last executing test programs: 5m52.386754282s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 5m52.178498884s ago: executing program 3 (id=10): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0xa9f3, 0x400, 0x3, 0x287}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5m52.007064191s ago: executing program 3 (id=14): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0x1, 0x0) 5m51.833751526s ago: executing program 3 (id=16): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') 5m51.72638456s ago: executing program 3 (id=18): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvfrom$unix(r2, 0x0, 0x0, 0x10041, 0x0, 0x0) 5m50.501761129s ago: executing program 3 (id=29): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5m50.335220892s ago: executing program 32 (id=29): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m44.953073432s ago: executing program 1 (id=819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m44.395863422s ago: executing program 1 (id=813): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6a040000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x81}}}, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000024000000000024001200140001006272696467655f736c6176658000"], 0x3}, 0x1, 0x0, 0x0, 0x48990}, 0x0) 4m44.160215148s ago: executing program 1 (id=817): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x33) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 4m44.030608434s ago: executing program 1 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 4m43.928309701s ago: executing program 1 (id=821): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="10", 0xfffffffffffffdcd, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) 4m41.872985536s ago: executing program 1 (id=834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60004, 0xc8) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x4}, 0x8) 4m41.723751759s ago: executing program 33 (id=834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60004, 0xc8) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x4}, 0x8) 1m43.877895038s ago: executing program 5 (id=4193): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2", 0x1a}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fcdbdf2502000000040001803c0001801400020087a103e3c609699e00000000000000000800030001000000080001007756f43c56494cb043ca147ea86d0a02128a1592aa6dd3d2833ea5e483bb75af8de0f20880149d9daaf7af859df1c6cc135ab3f1439176e7b03336372b89544be904ef0f1951beb321e061517260690aec8f058d9417b9429b3c6a5e50de42fd107f32"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m43.649526845s ago: executing program 5 (id=4200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m43.502346922s ago: executing program 5 (id=4201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m43.401052496s ago: executing program 5 (id=4203): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1m42.020919203s ago: executing program 5 (id=4222): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 1m41.980510525s ago: executing program 5 (id=4223): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1m26.817193424s ago: executing program 34 (id=4223): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1m9.816767125s ago: executing program 6 (id=4444): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000300)='./file0/file0\x00', 0x112) 1m9.723112553s ago: executing program 6 (id=4451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00008a0000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="847707260fc7be9a750f00000001c2b931020000b800100000ba000000000f300f73f600c7442400f5cf0000c4c261b63d8000c0fec7442406000000000f011424660f300fc7be64000000660f2a8b66b8e600b983040000b800200000ba000000000f30", 0x64}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m9.429855951s ago: executing program 6 (id=4457): creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x28803, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000140)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 1m9.299901135s ago: executing program 6 (id=4459): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) 1m9.289757795s ago: executing program 6 (id=4460): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x20, 0x101000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.999742295s ago: executing program 6 (id=4463): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 1m8.864425076s ago: executing program 35 (id=4463): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 5.757233825s ago: executing program 7 (id=5503): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r1}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x1003ffd, r5}, 0x10) 5.423182248s ago: executing program 7 (id=5509): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @empty, 0x4e24, 0x1, 'nq\x00', 0x8, 0x5, 0xa}, {@multicast2, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x200000b0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x4000) 5.328530092s ago: executing program 7 (id=5511): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.164374968s ago: executing program 7 (id=5514): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2", 0x1a}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fcdbdf2502000000040001803c0001801400020087a103e3c609699e00000000000000000800030001000000080001007756f43c56494cb043ca147ea86d0a02128a1592aa6dd3d2833ea5e483bb75af8de0f20880149d9daaf7af859df1c6cc135ab3f1439176e7b03336372b89544be904ef0f1951beb321e061517260690aec8f058d9417b9429b3c6a5e50de42fd107f32"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.867956174s ago: executing program 7 (id=5518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x8002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4.73616761s ago: executing program 7 (id=5519): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 989.621044ms ago: executing program 2 (id=5553): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x183240, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0002) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 905.393473ms ago: executing program 2 (id=5554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x100003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f0000000480)="bad330752181510000316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0xda}, 0x14) 900.763966ms ago: executing program 0 (id=5555): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2", 0x1a}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fcdbdf2502000000040001803c0001801400020087a103e3c609699e00000000000000000800030001000000080001007756f43c56494cb043ca147ea86d0a02128a1592aa6dd3d2833ea5e483bb75af8de0f20880149d9daaf7af859df1c6cc135ab3f1439176e7b03336372b89544be904ef0f1951beb321e061517260690aec8f058d9417b9429b3c6a5e50de42fd107f32"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 799.539138ms ago: executing program 0 (id=5556): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r2, 0x400, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x90) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x8800) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') 725.085317ms ago: executing program 2 (id=5558): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x75, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x241}], 0x1}}], 0x1, 0x4) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 671.29827ms ago: executing program 4 (id=5559): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000", 0x19}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x80, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 663.978378ms ago: executing program 0 (id=5560): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x1a, 0x1, 0x26d4) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r2, r2, 0x2f, 0x2028, 0x4}, 0x20) setresuid(0x0, 0xee00, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) 520.55398ms ago: executing program 4 (id=5561): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x1003ffd, r4}, 0x10) 509.535545ms ago: executing program 2 (id=5562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r7, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 419.624576ms ago: executing program 4 (id=5563): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 419.000355ms ago: executing program 4 (id=5564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x8, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x4, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x4, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x2, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x6, 0x5, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0xe9e, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 318.803512ms ago: executing program 0 (id=5565): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x80) socket$netlink(0x10, 0x3, 0x9) socket$inet6(0x2d, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 317.999532ms ago: executing program 2 (id=5566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r9, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a264c70c398a54beba73370dff7b", 0xe}], 0x1}, 0x4) 306.521611ms ago: executing program 0 (id=5567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x8, 0x7, 0x5, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c4}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000110000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 137.892192ms ago: executing program 4 (id=5568): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 80.407891ms ago: executing program 2 (id=5569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) write$P9_RREAD(r2, &(0x7f0000000140)=ANY=[], 0xb) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 73.092745ms ago: executing program 0 (id=5570): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 0s ago: executing program 4 (id=5571): socket(0x11, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 294.999738][T15759] usbtmc 10-1:16.0: Unable to send data, error -71 [ 295.005355][T15759] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 295.013953][ T6919] usb 10-1: USB disconnect, device number 20 [ 295.138265][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.568519][T15764] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 295.674325][T15780] __nla_validate_parse: 6 callbacks suppressed [ 295.674342][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'. [ 295.685141][T15780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.694319][T15780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.701874][T15780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.790003][ T40] audit: type=1400 audit(295.625:534): avc: denied { bpf } for pid=15789 comm="syz.2.3476" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 295.802908][ T40] audit: type=1400 audit(295.635:535): avc: denied { perfmon } for pid=15789 comm="syz.2.3476" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 295.873903][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'. [ 295.897463][ T40] audit: type=1400 audit(295.725:536): avc: denied { read } for pid=15795 comm="syz.5.3479" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 295.909724][ T40] audit: type=1400 audit(295.725:537): avc: denied { open } for pid=15795 comm="syz.5.3479" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 295.922936][ T40] audit: type=1400 audit(295.745:538): avc: denied { ioctl } for pid=15795 comm="syz.5.3479" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 295.934794][ T40] audit: type=1400 audit(295.765:539): avc: denied { unmount } for pid=8349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 296.178019][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.291774][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'. [ 296.307564][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3501'. [ 296.314152][T15829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.328010][T15829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.333473][T15829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.499308][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 297.069182][T15874] syzkaller0: entered promiscuous mode [ 297.071583][T15874] syzkaller0: entered allmulticast mode [ 297.091379][T15874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3512'. [ 297.105914][T15874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3512'. [ 297.117048][T15877] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 297.169065][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 297.172507][T15877] bond23: entered promiscuous mode [ 297.175149][T15877] bond23: entered allmulticast mode [ 297.186332][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3513'. [ 297.193450][T15877] bond23: left promiscuous mode [ 297.195619][T15877] bond23: left allmulticast mode [ 297.198634][T15877] 8021q: adding VLAN 0 to HW filter on device bond23 [ 297.228139][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.288749][ T40] audit: type=1400 audit(297.125:540): avc: denied { listen } for pid=15882 comm="syz.5.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.375584][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3517'. [ 297.669847][ T40] audit: type=1400 audit(297.505:541): avc: denied { name_bind } for pid=15912 comm="syz.5.3527" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 297.809615][ T40] audit: type=1400 audit(297.645:542): avc: denied { append } for pid=15923 comm="syz.5.3532" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 298.074330][T15947] netlink: 'syz.2.3541': attribute type 1 has an invalid length. [ 298.094241][T15947] bond20: entered promiscuous mode [ 298.096462][T15947] bond20: entered allmulticast mode [ 298.108076][T15947] bond20: left promiscuous mode [ 298.109870][T15947] bond20: left allmulticast mode [ 298.111809][T15947] 8021q: adding VLAN 0 to HW filter on device bond20 [ 298.279119][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.894484][ T40] audit: type=1400 audit(298.725:543): avc: denied { write } for pid=16025 comm="syz.5.3575" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 298.971861][T16038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.992164][T16038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.998720][T16038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.298093][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.559269][T16087] netlink: 'syz.4.3590': attribute type 1 has an invalid length. [ 299.586927][T16087] bond24: entered promiscuous mode [ 299.591054][T16087] bond24: entered allmulticast mode [ 299.600064][T16087] bond24: left promiscuous mode [ 299.602249][T16087] bond24: left allmulticast mode [ 299.604785][T16087] 8021q: adding VLAN 0 to HW filter on device bond24 [ 299.739003][T16105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.747138][T16105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.752735][T16105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.872095][T16119] netlink: 'syz.5.3603': attribute type 1 has an invalid length. [ 299.892392][T16119] bond15: entered promiscuous mode [ 299.894960][T16119] bond15: entered allmulticast mode [ 299.906291][T16119] bond15: left promiscuous mode [ 299.911186][T16119] bond15: left allmulticast mode [ 299.913736][T16119] 8021q: adding VLAN 0 to HW filter on device bond15 [ 300.173558][T16152] netlink: 'syz.2.3614': attribute type 1 has an invalid length. [ 300.186757][T16152] bond21: entered promiscuous mode [ 300.188456][T16152] bond21: entered allmulticast mode [ 300.194516][T16152] bond21: left promiscuous