[ 33.520949] kauditd_printk_skb: 9 callbacks suppressed [ 33.520956] audit: type=1800 audit(1585028948.361:33): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 33.549214] audit: type=1800 audit(1585028948.361:34): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.109319] random: sshd: uninitialized urandom read (32 bytes read) [ 37.442309] audit: type=1400 audit(1585028952.281:35): avc: denied { map } for pid=7292 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 37.488339] random: sshd: uninitialized urandom read (32 bytes read) [ 38.293036] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. [ 43.895961] random: sshd: uninitialized urandom read (32 bytes read) 2020/03/24 05:49:18 fuzzer started [ 44.120076] audit: type=1400 audit(1585028958.951:36): avc: denied { map } for pid=7301 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.832563] random: cc1: uninitialized urandom read (8 bytes read) 2020/03/24 05:49:20 dialing manager at 10.128.0.105:41989 2020/03/24 05:49:20 syscalls: 2937 2020/03/24 05:49:20 code coverage: enabled 2020/03/24 05:49:20 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2020/03/24 05:49:20 extra coverage: extra coverage is not supported by the kernel 2020/03/24 05:49:20 setuid sandbox: enabled 2020/03/24 05:49:20 namespace sandbox: enabled 2020/03/24 05:49:20 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/24 05:49:20 fault injection: enabled 2020/03/24 05:49:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/24 05:49:20 net packet injection: enabled 2020/03/24 05:49:20 net device setup: enabled 2020/03/24 05:49:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/24 05:49:20 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 46.963823] random: crng init done 05:51:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x6}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 05:51:57 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) accept4$vsock_stream(r0, &(0x7f0000000080), 0x10, 0x0) 05:51:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000500000000000e00000004000000800300000000000008010000080100000000000008010000b0020000b0020000b0020000b0020000b0020000040000008c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b000000000000000000000000f3ff0400000000000100000000ff010000000000000000000000000001000010000000000000000000000000000000000000000000000000200000000000000000ea0000000000000000000000fe880000000000000900000000000000fe8800000000000000000000000000010000000000000000ffffffff0000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d8000000000000000000000000000000000000000000000000003000534554000000000000000000000000000000000000000000000000000002000006000000060000000000660300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000400000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 05:51:57 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 05:51:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f00000002c0)='systemem0md5sum$\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') 05:51:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154001008178a80016000c000100e5581100000411000000006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee48100000000000000d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d08fad95667e04adcdf634c1f215ce3bb53b409d5e1ca4e81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 202.771521] audit: type=1400 audit(1585029117.611:37): avc: denied { map } for pid=7301 comm="syz-fuzzer" path="/root/syzkaller-shm485453837" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 202.814955] audit: type=1400 audit(1585029117.621:38): avc: denied { map } for pid=7318 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15405 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 203.121150] IPVS: ftp: loaded support on port[0] = 21 [ 203.932580] IPVS: ftp: loaded support on port[0] = 21 [ 203.995733] chnl_net:caif_netlink_parms(): no params data found [ 204.052383] IPVS: ftp: loaded support on port[0] = 21 [ 204.095462] chnl_net:caif_netlink_parms(): no params data found [ 204.149947] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.156808] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.164155] device bridge_slave_0 entered promiscuous mode [ 204.174864] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.182072] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.189212] device bridge_slave_1 entered promiscuous mode [ 204.229534] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.249323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.303116] IPVS: ftp: loaded support on port[0] = 21 [ 204.323274] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.331370] team0: Port device team_slave_0 added [ 204.339184] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.346415] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.353679] device bridge_slave_0 entered promiscuous mode [ 204.360199] chnl_net:caif_netlink_parms(): no params data found [ 204.369979] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.377626] team0: Port device team_slave_1 added [ 204.391294] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.397676] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.405157] device bridge_slave_1 entered promiscuous mode [ 204.446750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.453551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.481188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.496761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.503412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.529608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.542551] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.554608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.562697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.574771] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.624252] IPVS: ftp: loaded support on port[0] = 21 [ 204.626276] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.637644] team0: Port device team_slave_0 added [ 204.692701] device hsr_slave_0 entered promiscuous mode [ 204.730396] device hsr_slave_1 entered promiscuous mode [ 204.771099] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 204.778794] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 204.786161] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.794458] team0: Port device team_slave_1 added [ 204.868842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.875981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.902085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.916128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.923164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.949404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.005088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 205.019212] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.025941] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.035241] device bridge_slave_0 entered promiscuous mode [ 205.045027] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.051743] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.058962] device bridge_slave_1 entered promiscuous mode [ 205.065707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 205.085362] chnl_net:caif_netlink_parms(): no params data found [ 205.117502] IPVS: ftp: loaded support on port[0] = 21 [ 205.194060] device hsr_slave_0 entered promiscuous mode [ 205.240531] device hsr_slave_1 entered promiscuous mode [ 205.315578] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 205.325412] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 205.337111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 205.352916] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 205.408759] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 205.416842] team0: Port device team_slave_0 added [ 205.436518] audit: type=1400 audit(1585029120.271:39): avc: denied { create } for pid=7322 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 205.461241] audit: type=1400 audit(1585029120.271:40): avc: denied { write } for pid=7322 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 205.486015] audit: type=1400 audit(1585029120.271:41): avc: denied { read } for pid=7322 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 205.560460] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 205.567871] team0: Port device team_slave_1 added [ 205.614897] chnl_net:caif_netlink_parms(): no params data found [ 