[ OK ] Reached target Timers. Starting System Logging Service... [ 46.865573][ T6728] sshd (6728) used greatest stack depth: 23088 bytes left [ OK ] Started Permit User Sessions. [ OK ] Started System Logging Service. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. 2020/04/22 09:37:10 fuzzer started 2020/04/22 09:37:12 dialing manager at 10.128.0.26:35547 2020/04/22 09:37:12 syscalls: 2825 2020/04/22 09:37:12 code coverage: enabled 2020/04/22 09:37:12 comparison tracing: enabled 2020/04/22 09:37:12 extra coverage: enabled 2020/04/22 09:37:12 setuid sandbox: enabled 2020/04/22 09:37:12 namespace sandbox: enabled 2020/04/22 09:37:12 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/22 09:37:12 fault injection: enabled 2020/04/22 09:37:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/22 09:37:12 net packet injection: enabled 2020/04/22 09:37:12 net device setup: enabled 2020/04/22 09:37:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/22 09:37:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/22 09:37:12 USB emulation: /dev/raw-gadget does not exist 09:39:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r1, 0x11, 0x5e86, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) syzkaller login: [ 182.116162][ T7055] IPVS: ftp: loaded support on port[0] = 21 09:39:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) [ 182.235836][ T7055] chnl_net:caif_netlink_parms(): no params data found [ 182.319196][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.328199][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.336570][ T7055] device bridge_slave_0 entered promiscuous mode [ 182.347597][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.356239][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.365079][ T7055] device bridge_slave_1 entered promiscuous mode [ 182.400718][ T7055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.412830][ T7055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.442933][ T7055] team0: Port device team_slave_0 added [ 182.452729][ T7055] team0: Port device team_slave_1 added [ 182.478207][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.486785][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.531312][ T7209] IPVS: ftp: loaded support on port[0] = 21 [ 182.544500][ T7055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.569548][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.593558][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.625001][ T7055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 09:39:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506000000366ab1001000ed623c087dcbffa241ee19776b1d9ada6676c7517f97b2d3add33b040000004c651514f99a98a2863c7c3935f1a55500000000000000000000010000000000009aa5db6becbf9abd5c2e059ff376546bea0ca054fb97b05be546de5611721d8235fcfd2dce9c50454c7012ba98d96188e7243469f14ec61078bdf4fa2ae9d6b50b93e02cba4a9a319cddbe699cf8cd8fc982cd5a38cd6ae35453769cbb9113e1158ccc2bffa68a79b7fb95273ede90fae974d6917a88583f592797e0879b2a8377be70aaaf965929bb35796362e32aa3bc5217410e67ce6ca85b42511710e49c31277e7ed445c1eaa4ea6d13d65c2d47e34f9c8f36cb47ae408ffffca7da18993003070000008d5e126217303d4568390a547fa79e6ef016696a196d39f18903238af9e17868cd9bb7299fa8470d561f1f8706c9106d8fbbd6000000000000bda821496096836c39c41d63cac09ac76b36808bdb774cf50e2bfca9835fcd50d4f2249efc7026d259a166f71b0000000000000000000000000000002422e9c16798953eceddee32072a580fa7bb4b375543971407971c737e39ab37d931c9509ebc056bbfe155cec6c2b0b547b513093b2675f8dfaa9dec85440a682853683c97d1abc2be473818f1b9fa3ae5cddd50f86dea64c3ecd1cf42f8b26e0e9207676102b8c0478c1e29338144a12cd3d3ca2a4606ecf248abcf2a5297b878174959c3371e24295342ab935eee990ef35dc0811f0902be002cd9493cddc707000800008a20539d76abb3c45331306facbb47292d5894419f2fc3e808af20844271109916c4d00e26988f2e04fea3dd8aa04c9806b968f0d7510a8b82e77ef6bbc2d93ee8163db30766921680332ff385c902ba30b25168cb6a48a27a859fde8abe1a575c313866cf3c760568b604dd269427d237cdd592c01b703f791f3451864ca7d5043fa1c1baac0a6f6a72a66f31884e63751cc399b1ae72f251bacacfb7c1197552938738f85df52e3c0499b13856e34c5c3a7fc8843cfacfaf83f8fe3e0326c23c3af59be50e03f76321866dd5ba1c6441c642000000003cad9565ef03da7775451034eebcd5255569b643bb7dfc633e171c255649a808f622d4193ab47d336ccd8a066db2838a593a58886cafc9707ec923c5705cb8007d30e37726220631a49228805d20d6c5e2fbef3fcef47d20af3d0856a266a04f0994467f5d490d1407c9736b025a0164a07ce20f376e0168fc1c14984a206f276d4152cd0819b4ad7c69e50b03d96c079c30a517774f1333faa89b6dc20883a7c60ffe53b04dd2b7b0ae20a24e4453c3ec2fa3c5705ccefffe22caca1b1241f62600bc71a37c4434852a8a90fa70b84c65c7974cc11e7b98709a11da5b5a7deef5d23584d27bcbaa8b7d0710788948bf9387a67c7318af093b30f84bbe754bb26143d5bb71d45b58a577fb1245f9fb0d836f52dccf6886b0d54b7201578d79ba8ff87372292e0b48bd118bb685b2f61d59a6d8513cab57952699dccc810619e6057c7e2f290d99448df6e9b9921d524ac19b341ec1322a62e6c42d48ff2ea141c5bea6eea4fde6b57f059ce797495fcefafec903f2ba238215bd6f0cb51d965b357be33948dc7d5cbc1de14998ca80f56ed7ac0f6497daa491a1d132bb9dd135618291a8093f6d26e7cf7533a73661878f2948b806cae27ea56be9a7433168bfa3d3783736dcab9bdc6f60808e6adfb0f7d76c08c29f5a2349d36c007fb4d9dbe7ab98e26e3eaae932b57bd4f3fe14ab82cfb2d7000000000000"], 0x14}}, 0x0) [ 182.738453][ T7055] device hsr_slave_0 entered promiscuous mode [ 182.805276][ T7055] device hsr_slave_1 entered promiscuous mode [ 182.820728][ T7239] IPVS: ftp: loaded support on port[0] = 21 09:39:13 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x11, @multicast1, 0x0, 0x0, 'ovf\x00'}, 0x2c) [ 183.139669][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 183.325471][ T7239] chnl_net:caif_netlink_parms(): no params data found [ 183.338621][ T7479] IPVS: ftp: loaded support on port[0] = 21 [ 183.358990][ T7055] netdevsim netdevsim0 netdevsim0: renamed from eth0 09:39:13 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 183.434830][ T7055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.510805][ T7055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.585627][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.592730][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.615686][ T7209] device bridge_slave_0 entered promiscuous mode [ 183.634894][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.641967][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.658067][ T7511] IPVS: ftp: loaded support on port[0] = 21 [ 183.664521][ T7209] device bridge_slave_1 entered promiscuous mode [ 183.681075][ T7055] netdevsim netdevsim0 netdevsim3: renamed from eth3 09:39:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capget(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)) [ 183.834160][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.890444][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.949126][ T7575] IPVS: ftp: loaded support on port[0] = 21 [ 183.978115][ T7209] team0: Port device team_slave_0 added [ 184.017672][ T7209] team0: Port device team_slave_1 added [ 184.027709][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.036298][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.047027][ T7239] device bridge_slave_0 entered promiscuous mode [ 184.056487][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.064536][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.072265][ T7239] device bridge_slave_1 entered promiscuous mode [ 184.141966][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.201500][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.212929][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.242966][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.256981][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.264539][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.292641][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.306231][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.329962][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 