, 0x2, 0x0)
getsockname$l2tp6(r1, 0x0, &(0x7f0000000040))
sendto$l2tp6(r1, &(0x7f0000000180)="5fece7ee863772b9b06116d3d8bae008537287bfe02f7297ca8321540dad7a6d1ec83ab98390cba8ccaa260d5aa4ed39c7bcacb7c9554b70fa7582018be66edd47784fd845be484f8f70edddeb540c75c6baff73af03cf492cc595fe4ca6b68ac4abdadcfcd681be7d3f4def5e6dd0c03ad0e1a206f69e56dd7f3c3d870758eb1227d7cde27dd2b9a6b26ad7", 0x8c, 0x20000000, &(0x7f0000000240)={0xa, 0x0, 0x8, @loopback}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="0db1d6417c944655a7cd3ca5e7fe52f9463592db553949e0c7be85a75b789be4a2af7b835425eb1755d0f8ef3ac2398026f9d67de1a648edc45b249dbafad1109fa12655e4c197623d01c7f4882e2feab2d19d8f78271ec9a426b0cafbdb9fb8bee729ac4801fac8ae72db585b27058b29e65fe57324a1aff903d8119c1b6ab7b2edab92e1ebb82b", &(0x7f00000000c0)=@udp, 0x1}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x334)
accept4$packet(r0, 0x0, 0x0, 0x0)

[  173.674325][ T8599] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004
[  173.682322][ T8599] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000
[  173.690294][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec
[  173.698270][ T8599] R13: 00007ffcbe116a0f R14: 00007fe4d05c99c0 R15: 000000000118cfec
[  173.816886][ T8599] bond0: (slave bond_slave_0): Slave does not support ipsec offload
22:36:46 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r3}}]}, 0x144}}, 0x0)
socket(0x0, 0x0, 0x0)

22:36:46 executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x8}]}, 0x1c}}, 0x0)

22:36:46 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

22:36:46 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

22:36:46 executing program 5:
perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)='\x00', 0xfffffffffffffffc)

[  174.030284][ T8652] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
22:36:46 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

22:36:46 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  174.082961][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  174.105699][ T8659] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
22:36:46 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r3}}]}, 0x144}}, 0x0)

22:36:46 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r0, 0x5414, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, "3f25c68fe8b680cafbdd7d71f152b204fd285d"})

[  174.213761][ T8640] IPVS: ftp: loaded support on port[0] = 21
22:36:46 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1)

22:36:46 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[  174.400987][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  174.638521][ T8645] IPVS: ftp: loaded support on port[0] = 21
[  175.596753][  T386] tipc: TX() has been purged, node left!
22:36:48 executing program 2:
r0 = socket(0xb, 0x803, 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r1 = socket(0x11, 0x2, 0x0)
getsockname$l2tp6(r1, 0x0, &(0x7f0000000040))
sendto$l2tp6(r1, &(0x7f0000000180)="5fece7ee863772b9b06116d3d8bae008537287bfe02f7297ca8321540dad7a6d1ec83ab98390cba8ccaa260d5aa4ed39c7bcacb7c9554b70fa7582018be66edd47784fd845be484f8f70edddeb540c75c6baff73af03cf492cc595fe4ca6b68ac4abdadcfcd681be7d3f4def5e6dd0c03ad0e1a206f69e56dd7f3c3d870758eb1227d7cde27dd2b9a6b26ad7", 0x8c, 0x20000000, &(0x7f0000000240)={0xa, 0x0, 0x8, @loopback}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="0db1d6417c944655a7cd3ca5e7fe52f9463592db553949e0c7be85a75b789be4a2af7b835425eb1755d0f8ef3ac2398026f9d67de1a648edc45b249dbafad1109fa12655e4c197623d01c7f4882e2feab2d19d8f78271ec9a426b0cafbdb9fb8bee729ac4801fac8ae72db585b27058b29e65fe57324a1aff903d8119c1b6ab7b2edab92e1ebb82b", &(0x7f00000000c0)=@udp, 0x1}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x334)
accept4$packet(r0, 0x0, 0x0, 0x0)