205.660601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.667099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.699015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.742347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.749227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.775171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.786014] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.793192] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.804973] device bridge_slave_0 entered promiscuous mode [ 205.813744] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.826953] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 205.835228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 205.843496] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.850405] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.857716] device bridge_slave_1 entered promiscuous mode [ 205.901645] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 205.963005] device hsr_slave_0 entered promiscuous mode [ 206.010496] device hsr_slave_1 entered promiscuous mode [ 206.051832] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.096473] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 206.117044] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 206.125501] team0: Port device team_slave_0 added [ 206.131818] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 206.139250] team0: Port device team_slave_1 added [ 206.164785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 206.208772] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.225496] chnl_net:caif_netlink_parms(): no params data found [ 206.249359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.257271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.286825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.299365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.305951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.333737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.348133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.359037] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.366227] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.375654] device bridge_slave_0 entered promiscuous mode [ 206.383930] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.390733] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.398044] device bridge_slave_1 entered promiscuous mode [ 206.422505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.485405] device hsr_slave_0 entered promiscuous mode [ 206.530443] device hsr_slave_1 entered promiscuous mode [ 206.586956] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 206.595709] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 206.656027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.681644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.699928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.727005] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 206.734911] team0: Port device team_slave_0 added [ 206.759224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 206.767177] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 206.775119] team0: Port device team_slave_1 added [ 206.831611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 206.849610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.858908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.885921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.897527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.906150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.921171] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 206.927722] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.936062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.943432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.949696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.976953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.998796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 207.007459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.022771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.031164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.039467] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.046769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.063112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 207.084680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 207.094959] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.101903] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.109195] device bridge_slave_0 entered promiscuous mode [ 207.118918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.128752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.138628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.147312] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.153959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.163608] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 207.232690] device hsr_slave_0 entered promiscuous mode [ 207.270503] device hsr_slave_1 entered promiscuous mode [ 207.310972] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.317520] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.325461] device bridge_slave_1 entered promiscuous mode [ 207.349503] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.360283] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.369042] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 207.375874] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 207.383743] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 207.399863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.418348] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 207.433326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.441696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.449065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.460192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 207.473367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.482717] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.491275] team0: Port device team_slave_0 added [ 207.497463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.509916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 207.520360] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 207.526735] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.538851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 207.546991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.555035] team0: Port device team_slave_1 added [ 207.560681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.568834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.577237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.585410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.594437] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.601608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.609489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.616880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.636855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.649203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 207.678999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.687983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.696523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.705517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.713906] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.720473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.731547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 207.741345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.751149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 207.762498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.768940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.794850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.822688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.834156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.842210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.850645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.858154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.869069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.877725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.884316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.911644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.936501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.951332] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 207.957494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.965486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.973349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 