184.350118][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 184.396154][ T7239] team0: Port device team_slave_0 added [ 184.424322][ T7239] team0: Port device team_slave_1 added [ 184.472594][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.480363][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.507540][ T7239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.527325][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.534375][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.560445][ T7239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.596566][ T7209] device hsr_slave_0 entered promiscuous mode [ 184.643851][ T7209] device hsr_slave_1 entered promiscuous mode [ 184.683533][ T7209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.691268][ T7209] Cannot create hsr debugfs directory [ 184.797753][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.809035][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.817853][ T7511] device bridge_slave_0 entered promiscuous mode [ 184.866981][ T7239] device hsr_slave_0 entered promiscuous mode [ 184.927085][ T7239] device hsr_slave_1 entered promiscuous mode [ 184.983620][ T7239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.991215][ T7239] Cannot create hsr debugfs directory [ 185.025006][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.032118][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.041539][ T7511] device bridge_slave_1 entered promiscuous mode [ 185.118146][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.126024][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.135348][ T7479] device bridge_slave_0 entered promiscuous mode [ 185.146444][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.156963][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.166171][ T7479] device bridge_slave_1 entered promiscuous mode [ 185.179962][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.195214][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.258637][ T7511] team0: Port device team_slave_0 added [ 185.269586][ T7511] team0: Port device team_slave_1 added [ 185.322883][ T7055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.338990][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.385341][ T7575] chnl_net:caif_netlink_parms(): no params data found [ 185.403664][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.413204][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.424922][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.451723][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.506745][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.517555][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.537576][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.544766][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.572560][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.630977][ T7055] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.650910][ T7479] team0: Port device team_slave_0 added [ 185.696750][ T7511] device hsr_slave_0 entered promiscuous mode [ 185.724001][ T7511] device hsr_slave_1 entered promiscuous mode [ 185.773725][ T7511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.781348][ T7511] Cannot create hsr debugfs directory [ 185.795750][ T7479] team0: Port device team_slave_1 added [ 185.810018][ T7239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.858753][ T7239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.963450][ T7239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.017984][ T7239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.112453][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.125144][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.138316][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.145532][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.170197][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.177238][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.204619][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.220513][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.228116][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.254892][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.271709][ T7209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.336252][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.347659][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.357711][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.368067][ T2719] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.375254][ T2719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.384862][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.436696][ T7209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.477177][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.486277][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.497045][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.523900][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.530999][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.541980][ T7575] device bridge_slave_0 entered promiscuous mode [ 186.549693][ T7209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.636894][ T7479] device hsr_slave_0 entered promiscuous mode [ 186.707871][ T7479] device hsr_slave_1 entered promiscuous mode [ 186.753428][ T7479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.761099][ T7479] Cannot create hsr debugfs directory [ 186.773944][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.781905][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.792722][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.802469][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.812391][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.835816][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.842995][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.851963][ T7575] device bridge_slave_1 entered promiscuous mode [ 186.861038][ T7209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.994919][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.005089][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.016005][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.101094][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.110453][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.125155][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.139547][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.185209][ T7055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.228923][ T7511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.293555][ T7575] team0: Port device team_slave_0 added [ 187.305645][ T7511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.398063][ T7575] team0: Port device team_slave_1 added [ 187.404575][ T7511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.465846][ T7511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.545486][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.554454][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.615791][ T7479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 187.655465][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.662438][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.694254][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.714178][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.739638][ T7479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 