mode [ 300.196111][T16152] bond21: left allmulticast mode [ 300.198362][T16152] 8021q: adding VLAN 0 to HW filter on device bond21 [ 300.338066][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.775707][T16192] overlayfs: failed to clone upperpath [ 300.815923][T16196] __nla_validate_parse: 9 callbacks suppressed [ 300.815940][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 300.825855][T16197] syzkaller1: entered promiscuous mode [ 300.825887][T16196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.828240][T16197] syzkaller1: entered allmulticast mode [ 300.864722][T16196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.870334][T16196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.342440][T16229] netlink: 'syz.4.3646': attribute type 1 has an invalid length. [ 301.371848][T16229] bond25: entered promiscuous mode [ 301.373914][T16229] bond25: entered allmulticast mode [ 301.378373][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.381991][T16229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3646'. [ 301.386384][T16229] bond25: left promiscuous mode [ 301.390054][T16229] bond25: left allmulticast mode [ 301.396980][T16229] 8021q: adding VLAN 0 to HW filter on device bond25 [ 301.673390][ T40] audit: type=1400 audit(2000000002.310:544): avc: denied { mounton } for pid=16256 comm="syz.5.3664" path="/467/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 301.803150][T16269] netlink: 'syz.0.3660': attribute type 1 has an invalid length. [ 301.850192][T16269] bond30: entered promiscuous mode [ 301.852551][T16269] bond30: entered allmulticast mode [ 301.863232][T16275] overlayfs: failed to clone upperpath [ 301.887375][T16269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3660'. [ 301.898564][T16269] bond30: left promiscuous mode [ 301.900243][T16269] bond30: left allmulticast mode [ 301.902299][T16269] 8021q: adding VLAN 0 to HW filter on device bond30 [ 302.080211][T16290] overlayfs: failed to clone upperpath [ 302.202608][T16299] tipc: Enabling of bearer rejected, failed to enable media [ 302.270805][ T40] audit: type=1400 audit(2000000002.900:545): avc: denied { name_bind } for pid=16302 comm="syz.2.3676" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 302.272350][T16305] netlink: 'syz.5.3674': attribute type 1 has an invalid length. [ 302.307500][T16305] bond16: entered promiscuous mode [ 302.309904][T16305] bond16: entered allmulticast mode [ 302.317528][T16305] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3674'. [ 302.323757][T16305] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3674'. [ 302.328321][T16305] bond16: left promiscuous mode [ 302.330441][T16305] bond16: left allmulticast mode [ 302.332904][T16305] 8021q: adding VLAN 0 to HW filter on device bond16 [ 302.341938][T16315] overlayfs: failed to clone upperpath [ 302.382188][T16318] overlayfs: failed to clone upperpath [ 302.418142][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.479884][T16329] overlayfs: failed to clone lowerpath [ 302.484519][T16329] overlayfs: failed to clone lowerpath [ 302.568737][T16341] netlink: 'syz.2.3689': attribute type 1 has an invalid length. [ 302.569174][T16340] tipc: Enabling of bearer rejected, failed to enable media [ 302.599343][T16341] bond22: entered promiscuous mode [ 302.601751][T16341] bond22: entered allmulticast mode [ 302.606762][T16341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3689'. [ 302.620440][T16341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3689'. [ 302.623986][T16341] bond22: left promiscuous mode [ 302.626111][T16341] bond22: left allmulticast mode [ 302.629996][T16341] 8021q: adding VLAN 0 to HW filter on device bond22 [ 302.691216][ T40] audit: type=1400 audit(2000000003.330:546): avc: denied { getopt } for pid=16348 comm="syz.4.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 302.738132][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3692'. [ 302.744881][T16357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.761301][T16359] overlayfs: failed to clone upperpath [ 302.818551][T16349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.829890][T16349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.834708][T16368] overlayfs: failed to clone lowerpath [ 302.839703][T16368] overlayfs: failed to clone lowerpath [ 302.883240][ T40] audit: type=1326 audit(2000000003.520:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.5.3704" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbc459bf79 code=0x0 [ 302.977029][T16382] overlayfs: failed to clone upperpath [ 303.380045][T16387] overlayfs: failed to clone lowerpath [ 303.384748][T16389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.392169][T16387] overlayfs: failed to clone lowerpath [ 303.400484][T16389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.406189][T16389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.458257][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 303.717014][T16412] netlink: 'syz.2.3711': attribute type 1 has an invalid length. [ 303.731516][T16412] bond23: entered promiscuous mode [ 303.733731][T16412] bond23: entered allmulticast mode [ 303.739329][T16412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3711'. [ 303.745275][T16412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3711'. [ 303.750458][T16412] bond23: left promiscuous mode [ 303.752658][T16412] bond23: left allmulticast mode [ 303.755191][T16412] 8021q: adding VLAN 0 to HW filter on device bond23 [ 304.018285][T16440] overlayfs: failed to clone upperpath [ 304.046139][ T40] audit: type=1326 audit(2000000004.680:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.4.3725" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62dc19bf79 code=0x0 [ 304.160181][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.168080][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.172916][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.498232][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.737344][T16479] netlink: 'syz.0.3741': attribute type 1 has an invalid length. [ 304.760179][T16479] bond31: entered promiscuous mode [ 304.763064][T16479] bond31: entered allmulticast mode [ 304.772641][T16479] bond31: left promiscuous mode [ 304.774567][T16479] bond31: left allmulticast mode [ 304.776807][T16479] 8021q: adding VLAN 0 to HW filter on device bond31 [ 304.919814][ T9174] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 305.069676][T16500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.077986][ T9174] usb 10-1: Using ep0 maxpacket: 8 [ 305.084962][ T9174] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 305.098025][ T9174] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 305.102496][ T9174] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.117196][ T9174] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.123371][ T9174] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.125691][T16510] netlink: 'syz.0.3753': attribute type 1 has an invalid length. [ 305.128344][ T9174] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.130252][T16503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.131527][T16503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.176219][T16510] bond32: entered promiscuous mode [ 305.178675][T16510] bond32: entered allmulticast mode [ 305.189477][T16510] bond32: left promiscuous mode [ 305.191695][T16510] bond32: left allmulticast mode [ 305.194297][T16510] 8021q: adding VLAN 0 to HW filter on device bond32 [ 305.356822][ T9174] usb 10-1: usb_control_msg returned -32 [ 305.359551][ T9174] usbtmc 10-1:16.0: can't read capabilities [ 305.538164][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.212112][T16586] netlink: 'syz.0.3783': attribute type 1 has an invalid length. [ 306.231008][T16586] bond33: entered promiscuous mode [ 306.234005][T16586] bond33: entered allmulticast mode [ 306.241073][T16586] __nla_validate_parse: 4 callbacks suppressed [ 306.241092][T16586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3783'. [ 306.253267][T16586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3783'. [ 306.258687][T16586] bond33: left promiscuous mode [ 306.261173][T16586] bond33: left allmulticast mode [ 306.263941][T16586] 8021q: adding VLAN 0 to HW filter on device bond33 [ 306.266454][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'. [ 306.350365][T16597] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 306.370640][T16597] bond34: entered promiscuous mode [ 306.372859][T16597] bond34: entered allmulticast mode [ 306.379255][T16597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3796'. [ 306.386199][T16597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3796'. [ 306.391293][T16597] bond34: left promiscuous mode [ 306.393460][T16597] bond34: left allmulticast mode [ 306.396457][T16597] 8021q: adding VLAN 0 to HW filter on device bond34 [ 306.578147][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.743052][ T40] audit: type=1400 audit(2000000007.380:549): avc: denied { name_connect } for pid=16611 comm="syz.0.3797" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 307.618016][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.690334][ T6919] usb 10-1: USB disconnect, device number 21 [ 307.843542][T16680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.903160][T16673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.909602][T16673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.171740][T16705] syzkaller0: entered promiscuous mode [ 308.174007][T16705] syzkaller0: entered allmulticast mode [ 308.179078][T16705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3836'. [ 308.182868][T16705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3836'. [ 308.499960][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3830'. [ 308.605606][T16723] input: syz1 as /devices/virtual/input/input15 [ 308.627350][T16725] netlink: 'syz.0.3837': attribute type 1 has an invalid length. [ 308.658667][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.659740][T16725] bond35: entered promiscuous mode [ 308.663959][T16725] bond35: entered allmulticast mode [ 308.691915][T16725] bond35: (slave ip6gretap18): making interface the new active one [ 308.695502][T16725] ip6gretap18: entered promiscuous mode [ 308.698715][T16725] ip6gretap18: entered allmulticast mode [ 308.702614][T16725] bond35: (slave ip6gretap18): Enslaving as an active interface with an up link [ 308.710396][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3837'. [ 308.714923][T16730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.724663][T16730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.739465][T16730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.538156][ T34] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 309.690247][ T34] usb 10-1: config 0 has an invalid interface number: 249 but max is 0 [ 309.694014][ T34] usb 10-1: config 0 has no interface number 0 [ 309.696855][ T34] usb 10-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 309.701024][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.704358][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.710961][ T34] usb 10-1: config 0 descriptor?? [ 309.716155][ T34] port100 10-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 310.126302][T16748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.131776][T16748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.141609][ T34] usb 10-1: USB disconnect, device number 22 [ 310.737542][T16824] netlink: 'syz.0.3879': attribute type 1 has an invalid length. [ 310.748002][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.763285][T16824] bond36: entered promiscuous mode [ 310.765395][T16824] bond36: entered allmulticast mode [ 310.779036][T16824] bond36: (slave ip6gretap19): making interface the new active one [ 310.782379][T16824] ip6gretap19: entered promiscuous mode [ 310.784846][T16824] ip6gretap19: entered allmulticast mode [ 310.788105][T16824] bond36: (slave ip6gretap19): Enslaving as an active interface with an up link [ 310.794249][T16824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3879'. [ 310.860260][ T40] audit: type=1400 audit(2000000011.500:550): avc: denied { watch watch_reads } for pid=16830 comm="syz.5.3880" path="/495/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 310.896636][T16836] overlayfs: failed to clone upperpath [ 311.059259][T16851] netlink: 'syz.0.3892': attribute type 1 has an invalid length. [ 311.082047][T16851] bond37: entered promiscuous mode [ 311.084282][T16851] bond37: entered allmulticast mode [ 311.110724][T16851] bond37: (slave ip6gretap20): making interface the new active one [ 311.113467][T16851] ip6gretap20: entered promiscuous mode [ 311.115311][T16851] ip6gretap20: entered allmulticast mode [ 311.118499][T16851] bond37: (slave ip6gretap20): Enslaving as an active interface with an up link [ 311.313545][T16880] netlink: 'syz.5.3907': attribute type 1 has an invalid length. [ 311.333286][T16880] bond17: entered promiscuous mode [ 311.335457][T16880] bond17: entered allmulticast mode [ 311.351339][T16880] bond17: (slave ip6gretap9): making interface the new active one [ 311.354675][T16880] ip6gretap9: entered promiscuous mode [ 311.357182][T16880] ip6gretap9: entered allmulticast mode [ 311.363754][T16880] bond17: (slave ip6gretap9): Enslaving as an active interface with an up link [ 311.411829][T16889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.420963][T16889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.430232][T16889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.474415][T16895] netlink: 'syz.4.3919': attribute type 1 has an invalid length. [ 311.492999][T16895] bond26: entered promiscuous mode [ 311.495059][T16895] bond26: entered allmulticast mode [ 311.510151][T16895] bond26: (slave ip6gretap10): making interface the new active one [ 311.513631][T16895] ip6gretap10: entered promiscuous mode [ 311.516162][T16895] ip6gretap10: entered allmulticast mode [ 311.520621][T16895] bond26: (slave ip6gretap10): Enslaving as an active interface with an up link [ 311.681517][ T40] audit: type=1400 audit(2000000012.320:551): avc: denied { append } for pid=16904 comm="syz.5.3914" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.695407][T16905] loop5: detected capacity change from 0 to 2640 [ 311.701850][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.705507][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.710203][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.714023][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.717605][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.722306][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.725791][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.729699][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.733191][ T7036] ldm_validate_partition_table(): Disk read failed. [ 311.736266][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.740834][ T7036] Buffer I/O error on dev loop5, logical block 0, async page read [ 311.747641][ T7036] loop5: unable to read partition table [ 311.758068][T16905] ldm_validate_partition_table(): Disk read failed. [ 311.761365][T16905] Dev loop5: unable to read RDB block 0 [ 311.763905][T16905] loop5: unable to read partition table [ 311.768939][T16905] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 311.789465][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 311.980053][T16922] siw: device registration error -23 [ 