207.994919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.007929] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 208.073362] device hsr_slave_0 entered promiscuous mode [ 208.120436] device hsr_slave_1 entered promiscuous mode [ 208.181691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 208.189199] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 208.198697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.206625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.214644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.227036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 208.235920] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 208.261390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.269184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.277302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.284519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.293869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 208.308143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.315761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.324268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.345630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.357155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 208.374499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.383006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.404183] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 208.410632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.434574] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.453153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.462462] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.471087] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 208.492105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.499205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.511314] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.525288] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 208.531901] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.563330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 208.574312] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 208.583514] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 208.591901] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 208.601356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 208.609014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.618260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.626069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.633451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.640758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.648529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.656448] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.662858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.670885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.679180] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 208.685801] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.699119] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 208.711253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 208.723764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.732325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.741222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.749245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.757669] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.764093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.773462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 208.781495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.791016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.798755] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.805204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.815602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.825378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 208.843155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.851415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.873462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 208.889561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 208.900807] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.908468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.917246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.926570] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.933020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.940869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.951739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 208.965874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.976573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.989652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.997738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.007633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 209.018240] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 209.026063] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 209.033940] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 209.043317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 209.052410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.062778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.072112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.082214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.092266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 209.106347] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 209.122478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 209.132329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.140993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.149126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.158117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.165699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.174172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.183892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 209.194977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.206581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 209.213455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.222203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.229111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.236317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.244448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.252416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.259854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.269770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 209.279769] device veth0_vlan entered promiscuous mode [ 209.292295] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.299996] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 209.308190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.317964] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 209.326006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.334275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.345287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 209.363203] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 209.371122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.378901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.387834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.397381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.414314] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.422903] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 209.428987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.437374] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 209.449788] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 209.457130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.465060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.473630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.480817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.490745] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 209.496851] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.507294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.517505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.527655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.535703] device veth1_vlan entered promiscuous mode [ 