187.796297][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.803476][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.830366][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.863664][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.872609][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.882017][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.890354][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.903029][ T7055] device veth0_vlan entered promiscuous mode [ 187.923298][ T7479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.026065][ T7575] device hsr_slave_0 entered promiscuous mode [ 188.067696][ T7575] device hsr_slave_1 entered promiscuous mode [ 188.123660][ T7575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.131440][ T7575] Cannot create hsr debugfs directory [ 188.156105][ T7055] device veth1_vlan entered promiscuous mode [ 188.172712][ T7479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.230512][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.241278][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.250658][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.268415][ T7239] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.337079][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.358495][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.370454][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.379891][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.393037][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.400202][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.430191][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.439018][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.449176][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.458152][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.465318][ T2721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.474475][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.508746][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.539720][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.549684][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.558581][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.567715][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.576959][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.588748][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.602996][ T7055] device veth0_macvtap entered promiscuous mode [ 188.617122][ T7055] device veth1_macvtap entered promiscuous mode [ 188.643241][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.652263][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.664300][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.672897][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.720412][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.729447][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.738706][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.747823][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.755011][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.762729][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.771686][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.780244][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.787401][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.795234][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.804203][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.812799][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.821389][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.841026][ T7511] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.859038][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.870522][ T2719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.898877][ T7055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.914921][ T7055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.922325][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.931443][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.945135][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.957371][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.964497][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.973549][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.982030][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.994527][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.007335][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.016788][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.029329][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.039480][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.051539][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.064324][ T7239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.107350][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.119227][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.128815][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.138213][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.147982][ T2693] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.155258][ T2693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.163722][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.172551][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.181757][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.190728][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.221596][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.252695][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.264206][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.275090][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.305793][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.327840][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.381160][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.389715][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.399346][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.411881][ T7575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.446188][ T7575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.600077][ T7575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.658122][ T7575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.726246][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.737623][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.747056][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.756624][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.765434][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.775158][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.784568][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.792178][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.857656][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.882896][ T7511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.900826][ T7511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.948875][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.959808][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.976023][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.991188][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.009921][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.022793][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.032351][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.042876][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.052448][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.097909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.107695][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.124888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.140578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.151933][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.159142][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.179923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.211203][ T7239] device veth0_vlan entered promiscuous mode [ 190.241350][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.265584][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.278174][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.292563][ T2681] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.299898][ T2681] bridge0: port 2(bridge_slave_1) entered forwarding state 09:39:20 executing program 0: [ 190.315223][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.328950][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.340083][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.356636][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 09:39:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x50}}, 0x0) [ 190.417569][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.436864][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.453908][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.468878][ T7239] device veth1_vlan entered promiscuous mode [ 190.517452][ T7209] device veth0_vlan entered promiscuous mode [ 190.529771][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.546524][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.564089][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.579672][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.604262][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 09:39:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 190.612679][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.626582][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.643835][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 09:39:20 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x4000000032, 0xffffffffffffffff, 0x0) [ 190.756517][ T7479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.773719][ T7479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.803573][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.815269][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.820895][ T27] audit: type=1326 audit(1587548361.034:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f17eb9 code=0x0 [ 190.844411][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.852847][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.876670][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.885357][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.895975][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.905132][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.913863][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.951429][ T7511] device veth0_vlan entered promiscuous mode [ 190.967416][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.975629][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.983921][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.992252][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.002164][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.010601][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.021775][ T7209] device veth1_vlan entered promiscuous mode [ 191.056567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.071438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.082654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.096266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.116279][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.128825][ T7511] device veth1_vlan entered promiscuous mode [ 191.146241][ T7239] device veth0_macvtap entered promiscuous mode [ 191.167138][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.191858][ T7239] device veth1_macvtap entered promiscuous mode [ 191.245485][ T7209] device veth0_macvtap entered promiscuous mode [ 191.257464][ T7575] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.273344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.281499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.290949][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.299466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.308587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.318145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.326592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.336200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.347389][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.366255][ T7209] device veth1_macvtap entered promiscuous mode [ 191.383305][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.395530][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.406496][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.418112][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.429154][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.437853][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.444992][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.458141][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.470712][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.483102][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.498405][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.509872][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.523880][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.535758][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.544346][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.553798][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.564168][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.573690][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.582491][ T2720] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.589667][ T2720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.600726][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.610298][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.619247][ T27] audit: type=1326 audit(1587548361.835:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f17eb9 code=0x0 [ 191.641132][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 09:39:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0203000016000000000000000000000004000300ff01000000000000f2ffffffffffffff00000000000000000000000005000600000000000a000000ff0f0000fe80000104000000000000100000000000000000000000000400040016000000000000000000000000000000000000000000000000000000020001000000000000fd4c00010000a005000500000000000a0000000000200100"/174], 0xb0}}, 0x0) [ 191.651062][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 09:39:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)={0x18, 0x17, 0x101, 0x0, 0x0, {0x4}, [@typed={0x4, 0x10}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$smc(0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x0, 0x210000c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) close(r1) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @remote}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000440)={0x0, 0x0}) syz_genetlink_get_family_id$tipc(0x0) [ 191.751097][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.776049][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.791897][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.809983][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.835293][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.849478][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.875923][ T7511] device veth0_macvtap entered promiscuous mode [ 191.964141][ T7479] device veth0_vlan entered promiscuous mode [ 191.976212][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 