311.985142][T16922] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3920'. [ 312.003982][T16922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.018812][T16922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.023833][T16922] bond0 (unregistering): Released all slaves [ 312.409201][T16957] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed [ 312.409247][T16957] kvm: kvm [16956]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 312.416509][T16957] kvm: kvm [16956]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 312.818117][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.949146][T17009] overlayfs: failed to clone upperpath [ 313.010066][T17012] netlink: 'syz.2.3952': attribute type 1 has an invalid length. [ 313.031309][T17012] bond24: entered promiscuous mode [ 313.034708][T17012] bond24: entered allmulticast mode [ 313.053655][T17012] bond24: (slave ip6gretap5): making interface the new active one [ 313.057204][T17012] ip6gretap5: entered promiscuous mode [ 313.060658][T17012] ip6gretap5: entered allmulticast mode [ 313.064150][T17012] bond24: (slave ip6gretap5): Enslaving as an active interface with an up link [ 313.211684][T17031] overlayfs: failed to clone upperpath [ 313.400764][T17044] netlink: 'syz.0.3964': attribute type 1 has an invalid length. [ 313.416775][T17044] bond38: entered promiscuous mode [ 313.419368][T17044] bond38: entered allmulticast mode [ 313.432399][T17044] bond38: (slave ip6gretap21): making interface the new active one [ 313.435826][T17044] ip6gretap21: entered promiscuous mode [ 313.438548][T17044] ip6gretap21: entered allmulticast mode [ 313.441934][T17044] bond38: (slave ip6gretap21): Enslaving as an active interface with an up link [ 313.484986][T17047] overlayfs: failed to clone upperpath [ 313.814686][T17057] overlayfs: failed to clone upperpath [ 313.858038][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.884839][T17063] netlink: 'syz.5.3973': attribute type 1 has an invalid length. [ 313.897678][T17063] bond18: entered promiscuous mode [ 313.899778][T17063] bond18: entered allmulticast mode [ 313.911143][T17063] bond18: (slave ip6gretap10): making interface the new active one [ 313.913696][T17063] ip6gretap10: entered promiscuous mode [ 313.915535][T17063] ip6gretap10: entered allmulticast mode [ 313.922893][T17063] bond18: (slave ip6gretap10): Enslaving as an active interface with an up link [ 313.966703][T17070] overlayfs: failed to clone upperpath [ 314.200975][T17086] netlink: 'syz.2.3984': attribute type 1 has an invalid length. [ 314.221062][T17089] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3985'. [ 314.225039][T17086] bond25: entered promiscuous mode [ 314.225061][T17086] bond25: entered allmulticast mode [ 314.239280][T17086] bond25: (slave ip6gretap6): making interface the new active one [ 314.242330][T17086] ip6gretap6: entered promiscuous mode [ 314.244550][T17086] ip6gretap6: entered allmulticast mode [ 314.247286][T17086] bond25: (slave ip6gretap6): Enslaving as an active interface with an up link [ 314.255926][T17089] bond4: (slave bond0): Releasing active interface [ 314.261064][T17089] ip6gretap1: entered promiscuous mode [ 314.278785][T17089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.286982][T17089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.297226][T17089] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 314.301851][T17089] bond0 (unregistering): Released all slaves [ 314.328836][ T6919] infiniband syz1: ib_query_port failed (-19) [ 314.343121][T17094] overlayfs: failed to get inode (-116) [ 314.346454][T17094] overlayfs: failed to get inode (-116) [ 314.898150][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.137376][T17152] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.163409][T17154] vlan0: entered promiscuous mode [ 315.165681][T17154] bridge0: entered promiscuous mode [ 315.187117][T17152] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4008'. [ 315.842259][T17186] netlink: 'syz.4.4027': attribute type 1 has an invalid length. [ 315.876253][T17186] bond0: (slave geneve2): making interface the new active one [ 315.879560][T17186] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 315.883212][ T61] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 315.886583][ T61] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 315.897991][ T61] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 315.901677][ T61] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 315.930731][ T6919] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 315.938136][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.081165][ T6919] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.090485][ T6919] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 316.094354][ T6919] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 316.098589][ T6919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.109687][ T6919] usb 10-1: config 0 descriptor?? [ 316.119592][ T6919] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 316.122958][ T6919] dvb-usb: bulk message failed: -22 (3/0) [ 316.140202][ T6919] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 316.145156][ T6919] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 316.156775][ T6919] usb 10-1: media controller created [ 316.164294][ T6919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.188241][ T40] audit: type=1326 audit(2000000016.819:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.0.4032" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea44f9bf79 code=0x0 [ 316.191874][ T6919] dvb-usb: bulk message failed: -22 (6/0) [ 316.204571][ T6919] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 316.221450][ T6919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input16 [ 316.231281][ T6919] dvb-usb: schedule remote query interval to 150 msecs. [ 316.234252][ T6919] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 316.327289][ T9174] usb 10-1: USB disconnect, device number 23 [ 316.352226][ T9174] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 316.549524][T17249] netlink: 'syz.2.4044': attribute type 3 has an invalid length. [ 316.988083][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.023850][T17266] netlink: 'syz.2.4051': attribute type 1 has an invalid length. [ 317.041185][T17266] bond26: entered promiscuous mode [ 317.042902][T17266] bond26: entered allmulticast mode [ 317.054049][T17266] bond26: (slave ip6gretap7): making interface the new active one [ 317.057492][T17266] ip6gretap7: entered promiscuous mode [ 317.060397][T17266] ip6gretap7: entered allmulticast mode [ 317.063691][T17266] bond26: (slave ip6gretap7): Enslaving as an active interface with an up link [ 317.320861][T17288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.367809][ T40] audit: type=1326 audit(2000000017.999:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17292 comm="syz.5.4061" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbc459bf79 code=0x0 [ 317.381134][T17295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.387118][T17288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.928325][T17298] netlink: 'syz.2.4062': attribute type 1 has an invalid length. [ 317.948275][T17298] bond27: entered promiscuous mode [ 317.951056][T17298] bond27: entered allmulticast mode [ 317.966024][T17298] bond27: (slave ip6gretap8): making interface the new active one [ 317.969726][T17298] ip6gretap8: entered promiscuous mode [ 317.972223][T17298] ip6gretap8: entered allmulticast mode [ 317.975459][T17298] bond27: (slave ip6gretap8): Enslaving as an active interface with an up link [ 317.983410][T17298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4062'. [ 318.028063][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.301393][T17313] netlink: 'syz.5.4069': attribute type 1 has an invalid length. [ 318.347785][T17313] bond19: (slave geneve2): making interface the new active one [ 318.352222][T17313] bond19: (slave geneve2): Enslaving as an active interface with an up link [ 318.356790][ T1171] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 318.361359][ T1171] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 318.364633][ T1171] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 318.368402][ T223] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 318.484386][T17325] netlink: 'syz.0.4073': attribute type 1 has an invalid length. [ 318.502830][T17325] bond0: entered promiscuous mode [ 318.505449][T17325] bond0: entered allmulticast mode [ 318.519699][T17325] bond0: (slave ip6gretap22): making interface the new active one [ 318.524016][T17325] ip6gretap22: entered promiscuous mode [ 318.526510][T17325] ip6gretap22: entered allmulticast mode [ 318.529993][T17325] bond0: (slave ip6gretap22): Enslaving as an active interface with an up link [ 318.538098][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4073'. [ 318.575188][ T40] audit: type=1326 audit(2000000019.209:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17331 comm="syz.2.4075" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed07b9bf79 code=0x0 [ 319.058123][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.669535][T17363] netlink: 'syz.2.4085': attribute type 1 has an invalid length. [ 319.692320][T17363] bond28: entered promiscuous mode [ 319.694844][T17363] bond28: entered allmulticast mode [ 319.710079][T17363] bond28: (slave ip6gretap9): making interface the new active one [ 319.713483][T17363] ip6gretap9: entered promiscuous mode [ 319.716190][T17363] ip6gretap9: entered allmulticast mode [ 319.720885][T17363] bond28: (slave ip6gretap9): Enslaving as an active interface with an up link [ 319.729062][T17363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4085'. [ 319.903388][T17376] overlayfs: failed to clone upperpath [ 320.108014][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.392503][ T40] audit: type=1400 audit(2000000021.029:555): avc: denied { read } for pid=17412 comm="syz.5.4107" dev="nsfs" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 320.402174][ T40] audit: type=1400 audit(2000000021.029:556): avc: denied { open } for pid=17412 comm="syz.5.4107" path="net:[4026533172]" dev="nsfs" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 320.493763][T17418] kvm: Disabled LAPIC found during irq injection [ 320.640560][ T40] audit: type=1800 audit(2000000021.279:557): pid=17426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4113" name="nullb0" dev="tmpfs" ino=2505 res=0 errno=0 [ 320.683565][T17428] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 320.910716][T17448] overlayfs: failed to clone upperpath [ 321.052742][ T40] audit: type=1400 audit(2000000021.689:558): avc: denied { getopt } for pid=17454 comm="syz.2.4124" lport=52650 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 321.091085][ T40] audit: type=1800 audit(2000000021.729:559): pid=17457 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4125" name="nullb0" dev="tmpfs" ino=3154 res=0 errno=0 [ 321.138054][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.401693][ T40] audit: type=1800 audit(2000000022.039:560): pid=17479 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4135" name="nullb0" dev="tmpfs" ino=2935 res=0 errno=0 [ 321.444375][T17481] netlink: 'syz.4.4134': attribute type 1 has an invalid length. [ 321.469909][T17481] bond27: entered promiscuous mode [ 321.472190][T17481] bond27: entered allmulticast mode [ 321.488983][T17481] bond27: (slave ip6gretap11): making interface the new active one [ 321.492407][T17481] ip6gretap11: entered promiscuous mode [ 321.494900][T17481] ip6gretap11: entered allmulticast mode [ 321.498092][T17481] bond27: (slave ip6gretap11): Enslaving as an active interface with an up link [ 321.505512][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4134'. [ 321.560939][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4139'. [ 321.655520][T17487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.178359][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.216654][T17517] netlink: 'syz.4.4148': attribute type 1 has an invalid length. [ 322.272792][T17517] bond28: entered promiscuous mode [ 322.275017][T17517] bond28: entered allmulticast mode [ 322.301534][T17523] bond28: (slave ip6gretap12): making interface the new active one [ 322.311733][T17523] ip6gretap12: entered promiscuous mode [ 322.314160][T17523] ip6gretap12: entered allmulticast mode [ 322.317325][T17523] bond28: (slave ip6gretap12): Enslaving as an active interface with an up link [ 322.328893][ T40] audit: type=1400 audit(2000000022.959:561): avc: denied { map } for pid=17524 comm="syz.5.4150" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 322.341193][ T40] audit: type=1400 audit(2000000022.959:562): avc: denied { execute } for pid=17524 comm="syz.5.4150" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 322.345981][T17517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4148'. [ 322.518453][ T40] audit: type=1400 audit(2000000023.149:563): avc: denied { wake_alarm } for pid=17526 comm="syz.4.4151" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 322.743043][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.745884][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.774288][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4158'. [ 322.790467][T17544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.821632][T17548] netlink: 'syz.5.4159': attribute type 1 has an invalid length. [ 322.843597][T17548] bond20: entered promiscuous mode [ 322.845980][T17548] bond20: entered allmulticast mode [ 322.872126][T17548] bond20: (slave ip6gretap11): making interface the new active one [ 322.874991][T17548] ip6gretap11: entered promiscuous mode [ 322.877263][T17548] ip6gretap11: entered allmulticast mode [ 322.880405][T17548] bond20: (slave ip6gretap11): Enslaving as an active interface with an up link [ 322.887545][T17548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4159'. [ 322.918746][T17556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4161'. [ 323.218412][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.274841][ T40] audit: type=1400 audit(2000000023.909:564): avc: denied { mounton } for pid=17577 comm="syz.5.4168" path="/542/file1" dev="autofs" ino=62719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 323.464407][T17591] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4172'. [ 323.554515][T17602] netlink: 'syz.0.4176': attribute type 3 has an invalid length. [ 323.798817][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4181'. [ 323.879597][T17614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.258119][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.375986][T17634] netlink: 'syz.5.4195': attribute type 1 has an invalid length. [ 324.396174][T17634] bond21: entered promiscuous mode [ 324.398588][T17634] bond21: entered allmulticast mode [ 324.422091][T17634] bond21: (slave ip6gretap12): making interface the new active one [ 324.425574][T17634] ip6gretap12: entered promiscuous mode [ 324.429012][T17634] ip6gretap12: entered allmulticast mode [ 324.431925][T17634] bond21: (slave ip6gretap12): Enslaving as an active interface with an up link [ 324.531523][T17641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4189'. [ 324.855424][T17669] netlink: 'syz.5.4200': attribute type 1 has an invalid length. [ 324.888747][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4199'. [ 324.905709][T17669] bond22: entered promiscuous mode [ 324.909797][T17669] bond22: entered allmulticast mode [ 324.937609][T17673] bond22: (slave ip6gretap13): making interface the new active one [ 324.941197][T17673] ip6gretap13: entered promiscuous mode [ 324.943657][T17673] ip6gretap13: entered allmulticast mode [ 324.946995][T17673] bond22: (slave ip6gretap13): Enslaving as an active interface with an up link [ 324.959807][T17665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.298104][ T9174] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 325.298208][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.459729][ T9174] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.464039][ T9174] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 325.468356][ T9174] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.471753][ T9174] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.480838][T17680] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 325.487876][ T9174] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.665384][T17692] netlink: 'syz.0.4209': attribute type 1 has an invalid length. [ 325.683760][T17692] bond39: entered promiscuous mode [ 325.685723][T17692] bond39: entered allmulticast mode [ 325.694431][ T9174] usb 10-1: USB disconnect, device number 24 [ 325.730766][T17692] bond39: (slave ip6gretap23): making interface the new active one [ 325.734337][T17692] ip6gretap23: entered promiscuous mode [ 325.736715][T17692] ip6gretap23: entered allmulticast mode [ 325.748470][T17692] bond39: (slave ip6gretap23): Enslaving as an active interface with an up link [ 326.338176][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.787851][T17730] netlink: 'syz.2.4224': attribute type 1 has an invalid length. [ 326.806637][T17730] bond29: entered promiscuous mode [ 326.808932][T17730] bond29: entered allmulticast mode [ 326.821146][T17730] bond29: (slave ip6gretap10): making interface the new active one [ 326.824499][T17730] ip6gretap10: entered promiscuous mode [ 326.826804][T17730] ip6gretap10: entered allmulticast mode [ 326.830536][T17730] bond29: (slave ip6gretap10): Enslaving as an active interface with an up link [ 327.063057][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 327.069903][T17750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.091219][T17750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.122333][T17750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.378552][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.533834][T17752] netlink: 'syz.0.4234': attribute type 1 has an invalid length. [ 327.554685][T17752] bond40: entered promiscuous mode [ 327.557086][T17752] bond40: entered allmulticast mode [ 327.574778][T17752] bond40: (slave ip6gretap24): making interface the new active one [ 327.578372][T17752] ip6gretap24: entered promiscuous mode [ 327.580837][T17752] ip6gretap24: entered allmulticast mode [ 327.584147][T17752] bond40: (slave ip6gretap24): Enslaving as an active interface with an up link [ 327.678650][T17759] netlink: 'syz.4.4243': attribute type 1 has an invalid length. [ 327.697804][T17759] bond29: entered promiscuous mode [ 327.703495][T17759] bond29: entered allmulticast mode [ 327.720913][T17759] bond29: (slave ip6gretap13): making interface the new active one [ 327.724682][T17759] ip6gretap13: entered promiscuous mode [ 327.730182][T17759] ip6gretap13: entered allmulticast mode [ 327.734035][T17759] bond29: (slave ip6gretap13): Enslaving as an active interface with an up link [ 328.418217][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.458199][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.498145][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.538279][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.578069][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.618108][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.658084][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.698052][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.748055][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.778290][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.818037][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.858072][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.898102][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.707854][T17766] overlayfs: failed to clone upperpath [ 341.836055][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.847210][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.854162][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.862607][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.866153][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.900190][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.904530][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4244'. [ 341.904770][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.916339][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.922299][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.925440][T17789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.929798][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.938166][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.016845][T17783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.032223][T17783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.155404][T17775] chnl_net:caif_netlink_parms(): no params data found [ 342.225683][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.228332][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.231090][T17775] bridge_slave_0: entered allmulticast mode [ 342.234152][T17775] bridge_slave_0: entered promiscuous mode [ 342.238900][T17775] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.241684][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.244510][T17775] bridge_slave_1: entered allmulticast mode [ 342.247875][T17775] bridge_slave_1: entered promiscuous mode [ 342.268868][T17775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.274541][T17775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.298319][T17775] team0: Port device team_slave_0 added [ 342.330859][T17775] team0: Port device team_slave_1 added [ 342.348853][T17775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.351137][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.360599][T17775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.366081][T17775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.368535][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.377864][T17775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.406967][T17775] hsr_slave_0: entered promiscuous mode [ 342.410185][T17775] hsr_slave_1: entered promiscuous mode [ 342.412735][T17775] debugfs: 'hsr0' already exists in 'hsr' [ 342.414644][T17775] Cannot create hsr debugfs directory [ 342.509504][ T72] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.513661][ T72] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.517468][ T72] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.598882][T17775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.607327][T17775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.621898][ T72] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.625982][ T72] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.630129][ T72] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.644526][T17775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.651938][T17775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.674476][T17775] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.677072][T17775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.679776][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.682258][T17775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.705213][ T72] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.709486][ T72] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.713430][ T72] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.751848][T17775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.764086][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.770191][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.782365][T17775] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.787539][ T72] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.791416][ T72] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.795144][ T72] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.812122][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.815384][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.825503][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.828741][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.976296][ T72] vlan2: left promiscuous mode [ 342.978852][ T72] veth1: left promiscuous mode [ 342.982907][ T72] bridge1: port 2(vlan2) entered disabled state [ 342.988086][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.992294][ T72] veth3: left allmulticast mode [ 343.000249][ T72] veth3: left promiscuous mode [ 343.002826][ T72] bridge1: port 1(veth3) entered disabled state [ 343.111162][ T72] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 343.134236][ T72] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 343.161067][ T72] bond5 (unregistering): (slave ip6gretap3): Releasing backup interface [ 343.181120][ T72] bond6 (unregistering): (slave ip6gretap4): Releasing backup interface [ 343.197868][ T72] bond7 (unregistering): (slave ip6gretap5): Releasing backup interface [ 343.243764][ T72] bond17 (unregistering): (slave ip6gretap9): Releasing active interface [ 343.247413][ T72] ip6gretap9 (unregistering): left promiscuous mode [ 343.253921][ T72] ip6gretap9 (unregistering): left allmulticast mode [ 343.271629][ T72] bond18 (unregistering): (slave ip6gretap10): Releasing active interface [ 343.275113][ T72] ip6gretap10 (unregistering): left promiscuous mode [ 343.278309][ T72] ip6gretap10 (unregistering): left allmulticast mode [ 343.293937][ T72] bond20 (unregistering): (slave ip6gretap11): Releasing active interface [ 343.297588][ T72] ip6gretap11 (unregistering): left promiscuous mode [ 343.300711][ T72] ip6gretap11 (unregistering): left allmulticast mode [ 343.316578][ T72] bond21 (unregistering): (slave ip6gretap12): Releasing active interface [ 343.320311][ T72] ip6gretap12 (unregistering): left promiscuous mode [ 343.323052][ T72] ip6gretap12 (unregistering): left allmulticast mode [ 343.340367][ T72] bond22 (unregistering): (slave ip6gretap13): Releasing active interface [ 343.343845][ T72] ip6gretap13 (unregistering): left promiscuous mode [ 343.346627][ T72] ip6gretap13 (unregistering): left allmulticast mode [ 343.409331][ T72] bond19 (unregistering): (slave geneve2): Releasing active interface [ 343.495710][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.505549][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.510794][ T72] bond0 (unregistering): Released all slaves [ 343.518097][ T72] bond1 (unregistering): Released all slaves [ 343.527487][ T72] bond2 (unregistering): Released all slaves [ 343.536099][ T72] bond3 (unregistering): Released all slaves [ 343.545998][ T72] bond4 (unregistering): Released all slaves [ 343.555696][ T72] bond5 (unregistering): Released all slaves [ 343.563313][ T72] bond6 (unregistering): Released all slaves [ 343.572325][ T72] bond7 (unregistering): Released all slaves [ 343.585998][ T72] bond8 (unregistering): Released all slaves [ 343.596144][ T72] bond9 (unregistering): Released all slaves [ 343.604931][ T72] bond10 (unregistering): Released all slaves [ 343.614099][ T72] bond11 (unregistering): Released all slaves [ 343.624772][ T72] bond12 (unregistering): Released all slaves [ 343.651672][ T72] bond13 (unregistering): Released all slaves [ 343.662663][ T72] bond14 (unregistering): Released all slaves [ 343.673818][ T72] bond15 (unregistering): Released all slaves [ 343.685076][ T72] bond16 (unregistering): Released all slaves [ 343.695717][ T72] bond17 (unregistering): Released all slaves [ 343.711464][ T72] bond18 (unregistering): Released all slaves [ 343.722250][ T72] bond19 (unregistering): Released all slaves [ 343.739427][ T72] bond20 (unregistering): Released all slaves [ 343.750190][ T72] bond21 (unregistering): Released all slaves [ 343.760861][ T72] bond22 (unregistering): Released all slaves [ 343.815972][T17775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.018049][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.019558][ T5943] Bluetooth: hci4: command tx timeout [ 344.033794][ T72] tipc: Left network mode [ 344.105967][T17775] veth0_vlan: entered promiscuous mode [ 344.114451][T17775] veth1_vlan: entered promiscuous mode [ 344.145636][T17775] veth0_macvtap: entered promiscuous mode [ 344.163952][T17775] veth1_macvtap: entered promiscuous mode [ 344.179150][T17775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.187369][T17775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.198612][ T1171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.202923][ T1171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.210428][ T1171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.213809][ T1171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.307070][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.320389][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.362003][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.365127][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.411956][ T40] audit: type=1400 audit(2000000045.049:565): avc: denied { mounton } for pid=17775 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 344.527213][T17844] netlink: 'syz.0.4258': attribute type 1 has an invalid length. [ 344.548942][T17844] bond41: entered promiscuous mode [ 344.551074][T17844] bond41: entered allmulticast mode [ 344.581797][T17847] "syz.4.4260" (17847) uses obsolete ecb(arc4) skcipher [ 344.583776][T17844] bond41: (slave ip6gretap25): making interface the new active one [ 344.589629][T17844] ip6gretap25: entered promiscuous mode [ 344.592178][T17844] ip6gretap25: entered allmulticast mode [ 344.595305][T17844] bond41: (slave ip6gretap25): Enslaving as an active interface with an up link [ 344.613672][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4258'. [ 344.735986][ T72] hsr_slave_0: left promiscuous mode [ 344.739576][ T72] hsr_slave_1: left promiscuous mode [ 344.742383][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.745269][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.752854][ T72] veth1_macvtap: left promiscuous mode [ 344.755087][ T72] veth0_macvtap: left promiscuous mode [ 344.757423][ T72] veth1_vlan: left promiscuous mode [ 344.759604][ T72] veth0_vlan: left promiscuous mode [ 345.068162][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.554352][ T72] IPVS: stop unused estimator thread 0... [ 346.098076][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.108154][ T5943] Bluetooth: hci4: command tx timeout [ 346.577588][T17874] overlayfs: failed to clone upperpath [ 346.642053][T17882] overlayfs: failed to clone upperpath [ 347.137997][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.203851][T17922] overlayfs: failed to clone upperpath [ 347.526085][ T5943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 347.532705][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: kworker/u33:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.532737][ T5943] Tainted: [L]=SOFTLOCKUP [ 347.532743][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.532755][ T5943] Workqueue: hci4 hci_rx_work [ 347.532814][ T5943] Call Trace: [ 347.532821][ T5943] [ 347.532829][ T5943] dump_stack_lvl+0x100/0x190 [ 347.532860][ T5943] sysfs_warn_dup.cold+0x1c/0x28 [ 347.532885][ T5943] sysfs_create_dir_ns+0x24b/0x2b0 [ 347.532908][ T5943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 347.532927][ T5943] ? find_held_lock+0x2b/0x80 [ 347.532947][ T5943] ? kobject_add_internal+0x25f/0x930 [ 347.532971][ T5943] ? kobject_add_internal+0x25f/0x930 [ 347.532999][ T5943] ? do_raw_spin_unlock+0x145/0x1e0 [ 347.533022][ T5943] kobject_add_internal+0x2c8/0x930 [ 347.533048][ T5943] kobject_add+0x16a/0x1e0 [ 347.533073][ T5943] ? __pfx_kobject_add+0x10/0x10 [ 347.533097][ T5943] ? class_to_subsys+0x10f/0x150 [ 347.533141][ T5943] ? kobject_put+0xb9/0x640 [ 347.533164][ T5943] ? _raw_spin_unlock+0x28/0x50 [ 347.533191][ T5943] device_add+0x294/0x1950 [ 347.533209][ T5943] ? __pfx_dev_set_name+0x10/0x10 [ 347.533230][ T5943] ? __pfx_device_add+0x10/0x10 [ 347.533248][ T5943] ? mgmt_send_event_skb+0x2fb/0x460 [ 347.533274][ T5943] hci_conn_add_sysfs+0x1a3/0x260 [ 347.533298][ T5943] le_conn_complete_evt+0x11cb/0x1f40 [ 347.533325][ T5943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 347.533353][ T5943] hci_le_conn_complete_evt+0x23c/0x3a0 [ 347.533374][ T5943] ? skb_pull_data+0x15f/0x1e0 [ 347.533401][ T5943] hci_le_meta_evt+0x34a/0x5f0 [ 347.533424][ T5943] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 347.533448][ T5943] hci_event_packet+0x682/0x11c0 [ 347.533478][ T5943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 347.533500][ T5943] ? __pfx_hci_event_packet+0x10/0x10 [ 347.533523][ T5943] ? kcov_remote_start+0x374/0x660 [ 347.533546][ T5943] ? lockdep_hardirqs_on+0x78/0x100 [ 347.533573][ T5943] hci_rx_work+0x451/0xfc0 [ 347.533615][ T5943] process_one_work+0x9d7/0x1920 [ 347.533646][ T5943] ? __pfx_process_one_work+0x10/0x10 [ 347.533672][ T5943] ? __pfx_hci_rx_work+0x10/0x10 [ 347.533694][ T5943] worker_thread+0x5da/0xe40 [ 347.533722][ T5943] ? kthread+0x13a/0x450 [ 347.533738][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 347.533755][ T5943] kthread+0x370/0x450 [ 347.533770][ T5943] ? __pfx_kthread+0x10/0x10 [ 347.533788][ T5943] ret_from_fork+0x754/0xd80 [ 347.533807][ T5943] ? __pfx_ret_from_fork+0x10/0x10 [ 347.533828][ T5943] ? __switch_to+0x7b4/0x1120 [ 347.533849][ T5943] ? __pfx_kthread+0x10/0x10 [ 347.533866][ T5943] ret_from_fork_asm+0x1a/0x30 [ 347.533900][ T5943] [ 347.533930][ T5943] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 347.665959][ T5943] Bluetooth: hci4: failed to register connection device [ 348.031972][T17993] overlayfs: failed to clone upperpath [ 348.035570][T17992] netlink: 'syz.0.4305': attribute type 1 has an invalid length. [ 348.060626][T17992] bond42: entered promiscuous mode [ 348.063103][T17992] bond42: entered allmulticast mode [ 348.080017][T17992] bond42: (slave ip6gretap26): making interface the new active one [ 348.084016][T17992] ip6gretap26: entered promiscuous mode [ 348.086976][T17992] ip6gretap26: entered allmulticast mode [ 348.091234][T17992] bond42: (slave ip6gretap26): Enslaving as an active interface with an up link [ 348.099608][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4305'. [ 348.178083][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.179182][ T5943] Bluetooth: hci4: command tx timeout [ 348.913708][ T40] audit: type=1400 audit(2000000049.549:566): avc: denied { set_context_mgr } for pid=18018 comm="syz.6.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 348.982719][T18027] netlink: 'syz.4.4318': attribute type 1 has an invalid length. [ 349.040319][T18027] bond30: entered promiscuous mode [ 349.042530][T18027] bond30: entered allmulticast mode [ 349.065162][T18027] bond30: (slave ip6gretap14): making interface the new active one [ 349.068728][T18027] ip6gretap14: entered promiscuous mode [ 349.071219][T18027] ip6gretap14: entered allmulticast mode [ 349.074484][T18027] bond30: (slave ip6gretap14): Enslaving as an active interface with an up link [ 349.087775][T18027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4318'. [ 349.228279][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.270286][T18064] cgroup: No subsys list or none specified [ 349.344967][T18070] netlink: 'syz.6.4334': attribute type 1 has an invalid length. [ 349.415904][T18073] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4334'. [ 349.496582][T18077] overlayfs: failed to verify upper (13/file1, ino=91, err=-116) [ 349.504339][T18077] overlayfs: failed to verify index dir 'upper' xattr [ 349.507371][T18077] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 349.529552][ T40] audit: type=1400 audit(2000000050.169:567): avc: denied { create } for pid=18078 comm="syz.2.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 349.540301][T18079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4337'. [ 349.548076][ T40] audit: type=1400 audit(2000000050.179:568): avc: denied { write } for pid=18078 comm="syz.2.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 349.782979][T18093] geneve2: entered promiscuous mode [ 349.786549][ T1206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.804458][ T1206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.808803][ T1206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.813010][ T1206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.923297][T18100] netlink: 'syz.2.4346': attribute type 1 has an invalid length. [ 349.955584][T18100] bond30: entered promiscuous mode [ 349.957715][T18100] bond30: entered allmulticast mode [ 349.981981][T18100] bond30: (slave ip6gretap11): making interface the new active one [ 349.985662][T18100] ip6gretap11: entered promiscuous mode [ 349.988856][T18100] ip6gretap11: entered allmulticast mode [ 349.991960][T18100] bond30: (slave ip6gretap11): Enslaving as an active interface with an up link [ 349.999378][T18100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4346'. [ 350.190677][T18117] syzkaller1: entered promiscuous mode [ 350.193099][T18117] syzkaller1: entered allmulticast mode [ 350.258080][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.268004][ T5943] Bluetooth: hci4: command tx timeout [ 350.583609][T18133] overlayfs: failed to clone upperpath [ 350.712333][T18135] netlink: 'syz.4.4357': attribute type 1 has an invalid length. [ 350.755775][T18135] bond31: entered promiscuous mode [ 350.764051][T18135] bond31: entered allmulticast mode [ 350.788562][T18135] bond31: (slave ip6gretap15): making interface the new active one [ 350.794806][T18135] ip6gretap15: entered promiscuous mode [ 350.800300][T18135] ip6gretap15: entered allmulticast mode [ 350.807072][T18135] bond31: (slave ip6gretap15): Enslaving as an active interface with an up link [ 350.824684][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4357'. [ 351.297991][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.348031][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.378033][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.422435][T18125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.602185][T18168] netlink: 'syz.2.4367': attribute type 1 has an invalid length. [ 353.602491][ T40] audit: type=1400 audit(2000000054.239:569): avc: denied { read } for pid=18162 comm="syz.6.4370" path="socket:[64954]" dev="sockfs" ino=64954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 353.631159][T18174] overlayfs: failed to clone upperpath [ 353.642583][T18174] overlayfs: failed to clone upperpath [ 353.646902][T18168] bond31: entered promiscuous mode [ 353.650030][T18168] bond31: entered allmulticast mode [ 353.655438][T18169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4366'. [ 353.669620][T18176] bond31: (slave ip6gretap12): making interface the new active one [ 353.673103][T18176] ip6gretap12: entered promiscuous mode [ 353.675693][T18176] ip6gretap12: entered allmulticast mode [ 353.689779][T18176] bond31: (slave ip6gretap12): Enslaving as an active interface with an up link [ 353.706879][T18168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4367'. [ 353.774499][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4374'. [ 353.776147][T18185] bridge6: entered allmulticast mode [ 353.784573][ T5948] Bluetooth: hci4: command 0x0406 tx timeout [ 353.795879][T18182] bridge6: left allmulticast mode [ 353.801817][T18186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.811011][T18186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.817008][T18186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.388889][T18205] netlink: 'syz.2.4380': attribute type 1 has an invalid length. [ 354.398123][T18202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4379'. [ 354.409871][T18205] bond32: entered promiscuous mode [ 354.412081][T18205] bond32: entered allmulticast mode [ 354.420976][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.423824][T18209] overlayfs: failed to clone upperpath [ 354.445910][T18205] bond32: (slave ip6gretap13): making interface the new active one [ 354.450078][T18205] ip6gretap13: entered promiscuous mode [ 354.452919][T18205] ip6gretap13: entered allmulticast mode [ 354.458240][T18205] bond32: (slave ip6gretap13): Enslaving as an active interface with an up link [ 354.470732][T18209] overlayfs: failed to clone upperpath [ 354.471917][T18205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4380'. [ 354.481650][T18205] bond32: left promiscuous mode [ 354.483766][T18205] ip6gretap13: left promiscuous mode [ 354.486330][T18205] bond32: left allmulticast mode [ 354.489319][T18205] ip6gretap13: left allmulticast mode [ 354.493008][T18205] 8021q: adding VLAN 0 to HW filter on device bond32 [ 354.629831][T18223] veth7: entered allmulticast mode [ 354.640528][T18222] veth7: left allmulticast mode [ 354.702492][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4390'. [ 354.712368][T18227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.764978][T18227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.771712][T18227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.810746][T18232] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 354.892858][T18238] netlink: 'syz.2.4397': attribute type 1 has an invalid length. [ 354.918730][T18238] bond33: entered promiscuous mode [ 354.921002][T18238] bond33: entered allmulticast mode [ 354.936832][T18238] bond33: (slave ip6gretap14): making interface the new active one [ 354.940642][T18238] ip6gretap14: entered promiscuous mode [ 354.943222][T18238] ip6gretap14: entered allmulticast mode [ 354.946629][T18238] bond33: (slave ip6gretap14): Enslaving as an active interface with an up link [ 354.963440][T18238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4397'. [ 354.968960][T18238] bond33: left promiscuous mode [ 354.971178][T18238] ip6gretap14: left promiscuous mode [ 354.973760][T18238] bond33: left allmulticast mode [ 354.975914][T18238] ip6gretap14: left allmulticast mode [ 354.979392][T18238] 8021q: adding VLAN 0 to HW filter on device bond33 [ 355.140537][ T9174] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 355.298116][ T9174] usb 11-1: Using ep0 maxpacket: 8 [ 355.305349][ T9174] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 355.326680][ T9174] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.331885][ T9174] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.337377][ T9174] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.345335][ T9174] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.357484][ T9174] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.364055][ T9174] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.460403][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.594757][ T9174] usb 11-1: GET_CAPABILITIES returned 0 [ 355.597659][ T9174] usbtmc 11-1:16.0: can't read capabilities [ 355.800236][ T29] usb 11-1: USB disconnect, device number 2 [ 356.413002][T18284] binder: 18282:18284 ioctl c0306201 200000000480 returned -14 [ 356.482871][ T40] audit: type=1800 audit(2000000057.119:570): pid=18287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4414" name="nullb0" dev="tmpfs" ino=3154 res=0 errno=0 [ 356.498004][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.502012][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4415'. [ 356.509466][T18289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.531501][T18289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.537303][T18289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.559959][T18297] overlayfs: failed to clone upperpath [ 356.580804][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 356.588462][T18299] Bluetooth: hci1: Frame reassembly failed (-84) [ 356.635921][T18303] overlayfs: failed to clone upperpath [ 357.222605][ T40] audit: type=1800 audit(2000000057.859:571): pid=18333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4431" name="nullb0" dev="tmpfs" ino=2935 res=0 errno=0 [ 357.327395][T18338] overlayfs: failed to clone upperpath [ 357.538538][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.977569][T18354] netlink: 'syz.0.4437': attribute type 1 has an invalid length. [ 358.005061][T18354] bond43: entered promiscuous mode [ 358.007682][T18354] bond43: entered allmulticast mode [ 358.025139][T18354] bond43: (slave ip6gretap27): making interface the new active one [ 358.030118][T18354] ip6gretap27: entered promiscuous mode [ 358.032934][T18354] ip6gretap27: entered allmulticast mode [ 358.037576][T18354] bond43: (slave ip6gretap27): Enslaving as an active interface with an up link [ 358.046903][T18354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4437'. [ 358.052178][T18354] bond43: left promiscuous mode [ 358.055151][T18354] ip6gretap27: left promiscuous mode [ 358.058644][T18354] bond43: left allmulticast mode [ 358.061899][T18354] ip6gretap27: left allmulticast mode [ 358.064735][T18354] 8021q: adding VLAN 0 to HW filter on device bond43 [ 358.578536][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.589386][ T5943] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 358.688382][ T40] audit: type=1800 audit(2000000059.329:572): pid=18374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4442" name="nullb0" dev="tmpfs" ino=2505 res=0 errno=0 [ 358.706627][T18380] evm: overlay not supported [ 358.824297][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 358.833744][T18391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.844602][T18391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.851377][T18391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.170315][ T40] audit: type=1400 audit(2000000059.809:573): avc: denied { unmount } for pid=17775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 359.440160][ T40] audit: type=1400 audit(2000000060.079:574): avc: denied { name_bind } for pid=18412 comm="syz.4.4462" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 359.522361][ T223] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.594774][ T223] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.618232][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.713953][ T223] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.750760][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.758017][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.764284][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.770281][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.788163][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.830097][ T223] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.092093][T18421] chnl_net:caif_netlink_parms(): no