209.542973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.551596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.559242] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.565639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.573460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.582970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 209.590443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.598238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.606847] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.613321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.625556] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 209.633183] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 209.639917] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 209.654317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.663397] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.681840] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 209.703412] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 209.711471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.718508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.727419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.735114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.743199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.751617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.758963] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 209.768036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 209.778459] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 209.785081] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.796703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 209.807286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.815187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.825194] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 209.834153] device veth0_vlan entered promiscuous mode [ 209.843140] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 209.853171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.859969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.871180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.881143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.893598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.908203] device veth1_vlan entered promiscuous mode [ 209.915635] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 209.928722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.937600] device veth0_macvtap entered promiscuous mode [ 209.943944] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 209.954938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.968087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.977236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.985161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.993673] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.000181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.007861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.018986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.029098] device veth1_macvtap entered promiscuous mode [ 210.037829] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 210.046638] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 210.057399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.066017] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.078382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.086307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.096102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 210.103539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.111866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.119650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.127814] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.134339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.143506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 210.153612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 210.166550] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 210.179829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 210.188803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.197449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.205767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.217071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 210.229014] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 210.238165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.246743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.255395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.264531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.273926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 210.285401] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 210.292864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.302347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 210.311626] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 210.318612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.327575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 210.336310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.348768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.357124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.369162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.376699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.384954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.395327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.413428] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 210.433739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.449254] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 210.466424] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 210.484045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.501429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.509251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.517339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.525253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.534075] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 210.543813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 210.556979] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 210.564695] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 210.572785] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 210.581432] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 210.587678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.596656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.604286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.613409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.622404] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 210.630695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.638642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.647930] device veth0_macvtap entered promiscuous mode [ 210.654222] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 210.666682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.678172] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 210.692350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.715899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.726221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.734820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 210.745052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 210.779804] device veth1_macvtap entered promiscuous mode [ 210.787359] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 210.798460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.812840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.819856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.827707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.835455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.843794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.852011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.859820] device veth0_vlan entered promiscuous mode [ 210.868658] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 210.875795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.885303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 210.904674] device veth1_vlan entered promiscuous mode [ 210.917630] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 210.926895] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 210.935031] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 210.942189] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 210.959375] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 