09:39:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7ffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) [ 192.011030][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.020802][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.031781][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.045528][ T7511] device veth1_macvtap entered promiscuous mode [ 192.118027][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.145085][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.158488][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.169631][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.182126][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.201644][ T7479] device veth1_vlan entered promiscuous mode [ 192.244033][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.251945][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.273982][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.285522][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.301668][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.524010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.534531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.543261][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.554891][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.564847][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.575897][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.589465][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.609326][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.621484][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.632844][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.644298][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.654692][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.665241][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.676922][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.685019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.694817][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.703800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.712606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.745098][ T7575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.760375][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.771915][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.783660][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.803266][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.814796][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.826515][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.839748][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.884055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.902585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.912786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.923517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.994886][ T7479] device veth0_macvtap entered promiscuous mode [ 193.087915][ T7479] device veth1_macvtap entered promiscuous mode [ 193.292154][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.307779][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.325304][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.332871][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 09:39:23 executing program 1: bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, 0x0) 09:39:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@remote, @remote, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22c200a6}) [ 193.407951][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.441811][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.470678][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.490275][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.518495][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.532487][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.550385][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.562435][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.598518][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.637669][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.652071][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.718870][ T8378] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 193.739386][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.772970][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.810991][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.841673][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.878275][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.903460][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.918553][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.929899][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.942451][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.958075][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.974604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.984178][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.995011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.049546][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.059260][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.072537][ T7575] device veth0_vlan entered promiscuous mode [ 194.081666][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.091044][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.107595][ T7575] device veth1_vlan entered promiscuous mode [ 194.340541][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.349207][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.366721][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.381112][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.397530][ T7575] device veth0_macvtap entered promiscuous mode [ 194.416226][ T7575] device veth1_macvtap entered promiscuous mode [ 194.447382][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.458224][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.482292][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.494264][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.505125][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.517580][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.528512][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.539678][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.550186][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.562253][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.577100][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.588395][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.597658][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.606108][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.615295][ T3419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.626554][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.639448][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.649879][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.660972][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.670959][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.681566][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.692590][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.703381][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.713872][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.724434][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.736305][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1 09:39:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x50000}, 0x0, 0x7ffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r1 = semget$private(0x0, 0x1, 