22:36:48 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x20)

22:36:48 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, 0x0, 0x0)

22:36:48 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x0)

22:36:48 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, 0x0)

22:36:48 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x841f48a298e5d2bc}, 0x6)

22:36:48 executing program 3:
r0 = socket(0x2, 0x1, 0x0)
bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x2, @multicast1}, 0x10)
connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$l2tp(r0, 0x0, 0x4000, 0x20000040, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

22:36:48 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0)

22:36:48 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, 0x0, 0x0)

22:36:48 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, 0x0)

22:36:48 executing program 5:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000038c0))

22:36:49 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x20045, 0x0)
syz_open_procfs(0x0, 0x0)

[  177.409682][ T8719] IPVS: ftp: loaded support on port[0] = 21
22:36:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = syz_open_procfs(0x0, &(0x7f0000002100)='net/udp\x00')
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020)
read$FUSE(r1, 0x0, 0x0)

22:36:50 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, 0x0, 0x0)

22:36:50 executing program 3:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045006, &(0x7f00000000c0)=0x3)

22:36:50 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0)

22:36:50 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, "f1bff7609ddececc8df0699f676c3b000000000000000953100000caca495dae"})
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0})

22:36:50 executing program 5:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000038c0))

22:36:50 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0), 0x0)

22:36:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r0)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000000000)=ANY=[], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x14}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003ec0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/211, 0xd3}}], 0x400000000000154, 0x2102, 0x0)

22:36:50 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0)

22:36:50 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
socket(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(0x0, 0x10001, 0x400000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000200)="baf80c66b8fc8e638b66efbafc0cb8e700ef6436262e2e0f79d1b8dd000f00d88378090a0f0866b89d0000000f23d80f21f86635000000b00f23f80f01c9f76c000f20e06635000004000f22e00f07", 0x4f}], 0x1, 0x0, 0x0, 0x0)

22:36:50 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(ctr(aes-aesni),sm3-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d738e09bb6cc2556979ecc0bab74434a", 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x58)

22:36:50 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x31}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000380)=0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530)

22:36:51 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0), 0x0)

22:36:51 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x0)

22:36:51 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

[  178.923252][ T8793] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
22:36:51 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0), 0x0)

22:36:51 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x0)

22:36:51 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open(&(0x7f00000000c0)='./bus\x00', 0x10307e, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0))

22:36:51 executing program 5:
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x10e, 0x8, 0x0, 0x0)

22:36:51 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x511, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xe}}}, 0x24}}, 0x0)

22:36:51 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x0)

[  179.296615][   T28] audit: type=1804 audit(1599604611.425:3): pid=8827 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir914224718/syzkaller.P5A1iN/11/file1/bus" dev="loop3" ino=3 res=1 errno=0
22:36:51 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1b46, &(0x7f00000004c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4000885}, 0x0)
io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:51 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{0x0}], 0x1)

22:36:51 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x31}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000380)=0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530)

22:36:51 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)

22:36:51 executing program 2:
r0 = socket(0xa, 0x2, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4, 0x0, 0x80fe}, 0x2000000c, &(0x7f0000000080)={0x0}, 0x3}, 0x0)

22:36:51 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1b46, &(0x7f00000004c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4000885}, 0x0)
io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:51 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r1}}]}, 0x144}}, 0x0)

22:36:51 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{0x0}], 0x1)

22:36:52 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r1}}]}, 0x144}}, 0x0)

22:36:52 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{0x0}], 0x1)

22:36:52 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x31}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000380)=0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530)

22:36:52 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
dup3(r1, r0, 0x0)

22:36:52 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1b46, &(0x7f00000004c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4000885}, 0x0)
io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:52 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r1}}]}, 0x144}}, 0x0)

[  180.550362][  T386] tipc: TX() has been purged, node left!
22:36:52 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x31}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000380)=0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530)