210.969719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 210.985510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.998650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.009417] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 211.016759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.032839] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 211.044606] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 211.052467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.059805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.068776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.076682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.084780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.092881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.105144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.105183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.106257] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 211.106303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.126392] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 211.153055] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 211.162741] device veth0_vlan entered promiscuous mode [ 211.172116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.180942] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.189609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.203941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.211904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.219614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.228943] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 211.239351] device veth0_macvtap entered promiscuous mode [ 211.246989] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 211.258033] device veth1_vlan entered promiscuous mode [ 211.265820] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 211.277264] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 211.286274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.294951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.303070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.309836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.322012] device veth1_macvtap entered promiscuous mode [ 211.328250] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 211.342106] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 211.351508] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 211.362626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 211.371789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.380328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.387604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.399680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.413868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.428363] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 211.442238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 211.452720] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 211.474058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.485956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.500693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.517121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.526772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.536710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.547587] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 211.555505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.567484] device veth0_macvtap entered promiscuous mode [ 211.575022] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 211.586922] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.595111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.613010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.624835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.636062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.645345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.659872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.670800] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 211.678769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.686822] device veth1_macvtap entered promiscuous mode [ 211.694040] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 211.707405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 211.721843] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 211.729640] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 211.736634] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 211.744374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.752237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.761865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.776214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready 05:52:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='team_slave_0\x00', 0x10) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) sendto$inet6(r0, &(0x7f0000000540)="5d67a19b9382d24b889e2eb59bc894f27a366cbd78c77ef011eae09c0eb0a1a8880a2bb56d579f90e65b4a100625b810319ad16de03668a06d4a784d87d0280d9c8ea0f30d31db1e2449b240afd899be3edba0c8e62cbcaeb2ae4b1cccbdc23d01b7abe050469092a591f6bc3462f48d62c5f870d2cd01c851aa1f74df109a4f7bc69fc265352d48b8a13e54e3eefbb10d3ecfabd207769cdac0dfda6b0d844f14bfa8c9960eaca164cc388c36028397c70c8c2ea20ae2a37e9310b2f5a44bf3ea878be8254cc6045c612e5d52be68faa92f9de069d8706f5c264d9042caa16438d9baf3d99bb75f1579ef5fb5d249c2be1874f5d7e25900b96e0f073c938da53b31e9c402cc6b01133f7dd03955dfd6691e1a8f7f79480f9d656ab1a4a4", 0xfffffffffffffe57, 0x40, 0x0, 0xffffffd6) [ 211.819500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.836468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.859789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.874494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.884158] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 211.884419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.908790] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 05:52:06 executing program 5: unshare(0x2000400) r0 = socket(0x80000000000000a, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0) [ 211.909366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.932380] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 211.939367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.962020] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready 05:52:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhci\x00', 0x101002) write$vhci(r3, &(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300ffff00007d2583270696f60037d7963b5dc2059e4e49315cbdc450"], 0x6) [ 211.981989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.989894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.013856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.033277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.042952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.053925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.063715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.074400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.083986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.093886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.105832] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 212.113014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.124118] device veth0_vlan entered promiscuous mode [ 212.134258] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 212.142582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.156561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.164890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.173145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.203914] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 212.212183] device veth1_vlan entered promiscuous mode [ 212.232523] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 212.239178] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.247428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.256104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.272269] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 212.295778] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 212.307700] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 212.324879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.334195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.347723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.358966] device veth0_macvtap entered promiscuous mode [ 