0x100) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000000)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c00020018000200030000000001000000001e000800000000000000ce204b70759690626033cefc9f29f0a316c47d6335ffa3a711759f0cc96a64a78d1424d7fbb9ce04556e206ac506b1011a61efc33a09ebbb2af603af78d8b1c564eebfed008c914bfbadcd782389f49d356138458f10539554386cdc1a5949ec127445ab7ec5cb7e75d4565ff6b5bcfa2e670c666d929fd82579b295"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 09:39:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) [ 194.777781][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.794083][ T3418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:39:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @dev}, 0x8, {0x2, 0x0, @loopback}}) 09:39:25 executing program 1: socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) 09:39:25 executing program 2: syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 09:39:25 executing program 4: mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) gettid() r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) 09:39:25 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) mlockall(0x1) 09:39:25 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0xfffffffd) 09:39:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x14, 0x17, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 09:39:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:39:25 executing program 1: 09:39:25 executing program 4: 09:39:25 executing program 3: 09:39:25 executing program 5: 09:39:25 executing program 2: 09:39:25 executing program 1: 09:39:25 executing program 4: 09:39:25 executing program 2: 09:39:25 executing program 3: 09:39:25 executing program 0: 09:39:25 executing program 5: 09:39:25 executing program 1: 09:39:25 executing program 4: 09:39:25 executing program 2: 09:39:25 executing program 3: 09:39:26 executing program 2: 09:39:26 executing program 5: 09:39:26 executing program 4: 09:39:26 executing program 1: 09:39:26 executing program 3: 09:39:26 executing program 0: 09:39:26 executing program 2: 09:39:26 executing program 4: 09:39:26 executing program 1: 09:39:26 executing program 5: 09:39:26 executing program 3: 09:39:26 executing program 0: 09:39:26 executing program 4: 09:39:26 executing program 2: 09:39:26 executing program 1: 09:39:26 executing program 3: 09:39:26 executing program 5: 09:39:26 executing program 0: 09:39:26 executing program 4: 09:39:26 executing program 3: 09:39:26 executing program 1: 09:39:26 executing program 2: 09:39:26 executing program 5: 09:39:26 executing program 0: 09:39:26 executing program 4: 09:39:26 executing program 3: 09:39:26 executing program 1: 09:39:26 executing program 2: 09:39:26 executing program 5: 09:39:26 executing program 0: 09:39:26 executing program 3: 09:39:26 executing program 4: 09:39:26 executing program 1: 09:39:26 executing program 2: 09:39:26 executing program 5: 09:39:26 executing program 0: 09:39:26 executing program 4: 09:39:26 executing program 3: 09:39:27 executing program 1: 09:39:27 executing program 2: 09:39:27 executing program 5: 09:39:27 executing program 0: 09:39:27 executing program 3: 09:39:27 executing program 4: 09:39:27 executing program 2: 09:39:27 executing program 1: 09:39:27 executing program 5: 09:39:27 executing program 0: 09:39:27 executing program 3: 09:39:27 executing program 4: 09:39:27 executing program 2: 09:39:27 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) dup2(r0, r1) 09:39:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001080000f0ffff00000400000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c001a80080002800400018008001b000000000005001000090000000500110009000000"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x80000000}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000100400000000000000002000000", @ANYRES32=r3], 0x18}}, 0x0) 09:39:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x3b, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 09:39:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000240)) 09:39:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00000007c0)="f7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0xfc) 09:39:27 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d000000005700000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff686866000c0002"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 09:39:27 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) 09:39:27 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x8003400, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 09:39:27 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5f4507c4065b05007311122eef59a41d1b8fba37ad5864c53616bb6cec0e935000e0854dac2d8ccc65bf9a0a00000000000000000000000070d2f0345bfbd905f49e67c0a8c1c36997c1356e26e38360a2b5be771026f0a17324a5321f0ae16d8ce7e3b0d9ebff9eedd7daba630d54ff2f0ba0182e1bf9556a91a9c1f2631ccf72c38b6a9977fe0905e371c93904109fa697445ba12ce105b567fc80a6f9066c00d91dc4e5cc1ea47806b72b5ac1ec26cb06009e4a8d8e31cc323de6ee333e80335a3b25c22100000038eadbf144580b51a837a4a5cf625f84abc635024cac3218d197c15b5db5c625995191fc1a86"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000100)="1b720268123aae60f3d5613e38d3d23fcf20540af430ca09810e8f00aa79705ad53e473b47120e08b5e0c526298c9a2b4a80878043746459c8b515f5afba825f003e6834c98364a1", 0x48}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x80000002, 0x0) 09:39:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @remote}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, 0xe8) 09:39:27 executing program 2: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x13) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x13) fcntl$notify(r1, 0x402, 0x25) [ 197.689969][ T8546] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 197.715450][ T8546] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 09:39:28 executing program 4: r0 = socket(0x10, 0x80002, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000100061d85680c1baba2ea11ff7e", 0x24}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 197.877891][ T8532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.899611][ T8559] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 197.916164][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.952059][ T8532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.977300][ T8532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:39:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @empty}}) 09:39:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x13) fcntl$notify(r2, 0x402, 0x25) 09:39:28 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) [ 198.095650][ T8562] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 198.107718][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:39:28 executing program 4: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x13) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r3, 0x402, 0x13) fcntl$notify(r3, 0x402, 0x25) 09:39:28 executing program 2: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x13) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r3, 0x402, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, 0xffffffffffffffff) dup2(r4, r5) 09:39:28 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pause() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x2a) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) 09:39:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 09:39:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') 09:39:30 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 09:39:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x21) 09:39:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x3c}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 