22:36:52 executing program 3:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
geteuid()
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00')
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
ptrace$getenv(0x4201, r1, 0xba, 0x0)
r2 = socket(0xa, 0x3, 0x6)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa)
bind$inet6(r2, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00')
write$P9_RWALK(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="91d37d407aadff0100000000000000f80000000000000400000000fcffffbba500000000000000ffe03d5e0b778a00000000b3da1101ec6c111ee2bb7c36a8a699d5f10161fc017df7e5dacd3aa558a6bb6b9af9ca4a8d33e90ffc7ff289af3cff06d4bdebaba1de21f168238e438e0d6cdd881b731d6d586ff2e1de33ffc6d687f777e4195feb049af1c3c35a00"], 0x30)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000540)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0x56d)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x82)
mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00')
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r7, &(0x7f0000000180)='./file0\x00', r6, &(0x7f0000000640)='./file0\x00', 0x0)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r9, &(0x7f0000000180)='./file0\x00', r8, &(0x7f0000000640)='./file0/file0\x00', 0x0)

22:36:52 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x208fa000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

22:36:52 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1b46, &(0x7f00000004c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4000885}, 0x0)
io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:52 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x0)

22:36:52 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
r0 = syz_io_uring_setup(0x1b46, &(0x7f00000004c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:52 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r1}}]}, 0x144}}, 0x0)

22:36:53 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x31}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000380)=0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530)

22:36:53 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r1}}]}, 0x144}}, 0x0)

22:36:53 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
r0 = syz_io_uring_setup(0x1b46, &(0x7f00000004c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:53 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r1}}]}, 0x144}}, 0x0)

22:36:53 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
r0 = syz_io_uring_setup(0x1b46, &(0x7f00000004c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:53 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x31}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000380)=0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530)

22:36:54 executing program 3:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
geteuid()
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00')
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
ptrace$getenv(0x4201, r1, 0xba, 0x0)
r2 = socket(0xa, 0x3, 0x6)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa)
bind$inet6(r2, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00')
write$P9_RWALK(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="91d37d407aadff0100000000000000f80000000000000400000000fcffffbba500000000000000ffe03d5e0b778a00000000b3da1101ec6c111ee2bb7c36a8a699d5f10161fc017df7e5dacd3aa558a6bb6b9af9ca4a8d33e90ffc7ff289af3cff06d4bdebaba1de21f168238e438e0d6cdd881b731d6d586ff2e1de33ffc6d687f777e4195feb049af1c3c35a00"], 0x30)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000540)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0x56d)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x82)
mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00')
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r7, &(0x7f0000000180)='./file0\x00', r6, &(0x7f0000000640)='./file0\x00', 0x0)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r9, &(0x7f0000000180)='./file0\x00', r8, &(0x7f0000000640)='./file0/file0\x00', 0x0)

22:36:54 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x0)

22:36:54 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4000885}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:54 executing program 4:
r0 = socket(0xa, 0x3, 0x7)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, 0x0}, 0x0)

22:36:54 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x31}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000380)=0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530)

22:36:54 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x31}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000380)=0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)

22:36:54 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x0)

22:36:55 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4000885}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)

22:36:55 executing program 4:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
geteuid()
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00')
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
ptrace$getenv(0x4201, r1, 0xba, 0x0)
r2 = socket(0xa, 0x3, 0x6)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa)
bind$inet6(r2, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00')
write$P9_RWALK(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="91d37d407aadff0100000000000000f80000000000000400000000fcffffbba500000000000000ffe03d5e0b778a00000000b3da1101ec6c111ee2bb7c36a8a699d5f10161fc017df7e5dacd3aa558a6bb6b9af9ca4a8d33e90ffc7ff289af3cff06d4bdebaba1de21f168238e438e0d6cdd881b731d6d586ff2e1de33ffc6d687f777e4195feb049af1c3c35a00"], 0x30)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000540)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0x56d)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x82)
mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00')
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r7, &(0x7f0000000180)='./file0\x00', r6, &(0x7f0000000640)='./file0\x00', 0x0)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r9, &(0x7f0000000180)='./file0\x00', r8, &(0x7f0000000640)='./file0/file0\x00', 0x0)

22:36:55 executing program 5:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4000885}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0)