212.365969] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 212.376651] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 212.392520] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 212.407697] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 212.427420] audit: type=1400 audit(1585029127.261:42): avc: denied { name_bind } for pid=7566 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 212.433733] device veth1_macvtap entered promiscuous mode [ 212.461757] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 212.467746] audit: type=1400 audit(1585029127.291:43): avc: denied { node_bind } for pid=7566 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 212.473225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready 05:52:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x4000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 212.503189] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 212.509870] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.522819] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.541789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.561366] audit: type=1400 audit(1585029127.301:44): avc: denied { name_connect } for pid=7566 comm="syz-executor.0" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 212.586017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.594111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.602989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.613210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 212.631116] device veth0_vlan entered promiscuous mode [ 212.646931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.657333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.657947] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 212.667807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.692511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.701900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.713008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.722625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.732613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.743588] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 212.751514] batman_adv: batadv0: Interface activated: batadv_slave_0 05:52:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 212.765362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.773751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.787850] device veth1_vlan entered promiscuous mode [ 212.796932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.825552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.836696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.850306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.864152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.872885] hrtimer: interrupt took 25107 ns [ 212.874648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.887631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.897482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.908198] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 212.915569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.929530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.938577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.966626] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 212.989815] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 213.004036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.017119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.031581] device veth0_macvtap entered promiscuous mode [ 213.037796] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 213.084111] device veth1_macvtap entered promiscuous mode [ 213.105304] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 213.128801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 213.174659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 213.207205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.218192] audit: type=1400 audit(1585029128.051:45): avc: denied { map } for pid=7611 comm="syz-executor.2" path=2F6D656D66643A73797374656D656D306D643573756D24202864656C6574656429 dev="tmpfs" ino=29270 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 213.250466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.259627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.277015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.288435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.298451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.308018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.318026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.328008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.338744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.353786] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 213.379390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.397268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.407322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.420595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 05:52:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000100)=""/157, 0x9d) [ 213.438604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.447682] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.465174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 05:52:08 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="24000000190007041dfffd946f6105000a600200fe22000000020800080006000400ff7e", 0x24}], 0x1}, 0x0) [ 213.505382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:52:08 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x22, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) [ 213.546574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.556509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.565916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.576694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.594513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.604640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.615144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.625007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.636010] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 213.643572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.659680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.674727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:52:09 executing program 3: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x140, 0x230, 0x140, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x120, 0x140, 0x0, {}, [@common=@inet=@set4={{0x50, 'set\x00'}, {{0x4000}}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'vlan0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 05:52:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/127, 0x7f}], 0x1, 0x0) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) dup2(r0, r1) 05:52:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 05:52:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 05:52:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 215.023878] Cannot find add_set index 0 as target [ 215.032134] Cannot find add_set index 0 as target 05:52:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) close(r1) shutdown(r0, 0x0) [ 215.073355] Cannot find set identified by id 16384 to match [ 216.791133] NOHZ: local_softirq_pending 08 05:52:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhci\x00', 0x101002) write$vhci(r3, &(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300ffff00007d2583270696f60037d7963b5dc2059e4e49315cbdc450"], 0x6) 05:52:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x800000000000401) r4 = socket$alg(0x26, 0x5, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:52:17 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r2) 05:52:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 05:52:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 05:52:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 05:52:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffff70b6, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sync() 05:52:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5d, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sliced}) 05:52:17 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000005a00)={0x0, 0x0, 0x0}, 0x800) [ 223.275654] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 970769) [ 223.296316] FAT-fs (loop2): Filesystem has been set read-only 05:52:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffff70b6, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sync() 