09:39:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f0000000180)=0x0) io_setup(0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="e3", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r3, 0x0}]) 09:39:30 executing program 1: perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote, @dev={0xfe, 0x80, [], 0x11}, @dev, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20c20022, r3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x40}, {{0x0, 0x0, &(0x7f0000002740)}, 0x1}, {{&(0x7f0000002800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, &(0x7f0000000400)=[{&(0x7f0000002880)=""/249}, {&(0x7f0000002980)=""/233}], 0x0, &(0x7f0000000100)=""/129}, 0x4000000}, {{&(0x7f0000002b40)=@ethernet, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002e80)=""/218}], 0x0, &(0x7f0000002d00)=""/104}, 0x8}], 0x5f, 0x100, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000002c0)=0xfe55) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000200)='\xf4y6\xce\xaa#\x9d\xc6\xa6\x03\"H\xbaa\xbf\xae\x05\xe8\xd9\xadwJ\xf7m\xeb\x8b\x1c\xea\xa57\xb2u\x90\xd8\xd1\xc1\xf4\x12\f\x86\x9b\xa9\xd5\xfd\xff,\xb8\xcf\xba\x12\xd7\xc2\x1d\xb4\x85>YN\x19\xe2\xabM\xad\xe4\x14\x0f\xc5\xa4}\xfcdV\'X\xf3\xc5p\xee\xf9+\x1e\x96%8\xe7\xf49\x89\xff\xdb\x03[p\x8a\x87Q\xde,\x11\x90\xb1\xb3\xce\xbb\xdca\xc2\xca\x06\x00\x00\x00\xd3\xf9\xb09\xba&\x96\x18\xb1i\xdf\xa2\xc4\x05\xdc*I\xdb\xb5\x8c\xf1\xd8{\xed\xc1\xa2Qm\xa0+\x06\x9f\xa5;V\x96:\x02\xedN\x89\x97\xb8\x90}N\xc5\x8fu\x1d\x7fW\n\xe44', 0xfffffffffffffffd) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) 09:39:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3", 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) 09:39:31 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') 09:39:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xfffffef1) 09:39:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/57, 0x39}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4004800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4048050) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x4) 09:39:31 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x9) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 09:39:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r2, 0x7002, 0x0) 09:39:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c18f00000000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="0cd3990000000000000000c37c66cceba20aae3a3d7aff55c99f4093737916afff708f40c357c548aa27689e9396375bf5d8bceeb3fa334de4dcc5e72223d242acb2840ff3048e8df5dfc172da3dc092e4ea7e5f3c6e9e83ce908385b7e40538adfacdaf9fea3658311c8a4c2798ebd49f9615f0a83baeeb484b8852a15c020885db088736"], 0x28}}, 0x0) 09:39:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x37, 0x4, 0x2, "e5d3bea6b72e55b449c95edc4b7aaee2", "c3005ffeddc375cf932f4e69e651cbe1363b878c3e75701e07f8c01a7728154a6915"}, 0x37, 0x2) sendfile(r1, r0, 0x0, 0x20000000000000d8) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) 09:39:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="dc7afea08184959734c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a45983021e94740e06994342c64dd8165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137a52dc71c80e3c56001709c67a1ec8cb09597ca22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 09:39:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80287010, &(0x7f0000000080)) [ 201.255197][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.293470][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 09:39:31 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 09:39:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) 09:39:31 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "06"}}, 0x119) 09:39:31 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, 'em0'}}]}}) 09:39:31 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xb, 0x0, 0x89}) [ 201.537626][ T5] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 201.580942][ T5] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on sz1 [ 201.612415][ T8653] fuse: Bad value for 'fd' [ 201.641800][ T5] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 201.669286][ T5] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on sz1 09:39:32 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x26, 0x28, 0x0, 0xb, 0x0, 0x89, 0x0, 0x2e}) 09:39:32 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100fffffffb000000000000000a4000f7d21f00030a16b1120045a77dea8c923fd40020200000000e73797a300000000814000480080023060000000000000040000000000904037b0b7449f90073"], 0x1}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x40, &(0x7f0000000140)={@rand_addr, @dev, @empty}, 0xc) 09:39:32 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 09:39:32 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100fffffffb000000000000000a4000f7d21f00030a16b1120045a77dea8c923fd40020200000000e73797a300000000814000480080023060000000000000040000000000904037b0b7449f90073"], 0x1}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x40, &(0x7f0000000140)={@rand_addr, @dev, @empty}, 0xc) 09:39:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000002c0)={0x200, 0x6}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000200)={0x4, 0x1, {0xffffffffffffffff, 0x2, 0x40, 0x1, 0x7}, 0x1000}) 09:39:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7f, 0x0, 0x2, 0x0, [], 0x3f}) [ 201.995077][ T8686] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 09:39:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x2}, 0x235) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 09:39:32 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100fffffffb000000000000000a4000f7d21f00030a16b1120045a77dea8c923fd40020200000000e73797a300000000814000480080023060000000000000040000000000904037b0b7449f90073"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x40, &(0x7f0000000140)={@rand_addr, @dev, @empty}, 0xc) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) chown(0x0, 0x0, 0x0) 09:39:32 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100fffffffb000000000000000a4000f7d21f00030a16b1120045a77dea8c923fd40020200000000e73797a300000000814000480080023060000000000000040000000000904037b0b7449f90073"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x2c}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x40, &(0x7f0000000140)={@rand_addr, @dev, @empty}, 0xc) 09:39:32 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) clone(0x8182103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:32 executing program 2: syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x7, 0x3, 0x0, [{}, {@rand_addr=0x64010100}, {@broadcast}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 09:39:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001300)={r1, 0x3, 0x6, @multicast}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r2, r0, 0x0) 09:39:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000a000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000010000/0x1000)=nil, &(0x7f0000010000/0x2000)=nil, &(0x7f0000000000/0x10000)=nil, &(0x7f000000a000/0x4000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)="00b6e8e2fd97df36d291ad342b33caf3394b9ef7fe946abf7d3c", 0x1a, r3}, 0x68) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup2(r2, r1) r3 = socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x80000000, 0x0, 0x1, 0x8}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)={r5, 0x3}) 09:39:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'gretap0\x00', 0x420000014901}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x88042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'gretap0\x00', 0x420000014901}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xfdef) r5 = socket$packet(0x11, 0x3, 0x300) dup3(r5, r1, 