params data found [ 360.111986][ T223] bridge_slave_1: left allmulticast mode [ 360.114741][ T223] bridge_slave_1: left promiscuous mode [ 360.124166][ T223] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.130396][ T223] bridge_slave_0: left allmulticast mode [ 360.132974][ T223] bridge_slave_0: left promiscuous mode [ 360.135798][ T223] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.375022][ T223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.383307][ T223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.389203][ T223] bond0 (unregistering): Released all slaves [ 360.477131][T18421] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.480592][T18421] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.484064][T18421] bridge_slave_0: entered allmulticast mode [ 360.492202][T18421] bridge_slave_0: entered promiscuous mode [ 360.497351][T18421] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.501743][T18421] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.504998][T18421] bridge_slave_1: entered allmulticast mode [ 360.509435][T18421] bridge_slave_1: entered promiscuous mode [ 360.537490][T18421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.595466][T18421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.623412][T18421] team0: Port device team_slave_0 added [ 360.630075][T18421] team0: Port device team_slave_1 added [ 360.668378][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.692177][T18421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.695194][T18421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.706793][T18421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.714105][T18421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.717172][T18421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.728946][T18421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.774087][T18421] hsr_slave_0: entered promiscuous mode [ 360.777641][T18421] hsr_slave_1: entered promiscuous mode [ 360.806447][ T223] hsr_slave_0: left promiscuous mode [ 360.813900][ T223] hsr_slave_1: left promiscuous mode [ 360.817130][ T223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.820817][ T223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.824715][ T223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.828072][ T223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.837252][ T223] veth1_macvtap: left promiscuous mode [ 360.841415][ T223] veth0_macvtap: left promiscuous mode [ 360.843800][ T223] veth1_vlan: left promiscuous mode [ 360.846269][ T223] veth0_vlan: left promiscuous mode [ 361.073157][ T223] team0 (unregistering): Port device team_slave_1 removed [ 361.083563][ T223] team0 (unregistering): Port device team_slave_0 removed [ 361.390265][T18421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 361.396381][T18421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 361.403252][T18421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 361.409619][T18421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 361.501362][T18421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.514123][T18421] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.523784][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.526709][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.536137][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.539202][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.698197][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.739109][T18421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.858691][ T5948] Bluetooth: hci1: command tx timeout [ 361.940747][T18421] veth0_vlan: entered promiscuous mode [ 361.949082][T18421] veth1_vlan: entered promiscuous mode [ 361.976847][T18421] veth0_macvtap: entered promiscuous mode [ 361.983624][T18421] veth1_macvtap: entered promiscuous mode [ 361.999224][T18421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.009990][T18421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.019545][ T61] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.024136][ T61] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.028367][ T61] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.034910][ T61] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.077477][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.081123][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.103586][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.107071][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.189755][ T40] audit: type=1400 audit(2000000062.819:575): avc: denied { name_bind } for pid=18491 comm="syz.0.4482" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 362.590984][T18526] overlayfs: failed to clone lowerpath [ 362.738182][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.992029][T18551] netlink: 'syz.7.4496': attribute type 1 has an invalid length. [ 363.013251][T18551] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 363.021470][T18551] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4496'. [ 363.322786][T18582] netlink: 'syz.2.4510': attribute type 1 has an invalid length. [ 363.342602][T18582] bond34: entered promiscuous mode [ 363.344970][T18582] bond34: entered allmulticast mode [ 363.362096][T18582] bond34: (slave ip6gretap15): making interface the new active one [ 363.365712][T18582] ip6gretap15: entered promiscuous mode [ 363.368564][T18582] ip6gretap15: entered allmulticast mode [ 363.372186][T18582] bond34: (slave ip6gretap15): Enslaving as an active interface with an up link [ 363.379935][T18582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4510'. [ 363.384756][T18582] bond34: left promiscuous mode [ 363.387464][T18582] ip6gretap15: left promiscuous mode [ 363.392862][T18582] bond34: left allmulticast mode [ 363.395056][T18582] ip6gretap15: left allmulticast mode [ 363.398642][T18582] 8021q: adding VLAN 0 to HW filter on device bond34 [ 363.778229][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.948344][ T5948] Bluetooth: hci1: command tx timeout [ 364.828125][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.320636][ T40] audit: type=1400 audit(2000000065.959:576): avc: denied { map } for pid=18627 comm="syz.7.4527" path="/9/file0/cgroup.kill" dev="9p" ino=72613983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.342263][T18630] netfs: Couldn't get user pages (rc=-14) [ 365.868106][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.874139][ T1206] nci: nci_rx_work: unknown MT 0x4 [ 366.018254][ T5948] Bluetooth: hci1: command tx timeout [ 366.898531][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.948020][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.109420][ T5948] Bluetooth: hci1: command tx timeout [ 368.801542][T18663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.858254][T18735] ªªªªªª5gæ¹Q[Ô: renamed from lo [ 368.980360][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.034896][ C3] Unknown status report in ack skb [ 369.348316][ T24] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 369.499901][ T24] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.505064][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.510511][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 369.514657][ T24] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.520616][ T24] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.524587][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.542818][ T24] usb 12-1: config 0 descriptor?? [ 369.978414][ T24] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 370.018249][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.837280][ T24] usb 12-1: USB disconnect, device number 2 [ 371.058209][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.417672][T18792] netlink: 'syz.2.4587': attribute type 1 has an invalid length. [ 371.431472][T18792] bond35: entered promiscuous mode [ 371.433753][T18792] bond35: entered allmulticast mode [ 371.454716][T18792] bond35: (slave ip6gretap16): making interface the new active one [ 371.459528][T18792] ip6gretap16: entered promiscuous mode [ 371.462108][T18792] ip6gretap16: entered allmulticast mode [ 371.465553][T18792] bond35: (slave ip6gretap16): Enslaving as an active interface with an up link [ 371.473987][T18792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4587'. [ 371.479025][T18792] bond35: left promiscuous mode [ 371.481130][T18792] ip6gretap16: left promiscuous mode [ 371.483619][T18792] bond35: left allmulticast mode [ 371.485844][T18792] ip6gretap16: left allmulticast mode [ 371.488681][T18792] 8021q: adding VLAN 0 to HW filter on device bond35 [ 371.791983][T18825] netlink: 'syz.4.4604': attribute type 1 has an invalid length. [ 371.811061][T18825] bond32: entered promiscuous mode [ 371.813474][T18825] bond32: entered allmulticast mode [ 371.830160][T18825] bond32: (slave ip6gretap16): making interface the new active one [ 371.833641][T18825] ip6gretap16: entered promiscuous mode [ 371.836228][T18825] ip6gretap16: entered allmulticast mode [ 371.841139][T18825] bond32: (slave ip6gretap16): Enslaving as an active interface with an up link [ 371.849482][T18825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4604'. [ 371.854238][T18825] bond32: left promiscuous mode [ 371.856416][T18825] ip6gretap16: left promiscuous mode [ 371.858950][T18825] bond32: left allmulticast mode [ 371.861592][T18825] ip6gretap16: left allmulticast mode [ 371.865387][T18825] 8021q: adding VLAN 0 to HW filter on device bond32 [ 372.098081][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.525794][T18859] netlink: 'syz.2.4616': attribute type 1 has an invalid length. [ 372.546031][T18859] bond36: entered promiscuous mode [ 372.551224][T18859] bond36: entered allmulticast mode [ 372.566175][T18859] bond36: (slave ip6gretap17): making interface the new active one [ 372.570946][T18859] ip6gretap17: entered promiscuous mode [ 372.573513][T18859] ip6gretap17: entered allmulticast mode [ 372.576883][T18859] bond36: (slave ip6gretap17): Enslaving as an active interface with an up link [ 372.591175][T18859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4616'. [ 372.595861][T18859] bond36: left promiscuous mode [ 372.598218][T18859] ip6gretap17: left promiscuous mode [ 372.600634][T18859] bond36: left allmulticast mode [ 372.602757][T18859] ip6gretap17: left allmulticast mode [ 372.606192][T18859] 8021q: adding VLAN 0 to HW filter on device bond36 [ 373.148026][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.188125][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.585910][T18898] netlink: 'syz.4.4626': attribute type 4 has an invalid length. [ 375.218380][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.258037][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.308051][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.575668][T18899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.338285][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.388018][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.418007][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.220551][T18979] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 381.346930][ T40] audit: type=1400 audit(2000000081.979:577): avc: denied { execute } for pid=18984 comm="syz.2.4668" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=68237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 381.458241][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.290686][T19019] overlayfs: failed to clone upperpath [ 382.498013][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.635761][T19033] netlink: 'syz.2.4680': attribute type 1 has an invalid length. [ 382.658578][T19033] bond37: entered promiscuous mode [ 382.661128][T19033] bond37: entered allmulticast mode [ 382.674541][T19033] bond37: (slave ip6gretap18): making interface the new active one [ 382.677431][T19033] ip6gretap18: entered promiscuous mode [ 382.679724][T19033] ip6gretap18: entered allmulticast mode [ 382.682962][T19033] bond37: (slave ip6gretap18): Enslaving as an active interface with an up link [ 382.691447][T19033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4680'. [ 382.696326][T19033] bond37: left promiscuous mode [ 382.698997][T19033] ip6gretap18: left promiscuous mode [ 382.701451][T19033] bond37: left allmulticast mode [ 382.703613][T19033] ip6gretap18: left allmulticast mode [ 382.706369][T19033] 8021q: adding VLAN 0 to HW filter on device bond37 [ 382.914032][T19046] vlan2: entered allmulticast mode [ 382.916286][T19046] macsec0: entered allmulticast mode [ 382.920299][T19046] veth1_macvtap: entered allmulticast mode [ 382.936677][T19049] overlayfs: failed to clone upperpath [ 383.148503][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4690'. [ 383.154758][T19057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.208646][T19057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.214785][T19057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.538000][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.137316][T19087] vlan0: entered allmulticast mode [ 384.140532][T19085] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 384.150831][T19087] macsec0: entered allmulticast mode [ 384.163501][ T40] audit: type=1400 audit(2000000084.799:578): avc: denied { read } for pid=19084 comm="syz.7.4697" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 384.182416][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.182438][ T40] audit: type=1400 audit(2000000084.819:579): avc: denied { append } for pid=19084 comm="syz.7.4697" name="file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 384.185217][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.578088][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.606323][ C3] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 384.706012][T19116] vlan0: entered allmulticast mode [ 384.708233][T19116] macsec0: entered allmulticast mode [ 384.710295][T19116] veth1_macvtap: entered allmulticast mode [ 385.233651][T19134] overlayfs: failed to clone upperpath [ 385.602535][T19154] netlink: 'syz.7.4729': attribute type 1 has an invalid length. [ 385.630559][T19154] bond1: entered promiscuous mode [ 385.631869][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.633297][T19154] bond1: entered allmulticast mode [ 385.656824][T19154] bond1: (slave ip6gretap2): making interface the new active one [ 385.660511][T19154] ip6gretap2: entered promiscuous mode [ 385.663171][T19154] ip6gretap2: entered allmulticast mode [ 385.666483][T19154] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 385.674638][T19154] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4729'. [ 385.679633][T19154] bond1: left promiscuous mode [ 385.682122][T19154] ip6gretap2: left promiscuous mode [ 385.685182][T19154] bond1: left allmulticast mode [ 385.687712][T19154] ip6gretap2: left allmulticast mode [ 385.692443][T19154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.856387][ T40] audit: type=1400 audit(2000000086.489:580): avc: denied { append } for pid=19160 comm="syz.7.4732" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 386.668371][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.742578][T19174] overlayfs: failed to clone upperpath [ 386.906317][T19182] netlink: 'syz.0.4740': attribute type 1 has an invalid length. [ 387.021685][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4740'. [ 387.704624][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.922997][T19209] overlayfs: failed to clone upperpath [ 388.403649][T19182] workqueue: Failed to create a rescuer kthread for wq "bond44": -EINTR [ 388.410935][T19184] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap28 [ 388.465523][T19220] overlayfs: failed to clone upperpath [ 388.523023][T19224] overlayfs: failed to clone upperpath [ 388.738116][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.786593][T19242] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 388.817192][ T40] audit: type=1400 audit(2000000089.449:581): avc: denied { read } for pid=19249 comm="syz.4.4771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 388.827661][ T40] audit: type=1400 audit(2000000089.469:582): avc: denied { read } for pid=19256 comm="syz.0.