05:52:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 05:52:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 224.109104] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 970769) [ 224.122970] FAT-fs (loop2): Filesystem has been set read-only 05:52:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhci\x00', 0x101002) write$vhci(r3, &(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300ffff00007d2583270696f60037d7963b5dc2059e4e49315cbdc450"], 0x6) 05:52:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 05:52:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000005a00)={0x0, 0x0, 0x0}, 0x800) 05:52:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffff70b6, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sync() 05:52:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5}, @IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x48}}, 0x0) 05:52:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 232.869654] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 05:52:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x3d, 0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, &(0x7f0000000780)=""/155, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @dev}, 0xfffffffffffffe0e) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:52:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x8) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) [ 233.121643] audit: type=1804 audit(1585029147.961:46): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir707851190/syzkaller.4byEOt/5/file0/bus" dev="ramfs" ino=28562 res=1 05:52:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x8) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) [ 233.241524] audit: type=1400 audit(1585029147.991:47): avc: denied { map } for pid=7796 comm="syz-executor.1" path="/root/syzkaller-testdir707851190/syzkaller.4byEOt/5/file0/bus" dev="ramfs" ino=28562 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 05:52:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x8) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) [ 233.372575] audit: type=1804 audit(1585029148.181:48): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir707851190/syzkaller.4byEOt/6/file0/bus" dev="ramfs" ino=29706 res=1 [ 233.478163] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 970769) [ 233.502656] FAT-fs (loop2): Filesystem has been set read-only 05:52:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x8) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) [ 233.524309] audit: type=1804 audit(1585029148.361:49): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir707851190/syzkaller.4byEOt/7/file0/bus" dev="ramfs" ino=28624 res=1 05:52:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffff70b6, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sync() [ 233.718944] audit: type=1804 audit(1585029148.551:50): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir707851190/syzkaller.4byEOt/8/file0/bus" dev="ramfs" ino=29747 res=1 [ 234.039385] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 970769) [ 234.053152] FAT-fs (loop2): Filesystem has been set read-only [ 237.281032] NOHZ: local_softirq_pending 08 05:52:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhci\x00', 0x101002) write$vhci(r3, &(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300ffff00007d2583270696f60037d7963b5dc2059e4e49315cbdc450"], 0x6) 05:52:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000440)=@generic, 0x80, 0x0}, 0x4}, {{&(0x7f0000000740)=@caif, 0x80, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0xfb}, 0xfffeffff}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6c}, 0x0, 0xfff, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x3af, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) 05:52:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x3, 0x1, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 05:52:37 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000005a00)={0x0, 0x0, 0x0}, 0x800) 05:52:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xca) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, 0x0, &(0x7f0000000180)) 05:52:37 executing program 2: add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) io_setup(0x3, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x181042, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 05:52:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000000)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='journal_path=.']) [ 243.149189] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.228472] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.257161] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 05:52:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) 05:52:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/51, 0xfe00}], 0x1}}], 0x1, 0x0, 0x0) [ 243.273393] EXT4-fs (loop4): error: journal path . is not a block device [ 243.284052] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 05:52:38 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x40, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x0, 0x1e}}}}}, 0x0) 05:52:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8126000, 0x0}) [ 243.444477] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.453990] audit: type=1400 audit(1585029158.291:51): avc: denied { set_context_mgr } for pid=7864 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 243.477701] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 05:52:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000180), 0x0, 0x0) [ 243.487640] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.496640] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.525041] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.555936] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.200876] binder: BINDER_SET_CONTEXT_MGR already set [ 244.206415] binder: 7864:7880 ioctl 40046207 0 returned -16 05:52:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0xe}, 0x20) 05:52:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 05:52:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000005a00)={0x0, 0x0, 0x0}, 0x800) 05:52:48 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xd0, 0x0, 0xd0, 0xd0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "88f107ded78114defbcdb2c465219e0e374abebb1396dd36281863f53283"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 05:52:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000180), 0x0, 0x0) 05:52:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) 05:52:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x44182) r2 = memfd_create(&(0x7f0000000380)='.^\xc5\xe3\xe8\x02\xa7\xe4/l\xbc\xc3x\xc93\xcaS\xbb\x1a\xaa\xaf\x02fpP\xfc\xc4\xd0^Rc-\r\f\xad\xf3\xd5_;\x1b\xb1C0f\x10\xfe\xca\xa4!\xa8\x1e\x9fn\x99\xcc\xe1\xb4u@\x15o\x8c\x8c6M\xce\x80\xe9\xa6\"ils.\xc0JK\xea\xf3\x97\"f\xc7\xc4\xfc\xa1\x17h\xeb\a`\xa5\x11\x89\xd8\xf5\xfbt\xc4\x8f^2\xec\x0e\xad\xfdX\r:\xfe\x03\xbd\x1b\xd5gX\xe2\xe1\xae\xd1\xd0\xfb\xafn0\xc2w\xd7\x04t\xbe\x04\f\xa2\xb9\xd7\xb8r\xa0*\xff\x88.E', 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000280)=0x7) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @local, 0x1}}}, 0x30) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x69}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x100000001}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) dup(0xffffffffffffffff) 05:52:48 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fbdd6a", 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}, 0x0) [ 253.323651] xt_TCPMSS: Only works on TCP SYN packets [ 253.374691] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 05:52:48 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x770000, 0x28) 05:52:48 executing program 1: clock_settime(0xa, 0x0) [ 253.497060] print_req_error: I/O error, dev loop0, sector 0 [ 253.615022] l2tp_ppp: tunl 2: set debug=b7a 05:52:48 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x22a, 0x0) 05:52:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000180), 0x0, 0x0) [ 253.783405] l2tp_ppp: tunl 2: set debug=b7a 05:52:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:52:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x44182) r2 = memfd_create(&(0x7f0000000380)='.^\xc5\xe3\xe8\x02\xa7\xe4/l\xbc\xc3x\xc93\xcaS\xbb\x1a\xaa\xaf\x02fpP\xfc\xc4\xd0^Rc-\r\f\xad\xf3\xd5_;\x1b\xb1C0f\x10\xfe\xca\xa4!\xa8\x1e\x9fn\x99\xcc\xe1\xb4u@\x15o\x8c\x8c6M\xce\x80\xe9\xa6\"ils.\xc0JK\xea\xf3\x97\"f\xc7\xc4\xfc\xa1\x17h\xeb\a`\xa5\x11\x89\xd8\xf5\xfbt\xc4\x8f^2\xec\x0e\xad\xfdX\r:\xfe\x03\xbd\x1b\xd5gX\xe2\xe1\xae\xd1\xd0\xfb\xafn0\xc2w\xd7\x04t\xbe\x04\f\xa2\xb9\xd7\xb8r\xa0*\xff\x88.E', 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000280)=0x7) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @local, 0x1}}}, 0x30) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x69}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x100000001}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) dup(0xffffffffffffffff) 05:52:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) 05:52:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000180), 0x0, 0x0) 05:52:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:52:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) 05:52:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x22a, 0x0) 05:52:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) 05:52:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x44182) r2 = memfd_create(&(0x7f0000000380)='.^\xc5\xe3\xe8\x02\xa7\xe4/l\xbc\xc3x\xc93\xcaS\xbb\x1a\xaa\xaf\x02fpP\xfc\xc4\xd0^Rc-\r\f\xad\xf3\xd5_;\x1b\xb1C0f\x10\xfe\xca\xa4!\xa8\x1e\x9fn\x99\xcc\xe1\xb4u@\x15o\x8c\x8c6M\xce\x80\xe9\xa6\"ils.\xc0JK\xea\xf3\x97\"f\xc7\xc4\xfc\xa1\x17h\xeb\a`\xa5\x11\x89\xd8\xf5\xfbt\xc4\x8f^2\xec\x0e\xad\xfdX\r:\xfe\x03\xbd\x1b\xd5gX\xe2\xe1\xae\xd1\xd0\xfb\xafn0\xc2w\xd7\x04t\xbe\x04\f\xa2\xb9\xd7\xb8r\xa0*\xff\x88.E', 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000280)=0x7) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @local, 0x1}}}, 0x30) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x69}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x100000001}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) dup(0xffffffffffffffff) 05:52:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:52:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) 05:52:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) 05:52:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) 05:52:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:52:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x22a, 0x0) 05:52:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x44182) r2 = memfd_create(&(0x7f0000000380)='.^\xc5\xe3\xe8\x02\xa7\xe4/l\xbc\xc3x\xc93\xcaS\xbb\x1a\xaa\xaf\x02fpP\xfc\xc4\xd0^Rc-\r\f\xad\xf3\xd5_;\x1b\xb1C0f\x10\xfe\xca\xa4!\xa8\x1e\x9fn\x99\xcc\xe1\xb4u@\x15o\x8c\x8c6M\xce\x80\xe9\xa6\"ils.\xc0JK\xea\xf3\x97\"f\xc7\xc4\xfc\xa1\x17h\xeb\a`\xa5\x11\x89\xd8\xf5\xfbt\xc4\x8f^2\xec\x0e\xad\xfdX\r:\xfe\x03\xbd\x1b\xd5gX\xe2\xe1\xae\xd1\xd0\xfb\xafn0\xc2w\xd7\x04t\xbe\x04\f\xa2\xb9\xd7\xb8r\xa0*\xff\x88.E', 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000280)=0x7) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @local, 0x1}}}, 0x30) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x69}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x100000001}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) dup(0xffffffffffffffff) 05:52:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) 05:52:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) [ 256.672519] ================================================================== [ 256.680112] BUG: KASAN: out-of-bounds in unwind_next_frame+0x1571/0x17a0 [ 256.687233] Read of size 8 at addr ffff88804bf37e68 by task syz-executor.1/8014 [ 256.694688] [ 256.696327] CPU: 0 PID: 8014 Comm: syz-executor.1 Not tainted 4.14.174-syzkaller #0 [ 256.704215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.713708] Call Trace: [ 256.716414] dump_stack+0x13e/0x194 [ 256.720069] ? unwind_next_frame+0x1571/0x17a0 [ 256.724756] print_address_description.cold+0x7c/0x1e2 [ 256.730063] ? unwind_next_frame+0x1571/0x17a0 [ 256.734747] kasan_report.cold+0xa9/0x2ae [ 256.738902] unwind_next_frame+0x1571/0x17a0 [ 256.743409] ? retint_kernel+0x1b/0x2d [ 256.747314] ? deref_stack_reg+0xc0/0xc0 [ 256.751496] __save_stack_trace+0x6b/0xd0 [ 256.755859] save_stack_trace_tsk+0x34/0x40 [ 256.760346] proc_pid_stack+0x164/0x240 [ 256.764554] ? check_preemption_disabled+0x35/0x240 [ 256.769599] ? lock_trace+0xc0/0xc0 [ 256.773447] ? lock_downgrade+0x6e0/0x6e0 [ 256.777627] proc_single_show+0xe7/0x150 [ 256.781767] seq_read+0x4d2/0x1160 [ 256.785332] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 256.790374] ? seq_lseek+0x3d0/0x3d0 [ 256.794204] do_iter_read+0x3e3/0x5a0 [ 256.798006] vfs_readv+0xd3/0x130 [ 256.801451] ? compat_rw_copy_check_uvector+0x320/0x320 [ 256.806809] ? find_held_lock+0x2d/0x110 [ 256.810881] ? __fget+0x201/0x360 [ 256.814346] ? lock_downgrade+0x6e0/0x6e0 [ 256.818488] ? __fget+0x228/0x360 [ 256.821943] do_preadv+0x161/0x200 [ 256.825503] ? do_readv+0x2c0/0x2c0 [ 256.829141] ? SyS_clock_settime+0x1a0/0x1a0 [ 256.833540] ? do_syscall_64+0x4c/0x640 [ 256.837503] ? SyS_writev+0x30/0x30 [ 256.841121] do_syscall_64+0x1d5/0x640 [ 256.845017] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.850195] RIP: 0033:0x45c849 [ 256.853371] RSP: 002b:00007f70eb33cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 256.861070] RAX: ffffffffffffffda RBX: 00007f70eb33d6d4 RCX: 000000000045c849 [ 256.868332] RDX: 000000000000022a RSI: 00000000200017c0 RDI: 0000000000000005 [ 256.875593] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 256.882987] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 256.890253] R13: 0000000000000856 R14: 00000000004cb170 R15: 000000000076bf0c [ 256.897545] [ 256.899165] The buggy address belongs to the page: [ 256.904083] page:ffffea00012fcdc0 count:0 mapcount:0 mapping: (null) index:0x0 [ 256.912319] flags: 0xfffe0000000000() [ 256.916130] raw: 00fffe0000000000 0000000000000000 0000000000000000 00000000ffffffff [ 256.924328] raw: 0000000000000000 ffffea00012fcde0 0000000000000000 0000000000000000 [ 256.932203] page dumped because: kasan: bad access detected [ 256.937922] [ 256.939539] Memory state around the buggy address: [ 256.944454] ffff88804bf37d00: 00 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 [ 256.951797] ffff88804bf37d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.959139] >ffff88804bf37e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.966511] ^ [ 256.973705] ffff88804bf37e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.981069] ffff88804bf37f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.989475] ================================================================== [ 256.996959] Disabling lock debugging due to kernel taint [ 257.003011] Kernel panic - not syncing: panic_on_warn set ... [ 257.003011] [ 257.010393] CPU: 0 PID: 8014 Comm: syz-executor.1 Tainted: G B 4.14.174-syzkaller #0 [ 257.019497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.028874] Call Trace: [ 257.031524] dump_stack+0x13e/0x194 [ 257.035250] panic+0x1f9/0x42d [ 257.038807] ? add_taint.cold+0x16/0x16 [ 257.042828] ? unwind_next_frame+0x1571/0x17a0 [ 257.047426] kasan_end_report+0x43/0x49 [ 257.051396] kasan_report.cold+0x12f/0x2ae [ 257.055655] unwind_next_frame+0x1571/0x17a0 [ 257.060062] ? retint_kernel+0x1b/0x2d [ 257.063965] ? deref_stack_reg+0xc0/0xc0 [ 257.068034] __save_stack_trace+0x6b/0xd0 [ 257.072180] save_stack_trace_tsk+0x34/0x40 [ 257.076522] proc_pid_stack+0x164/0x240 [ 257.080498] ? check_preemption_disabled+0x35/0x240 [ 257.085518] ? lock_trace+0xc0/0xc0 [ 257.089144] ? lock_downgrade+0x6e0/0x6e0 [ 257.093291] proc_single_show+0xe7/0x150 [ 257.097346] seq_read+0x4d2/0x1160 [ 257.100885] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 257.105922] ? seq_lseek+0x3d0/0x3d0 [ 257.109640] do_iter_read+0x3e3/0x5a0 [ 257.113459] vfs_readv+0xd3/0x130 [ 257.117075] ? compat_rw_copy_check_uvector+0x320/0x320 [ 257.122576] ? find_held_lock+0x2d/0x110 [ 257.126652] ? __fget+0x201/0x360 [ 257.130105] ? lock_downgrade+0x6e0/0x6e0 [ 257.134267] ? __fget+0x228/0x360 [ 257.137725] do_preadv+0x161/0x200 [ 257.141578] ? do_readv+0x2c0/0x2c0 [ 257.145237] ? SyS_clock_settime+0x1a0/0x1a0 [ 257.149639] ? do_syscall_64+0x4c/0x640 [ 257.153605] ? SyS_writev+0x30/0x30 [ 257.157662] do_syscall_64+0x1d5/0x640 [ 257.161569] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.166774] RIP: 0033:0x45c849 [ 257.169958] RSP: 002b:00007f70eb33cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 257.177770] RAX: ffffffffffffffda RBX: 00007f70eb33d6d4 RCX: 000000000045c849 [ 257.185046] RDX: 000000000000022a RSI: 00000000200017c0 RDI: 0000000000000005 [ 257.192325] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 257.199607] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 257.207216] R13: 0000000000000856 R14: 00000000004cb170 R15: 000000000076bf0c [ 257.215953] Kernel Offset: disabled [ 257.219584] Rebooting in 86400 seconds..