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 389.043276][T19276] netlink: 'syz.0.4782': attribute type 10 has an invalid length. [ 389.172215][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4786'. [ 389.316636][T19295] veth0_vlan: left promiscuous mode [ 389.322422][T19295] veth0_vlan: entered promiscuous mode [ 389.663483][T19315] overlayfs: failed to clone upperpath [ 389.788250][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.796146][ T40] audit: type=1400 audit(2000000090.429:583): avc: denied { write } for pid=19323 comm="syz.7.4802" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 389.882306][T19335] netlink: 'syz.7.4805': attribute type 3 has an invalid length. [ 389.948118][T19339] xt_hashlimit: size too large, truncated to 1048576 [ 390.120755][T19350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.171613][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4814'. [ 390.180929][T19357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.191933][T19357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.197403][T19357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.198037][T19359] overlayfs: failed to clone upperpath [ 390.828039][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.948382][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4836'. [ 390.954709][T19406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.963606][T19406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.969653][T19406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.075944][T19418] overlayfs: failed to clone upperpath [ 391.166126][T19426] overlayfs: failed to clone upperpath [ 391.175739][T19426] overlayfs: failed to clone upperpath [ 391.523145][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4860'. [ 391.537711][T19448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.546210][T19448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.552231][T19448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.858478][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.865010][T19471] overlayfs: failed to clone upperpath [ 392.246057][T19496] overlayfs: failed to clone upperpath [ 392.899063][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.332221][T19571] gtp0: entered promiscuous mode [ 393.335587][T19574] overlayfs: failed to clone upperpath [ 393.450659][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4914'. [ 393.457242][T19583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.467464][T19583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.475659][T19583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.938156][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.271263][T19638] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4939'. [ 394.337713][T19646] overlayfs: failed to clone upperpath [ 394.423144][T19654] overlayfs: failed to clone upperpath [ 394.975670][ T5943] Bluetooth: hci4: unexpected event 0x09 length: 0 < 3 [ 394.978227][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.075676][ T40] audit: type=1400 audit(2000000095.709:584): avc: denied { mount } for pid=19690 comm="syz.0.4959" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 395.091729][T19691] overlayfs: failed to clone lowerpath [ 395.321865][ T40] audit: type=1400 audit(2000000095.959:585): avc: denied { remount } for pid=19698 comm="syz.0.4964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 395.968181][T19717] netlink: 'syz.0.4970': attribute type 1 has an invalid length. [ 395.989335][T19717] 8021q: adding VLAN 0 to HW filter on device bond44 [ 396.010266][T19717] bond44: (slave ip6gretap28): making interface the new active one [ 396.014651][T19717] bond44: (slave ip6gretap28): Enslaving as an active interface with an up link [ 396.018982][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.198206][T19734] overlayfs: failed to clone upperpath [ 396.978226][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 396.978855][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 397.058606][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.358167][ T9174] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 397.484765][T19778] overlayfs: failed to clone upperpath [ 397.508047][ T9174] usb 12-1: Using ep0 maxpacket: 8 [ 397.512134][ T9174] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 397.526993][ T9174] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.537315][ T9174] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.545929][ T9174] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.550168][ T9174] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.555705][ T9174] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 397.563610][ T9174] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.004401][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.010577][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.014996][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.019003][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.026330][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.030807][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.034741][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.039327][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.043618][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.048431][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.052223][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.056328][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.060219][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.063962][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.068329][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.071881][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 398.078875][ T9159] usb 12-1: USB disconnect, device number 3 [ 398.098015][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.352295][ T40] audit: type=1400 audit(2000000098.989:586): avc: denied { create } for pid=19810 comm="syz.0.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 398.372011][ T40] audit: type=1400 audit(2000000099.009:587): avc: denied { bind } for pid=19810 comm="syz.0.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 398.388848][ T40] audit: type=1400 audit(2000000099.009:588): avc: denied { setopt } for pid=19810 comm="syz.0.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 398.408132][ T40] audit: type=1400 audit(2000000099.009:589): avc: denied { accept } for pid=19810 comm="syz.0.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 398.419903][ T40] audit: type=1400 audit(2000000099.009:590): avc: denied { write } for pid=19810 comm="syz.0.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 398.428859][ T40] audit: type=1400 audit(2000000099.009:591): avc: denied { read } for pid=19810 comm="syz.0.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 398.811586][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5009'. [ 398.822750][T19822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.883201][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5009'. [ 398.889872][T19817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.895564][T19817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.090314][T19842] syzkaller1: entered promiscuous mode [ 399.099975][T19842] syzkaller1: entered allmulticast mode [ 399.148211][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.208356][ T40] audit: type=1804 audit(2000000099.849:592): pid=19848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.5022" name="file0" dev="tmpfs" ino=7286 res=1 errno=0 [ 399.209214][T19848] ref_ctr increment failed for inode: 0x1c76 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880278c0000 [ 399.248095][T19847] uprobe: syz.0.5022:19847 failed to unregister, leaking uprobe [ 399.307154][T19855] overlayfs: failed to clone upperpath [ 400.019839][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5039'. [ 400.025335][T19892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.036021][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5039'. [ 400.042941][T19892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.051926][T19892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.188054][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.975838][T19937] overlayfs: failed to clone upperpath [ 401.228005][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.251938][ T40] audit: type=1400 audit(2000000101.889:593): avc: denied { watch watch_reads } for pid=19955 comm="syz.4.5063" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 401.322648][T19974] overlayfs: failed to clone upperpath [ 401.553595][T19990] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 1269, magic 12 != 6b] [ 402.258030][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.683151][T20058] overlayfs: failed to clone upperpath [ 402.931335][T20071] overlayfs: failed to clone upperpath [ 402.931520][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5108'. [ 403.031380][ T1143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.035094][ T1143] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.050333][ T1143] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.056288][ T1143] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.103446][ T40] audit: type=1326 audit(2000000103.739:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20080 comm="syz.0.5111" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea44f9bf79 code=0x0 [ 403.172530][T20089] overlayfs: failed to clone upperpath [ 403.307992][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.481804][T20116] overlayfs: failed to clone upperpath [ 403.910932][T20140] binder: 20139:20140 ioctl c0306201 2000000003c0 returned -14 [ 403.916182][ T40] audit: type=1400 audit(2000000104.549:595): avc: denied { call } for pid=20139 comm="syz.7.5132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 403.933619][ T40] audit: type=1400 audit(2000000104.569:596): avc: denied { transfer } for pid=20139 comm="syz.7.5132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 404.347972][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.436853][T20184] overlayfs: failed to clone upperpath [ 404.562774][T20191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5150'. [ 404.570573][T20190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5148'. [ 404.616167][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5150'. [ 404.621702][T20191] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5150'. [ 404.853078][T20208] 9pnet_fd: p9_fd_create_tcp (20208): problem connecting socket to 127.0.0.1 [ 404.948427][T20215] overlayfs: failed to clone upperpath [ 405.373323][T20241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5169'. [ 405.378001][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.415221][T20241] geneve2: entered promiscuous mode [ 405.427011][ T223] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.430625][ T223] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.434189][ T223] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.437750][ T223] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.418165][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.658807][ T5948] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 407.238198][T20347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5204'. [ 407.312097][T20347] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20347 comm=syz.4.5204 [ 407.470344][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.522411][T20371] netlink: 'syz.0.5216': attribute type 12 has an invalid length. [ 407.545605][T20376] overlayfs: failed to clone upperpath [ 407.667107][T20383] batman_adv: batadv0: Adding interface: dummy0 [ 407.669924][T20383] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.680275][T20383] batman_adv: batadv0: Interface activated: dummy0 [ 407.692804][T20383] batadv0: mtu less than device minimum [ 407.696225][T20383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.701483][T20383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.706689][T20383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.711913][T20383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.826202][ T40] audit: type=1400 audit(2000000108.459:597): avc: denied { write } for pid=20401 comm="syz.0.5228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 407.918883][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5229'. [ 407.962355][T20409] fuse: Bad value for 'fd' [ 408.500683][ C3] net_ratelimit: 15 callbacks suppressed [ 408.500702][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.915332][T20442] binder: 20441:20442 ioctl c0306201 2000000003c0 returned -14 [ 409.021760][T20453] netlink: 'syz.4.5247': attribute type 10 has an invalid length. [ 409.144941][T20461] overlayfs: failed to clone upperpath [ 409.466345][T20474] VFS: Mount too revealing [ 409.543609][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5261'. [ 409.548510][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.552956][T20486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.569994][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5261'. [ 409.575348][T20486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.581739][T20486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.721793][T20495] binder: 20494:20495 ioctl c0306201 2000000003c0 returned -14 [ 410.341172][T20520] overlayfs: failed to clone upperpath [ 410.517829][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5279'. [ 410.531231][T20528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.578267][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.588288][T20528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5279'. [ 410.593529][T20528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.602858][T20528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.880312][T20555] netlink: 'syz.4.5287': attribute type 1 has an invalid length. [ 410.900044][T20555] bond33: entered promiscuous mode [ 410.902119][T20555] 8021q: adding VLAN 0 to HW filter on device bond33 [ 411.181471][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5291'. [ 411.581854][T20592] 9pnet_fd: p9_fd_create_tcp (20592): problem connecting socket to 127.0.0.1 [ 411.627995][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.013364][T20619] netlink: 'syz.4.5313': attribute type 10 has an invalid length. [ 412.016781][T20619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5313'. [ 412.021974][T20619] batadv0: entered promiscuous mode [ 412.024205][T20619] batadv0: entered allmulticast mode [ 412.027829][T20619] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 412.160328][T20626] tipc: Enabling of bearer rejected, failed to enable media [ 412.667999][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.883428][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5332'. [ 412.890927][T20690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.919108][T20690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.931183][T20690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.560891][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5348'. [ 413.707987][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.059678][T20790] syz_tun: entered allmulticast mode [ 414.063594][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5362'. [ 414.080823][ T40] audit: type=1400 audit(2000000114.719:598): avc: denied { mounton } for pid=20792 comm="syz.2.5363" path="/1674/file0" dev="tmpfs" ino=8877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 414.090910][ T40] audit: type=1400 audit(2000000114.719:599): avc: denied { read write } for pid=20792 comm="syz.2.5363" name="file0" dev="tmpfs" ino=8877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 414.091196][T20790] syz_tun (unregistering): left allmulticast mode [ 414.100897][ T40] audit: type=1400 audit(2000000114.719:600): avc: denied { open } for pid=20792 comm="syz.2.5363" path="/1674/file0" dev="tmpfs" ino=8877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 414.113398][ T40] audit: type=1400 audit(2000000114.729:601): avc: denied { map } for pid=20792 comm="syz.2.5363" path="/1674/file0" dev="tmpfs" ino=8877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 414.123812][ T40] audit: type=1400 audit(2000000114.729:602): avc: denied { execute } for pid=20792 comm="syz.2.5363" path="/1674/file0" dev="tmpfs" ino=8877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 414.253764][ T40] audit: type=1400 audit(2000000114.889:603): avc: denied { map } for pid=20810 comm="syz.4.5369" path="socket:[73248]" dev="sockfs" ino=73248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.344527][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5370'. [ 414.363804][ T40] audit: type=1400 audit(2000000114.999:604): avc: denied { load_policy } for pid=20815 comm="syz.7.5371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 414.375217][T20816] SELinux: failed to load policy [ 414.738010][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.917169][T20853] overlayfs: failed to clone upperpath [ 415.220013][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5387'. [ 415.226922][T20868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.239036][T20868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.244746][T20868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.787999][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.576624][T20923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5407'. [ 416.584604][T20923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.593008][T20923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.598966][T20923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.738153][T20933] overlayfs: failed to clone upperpath [ 416.818104][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.821473][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5428'. [ 417.828847][T20985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.837675][T20985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.846424][T20985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.858122][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.955180][T20998] IPVS: Error connecting to the multicast addr [ 418.491786][T21035] 8021q: adding VLAN 0 to HW filter on device bond34 [ 418.542464][T21035] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 418.552500][T21035] bond34: (slave macvlan3): Enslaving as a backup interface with an up link [ 418.598089][ T223] bond34: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 418.605790][ T223] bond34: (slave macvlan3): link status up again after 0 ms [ 418.612700][ T223] bond34: (slave macvlan3): failed to get link speed/duplex [ 418.718066][ T12] bond34: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 418.723354][ T12] bond34: (slave macvlan3): failed to get link speed/duplex [ 418.789455][T18580] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 418.840424][ T223] bond34: (slave macvlan3): failed to get link speed/duplex [ 418.882762][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5448'. [ 418.889343][T21060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.898109][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.899431][T21060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.907145][T21060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.938069][T18580] usb 12-1: Using ep0 maxpacket: 16 [ 418.942362][T18580] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 418.949836][ T46] bond34: (slave macvlan3): failed to get link speed/duplex [ 418.950541][T18580] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 418.957355][T18580] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.962060][T18580] usb 12-1: Product: syz [ 418.963759][T18580] usb 12-1: Manufacturer: syz [ 418.965589][T18580] usb 12-1: SerialNumber: syz [ 418.971077][T18580] usb 12-1: config 0 descriptor?? [ 418.976554][T18580] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 418.982593][T18580] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 419.058923][ T46] bond34: (slave macvlan3): failed to get link speed/duplex [ 419.173640][ T46] bond34: (slave macvlan3): failed to get link speed/duplex [ 419.278672][ T1171] bond34: (slave macvlan3): failed to get link speed/duplex [ 419.398209][ T46] bond34: (slave macvlan3): failed to get link speed/duplex [ 419.508104][ T46] bond34: (slave macvlan3): failed to get link speed/duplex [ 419.540748][T21053] orangefs_mount: mount request failed with -4 [ 419.586719][T18580] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 419.716498][T21082] netlink: 'syz.0.5455': attribute type 3 has an invalid length. [ 420.008682][T18580] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 420.015318][T18580] em28xx 12-1:0.0: board has no eeprom [ 420.727308][T21143] netlink: 'syz.2.5477': attribute type 1 has an invalid length. [ 420.765402][T21143] 8021q: adding VLAN 0 to HW filter on device bond38 [ 421.538828][T21046] em28xx 12-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 421.598047][T18580] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 421.600789][T18580] em28xx 12-1:0.0: dvb set to bulk mode. [ 421.602891][ T39] em28xx 12-1:0.0: Binding DVB extension [ 421.612804][T18580] usb 12-1: USB disconnect, device number 4 [ 421.616861][T18580] em28xx 12-1:0.0: Disconnecting em28xx [ 421.633983][ T39] em28xx 12-1:0.0: Registering input extension [ 421.636753][T18580] em28xx 12-1:0.0: Closing input extension [ 421.647044][T18580] em28xx 12-1:0.0: Freeing device [ 421.912335][T21182] vlan0: entered promiscuous mode [ 421.914837][T21182] vlan0: entered allmulticast mode [ 421.917121][T21182] hsr_slave_1: entered allmulticast mode [ 422.155888][T21189] lo: entered allmulticast mode [ 422.162859][T21188] lo: left allmulticast mode [ 422.616837][ T40] audit: type=1400 audit(2000000123.249:605): avc: denied { getopt } for pid=21212 comm="syz.7.5499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 422.625611][ T40] audit: type=1400 audit(2000000123.259:606): avc: denied { create } for pid=21212 comm="syz.7.5499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 422.666811][ T40] audit: type=1400 audit(2000000123.299:607): avc: denied { create } for pid=21212 comm="syz.7.5499" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 423.202267][T21258] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 423.205557][T21258] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 423.230945][T21262] veth7: entered allmulticast mode [ 423.236209][T21262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5513'. [ 423.448820][T21260] veth7: left allmulticast mode [ 423.728048][ T1206] net_ratelimit: 40 callbacks suppressed [ 423.728067][ T1206] bond34: (slave macvlan3): failed to get link speed/duplex [ 423.838051][ T1171] bond34: (slave macvlan3): failed to get link speed/duplex [ 423.950688][ T12] bond34: (slave macvlan3): failed to get link speed/duplex [ 424.058047][ T12] bond34: (slave macvlan3): failed to get link speed/duplex [ 424.072298][ T40] audit: type=1804 audit(2000000124.709:608): pid=21304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.5523" name="bus" dev="ramfs" ino=75519 res=1 errno=0 [ 424.084692][ T40] audit: type=1804 audit(2000000124.719:609): pid=21304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.5523" name="bus" dev="ramfs" ino=75519 res=1 errno=0 [ 424.097982][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.168032][ T12] bond34: (slave macvlan3): failed to get link speed/duplex [ 424.278069][ T12] bond34: (slave macvlan3): failed to get link speed/duplex [ 424.388021][ T12] bond34: (slave macvlan3): failed to get link speed/duplex [ 424.500770][ T1143] bond34: (slave macvlan3): failed to get link speed/duplex [ 424.608642][ T1143] bond34: (slave macvlan3): failed to get link speed/duplex [ 426.267468][ T40] audit: type=1400 audit(2000000126.899:610): avc: denied { connect } for pid=21361 comm="syz.2.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.538519][ T104] ------------[ cut here ]------------ [ 428.541236][ T104] time_after(jiffies, timeout) [ 428.541245][ T104] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x42d/0xcdb, CPU#3: kworker/u32:5/104 [ 428.547102][ T104] Modules linked in: [ 428.549461][ T104] CPU: 3 UID: 0 PID: 104 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.554082][ T104] Tainted: [L]=SOFTLOCKUP [ 428.555802][ T104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.561324][ T104] Workqueue: iou_exit io_ring_exit_work [ 428.564724][ T104] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 428.567198][ T104] Code: 8e e8 37 90 3f 01 48 8b 05 70 bd 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 7e 3e d3 00 4d 85 ed 79 12 e8 94 43 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 82 43 d3 00 48 8b 74 24 38 [ 428.575779][ T104] RSP: 0000:ffffc9000166fab0 EFLAGS: 00010293 [ 428.578478][ T104] RAX: 0000000000000000 RBX: ffff8880441d8778 RCX: ffffffff81355522 [ 428.582016][ T104] RDX: ffff888023d78000 RSI: ffffffff8135552c RDI: ffff888023d78000 [ 428.585304][ T104] RBP: ffffc9000166fc38 R08: 0000000000000007 R09: 0000000000000000 [ 428.589047][ T104] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff8880441d8000 [ 428.592908][ T104] R13: fffffffffffffffa R14: dffffc0000000000 R15: 0000000000000000 [ 428.596348][ T104] FS: 0000000000000000(0000) GS:ffff8880d6652000(0000) knlGS:0000000000000000 [ 428.600259][ T104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.603191][ T104] CR2: 000000110c3c2809 CR3: 0000000026d47000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 428.606890][ T104] DR0: 0000000000000081 DR1: 000000000000000f DR2: 00000000000007ff [ 428.610472][ T104] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 428.613872][ T104] Call Trace: [ 428.615355][ T104] [ 428.616762][ T104] ? __pfx_io_ring_exit_work+0x10/0x10 [ 428.619081][ T104] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 428.621436][ T104] ? debug_object_deactivate+0x2e4/0x3b0 [ 428.623864][ T104] ? rcu_is_watching+0x12/0xc0 [ 428.626398][ T104] process_one_work+0x9d7/0x1920 [ 428.631130][ T104] ? __pfx_process_one_work+0x10/0x10 [ 428.634205][ T104] ? __pfx_io_ring_exit_work+0x10/0x10 [ 428.637247][ T104] worker_thread+0x5da/0xe40 [ 428.640348][ T104] ? __pfx_worker_thread+0x10/0x10 [ 428.642893][ T104] ? kthread+0x13a/0x450 [ 428.644783][ T104] ? __pfx_worker_thread+0x10/0x10 [ 428.647012][ T104] kthread+0x370/0x450 [ 428.649013][ T104] ? __pfx_kthread+0x10/0x10 [ 428.651570][ T104] ret_from_fork+0x754/0xd80 [ 428.654008][ T104] ? __pfx_ret_from_fork+0x10/0x10 [ 428.656754][ T104] ? __switch_to+0x7b4/0x1120 [ 428.659735][ T104] ? __pfx_kthread+0x10/0x10 [ 428.662399][ T104] ret_from_fork_asm+0x1a/0x30 [ 428.665186][ T104] [ 428.667190][ T104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 428.671046][ T104] CPU: 3 UID: 0 PID: 104 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.676388][ T104] Tainted: [L]=SOFTLOCKUP [ 428.678075][ T104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.682393][ T104] Workqueue: iou_exit io_ring_exit_work [ 428.684892][ T104] Call Trace: [ 428.686382][ T104] [ 428.687734][ T104] dump_stack_lvl+0x100/0x190 [ 428.689875][ T104] vpanic+0x552/0x970 [ 428.691788][ T104] ? __pfx_vpanic+0x10/0x10 [ 428.693834][ T104] panic+0xd1/0xe0 [ 428.695667][ T104] ? __pfx_panic+0x10/0x10 [ 428.697614][ T104] ? check_panic_on_warn+0x1f/0x90 [ 428.699796][ T104] check_panic_on_warn.cold+0x19/0x34 [ 428.702006][ T104] ? io_ring_exit_work+0x42d/0xcdb [ 428.704493][ T104] __warn.cold+0x191/0x348 [ 428.706444][ T104] __report_bug+0x296/0x3d0 [ 428.708474][ T104] ? io_ring_exit_work+0x42d/0xcdb [ 428.710700][ T104] ? __pfx___report_bug+0x10/0x10 [ 428.712886][ T104] ? trace_contention_end+0x140/0x180 [ 428.715179][ T104] ? __mutex_lock+0x26a/0x1b90 [ 428.717162][ T104] ? find_held_lock+0x2b/0x80 [ 428.719197][ T104] ? io_req_caches_free+0x49/0x60 [ 428.721350][ T104] ? io_req_caches_free+0x49/0x60 [ 428.723540][ T104] ? io_ring_exit_work+0x42d/0xcdb [ 428.725668][ T104] report_bug+0xb2/0x220 [ 428.727558][ T104] ? io_ring_exit_work+0x42d/0xcdb [ 428.729768][ T104] handle_bug+0x166/0x2a0 [ 428.731787][ T104] exc_invalid_op+0x17/0x50 [ 428.733900][ T104] asm_exc_invalid_op+0x1a/0x20 [ 428.736234][ T104] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 428.738640][ T104] Code: 8e e8 37 90 3f 01 48 8b 05 70 bd 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 7e 3e d3 00 4d 85 ed 79 12 e8 94 43 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 82 43 d3 00 48 8b 74 24 38 [ 428.746676][ T104] RSP: 0000:ffffc9000166fab0 EFLAGS: 00010293 [ 428.749246][ T104] RAX: 0000000000000000 RBX: ffff8880441d8778 RCX: ffffffff81355522 [ 428.752646][ T104] RDX: ffff888023d78000 RSI: ffffffff8135552c RDI: ffff888023d78000 [ 428.755974][ T104] RBP: ffffc9000166fc38 R08: 0000000000000007 R09: 0000000000000000 [ 428.759224][ T104] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff8880441d8000 [ 428.762551][ T104] R13: fffffffffffffffa R14: dffffc0000000000 R15: 0000000000000000 [ 428.765965][ T104] ? io_ring_exit_work+0x422/0xcdb [ 428.768166][ T104] ? io_ring_exit_work+0x42c/0xcdb [ 428.770346][ T104] ? __pfx_io_ring_exit_work+0x10/0x10 [ 428.772709][ T104] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 428.775246][ T104] ? debug_object_deactivate+0x2e4/0x3b0 [ 428.777822][ T104] ? rcu_is_watching+0x12/0xc0 [ 428.779839][ T104] process_one_work+0x9d7/0x1920 [ 428.781882][ T104] ? __pfx_process_one_work+0x10/0x10 [ 428.784530][ T104] ? __pfx_io_ring_exit_work+0x10/0x10 [ 428.786843][ T104] worker_thread+0x5da/0xe40 [ 428.788762][ T104] ? __pfx_worker_thread+0x10/0x10 [ 428.790994][ T104] ? kthread+0x13a/0x450 [ 428.792959][ T104] ? __pfx_worker_thread+0x10/0x10 [ 428.795221][ T104] kthread+0x370/0x450 [ 428.797139][ T104] ? __pfx_kthread+0x10/0x10 [ 428.799589][ T104] ret_from_fork+0x754/0xd80 [ 428.801666][ T104] ? __pfx_ret_from_fork+0x10/0x10 [ 428.803852][ T104] ? __switch_to+0x7b4/0x1120 [ 428.805866][ T104] ? __pfx_kthread+0x10/0x10 [ 428.807887][ T104] ret_from_fork_asm+0x1a/0x30 [ 428.810105][ T104] [ 428.812422][ T104] Kernel Offset: disabled [ 428.814401][ T104] Rebooting in 86400 seconds..