0x0) 09:39:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r0}, 0x87e9b1a5bf03cec0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpid() socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$void(0xffffffffffffffff, 0x5451) dup(0xffffffffffffffff) [ 202.312047][ T8716] device syz_tun entered promiscuous mode [ 202.346349][ T8716] device syz_tun left promiscuous mode [ 202.441957][ T8725] device syz_tun entered promiscuous mode [ 202.456329][ T8725] device syz_tun left promiscuous mode 09:39:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001300)={r1, 0x3, 0x6, @multicast}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r2, r0, 0x0) 09:39:32 executing program 2: memfd_create(0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x41) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x18, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdc54}, 0x10800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xb8, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) bind$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) pipe(0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) 09:39:32 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 09:39:32 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x9) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 09:39:32 executing program 5: [ 202.695708][ T8738] device syz_tun entered promiscuous mode [ 202.725747][ T8738] device syz_tun left promiscuous mode 09:39:33 executing program 4: 09:39:33 executing program 2: 09:39:33 executing program 3: 09:39:33 executing program 1: 09:39:33 executing program 5: 09:39:33 executing program 0: 09:39:33 executing program 3: 09:39:33 executing program 2: 09:39:33 executing program 5: 09:39:33 executing program 0: 09:39:33 executing program 1: 09:39:33 executing program 4: 09:39:33 executing program 2: 09:39:33 executing program 3: 09:39:33 executing program 5: 09:39:33 executing program 1: 09:39:33 executing program 0: 09:39:33 executing program 4: 09:39:33 executing program 2: 09:39:33 executing program 5: 09:39:33 executing program 3: 09:39:33 executing program 1: 09:39:33 executing program 0: 09:39:33 executing program 4: 09:39:33 executing program 2: 09:39:33 executing program 5: 09:39:33 executing program 1: 09:39:33 executing program 3: 09:39:33 executing program 4: 09:39:33 executing program 0: 09:39:34 executing program 5: 09:39:34 executing program 3: 09:39:34 executing program 2: 09:39:34 executing program 1: 09:39:34 executing program 4: 09:39:34 executing program 5: 09:39:34 executing program 0: 09:39:34 executing program 3: 09:39:34 executing program 1: 09:39:34 executing program 2: 09:39:34 executing program 5: 09:39:34 executing program 4: 09:39:34 executing program 3: 09:39:34 executing program 0: 09:39:34 executing program 1: 09:39:34 executing program 5: 09:39:34 executing program 2: 09:39:34 executing program 4: 09:39:34 executing program 3: 09:39:34 executing program 0: 09:39:34 executing program 2: 09:39:34 executing program 1: 09:39:34 executing program 5: 09:39:34 executing program 3: 09:39:34 executing program 4: 09:39:34 executing program 0: 09:39:34 executing program 2: 09:39:34 executing program 1: 09:39:34 executing program 5: 09:39:34 executing program 3: 09:39:34 executing program 4: 09:39:34 executing program 0: 09:39:34 executing program 2: 09:39:34 executing program 5: 09:39:34 executing program 1: 09:39:34 executing program 3: 09:39:34 executing program 0: 09:39:34 executing program 2: 09:39:35 executing program 5: 09:39:35 executing program 4: 09:39:35 executing program 1: 09:39:35 executing program 3: 09:39:35 executing program 2: 09:39:35 executing program 5: 09:39:35 executing program 0: 09:39:35 executing program 4: 09:39:35 executing program 1: 09:39:35 executing program 3: 09:39:35 executing program 2: 09:39:35 executing program 5: 09:39:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000240)="f00fc74f906766c7442400010000006766c7442402000000006766c744240600000000670f0114240f22c2baf80c66b8d01a968d66efbafc0c66b8b500000066ef2e99640f0f8200700cbaf80c66b81cb7068166efbafc0cb8aa4feff40f01df0fae060010", 0x65}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4cf], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:35 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x111000) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x4040, 0x0, 0x0, 0x6, 0x5}, 0x0, 0xefffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000080)={0xa0000000000}) r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) inotify_rm_watch(0xffffffffffffffff, r1) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x802c560a, &(0x7f0000000040)={0x20, 0x40, &(0x7f00000002c0)="9df82a9cc63e23cbc69794f4e71a91c8c9086aa7bcc5a3f839ffbab406635de5bab68f9e46b34d6c1314cd25d80b2af8e1a03b0bc480a6b93fbaa3251f9e6a1c5697670382a35368009838e03b05faaa56927b43e93c1ebc47a21dd88612566e", {0x6, 0x1ff, 0x3447504d, 0x4, 0x2fa6, 0x3, 0x9, 0xfffffffb}}) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x200000, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x9, 0x10000, 0x18}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="27550600010600000000000000f044af3dce20c5874280c8551247385fc74a8eb6607bb70048e0be0d5c76df88286ebe03131670991114ff9fb71545b25e59bb810c8e3d3b5eabf87b85880fc15af86ca1fadf9eac7617"], 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r4) openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x301000, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}, {r0, 0x1202}], 0x2, 0x7) 09:39:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) getpeername$l2tp6(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f0000000b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x10c7}], 0x1) 09:39:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) lchown(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000540)=0x9) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="6744669801000000030004000400000095465b4e4a0fd88f6fe71f4af3719b45e30400b088ef0b54abf258cb7ba16c3048d797a2eba16d2280f2fa14bb1ea110d2cca3f9cfeef3849daa9401b7db2104bb828eeba8324f62e3bd251298cd9811fabea96515a8a7c6b58b591981d891eb33d28899de87921ca82477775baecb2755573adab6f0f6c25b96418751f8a0be56b55bf26ef641d01a234759d0c88e34346e9b3bf096a337000008b96ba1c894013c02bd9c2a54869813b7d465c2361900ef77ad161835cfe2a3879fc4e72111ace8e58d4c4f57cb7d02ff8115baa3400c7ec8ec4b539662419acc"], 0x1) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000740)="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", 0x138}], 0x1, &(0x7f00000005c0)}, 0x4004010) close(r2) 09:39:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="050e51c8"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000)={r8}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x10, 0x6, 0x0, r8}, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) getdents(r5, &(0x7f0000000100)=""/118, 0x76) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0xb21, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 09:39:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) sendmsg(r2, &(0x7f0000001340)={&(0x7f0000000180)=@caif=@dbg={0x25, 0x1, 0xfe}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000200)="2b31313ecacb10670d083805e3400b2a87d4fa15df32a4c9712288611b261d62c0675467922a2147bad8ea433112332feafdeda88ce982bb0e09962028462f72b7f0305f16e2eedeeb37e89fde504a74dc2b5fe240aae080c946f0536a18fd8fd71b9e7213b81b41a929461337dc3b1b664976d871a01cc7c4c29dd40f5e7b295a2ec10526c5746794c69e6fce7bd91bfacabf2767852258fb04ab22c92d52f7993c9f80d59a40fef1a67d221a94ad6a8b2591bac1050ffc8546939ab0e5c173f4f5bfdfa67694490337a7a6f2de313922552d04abb500ea38a1bcdca8b55af330fda1bad4ea59", 0xe7}], 0x1, &(0x7f0000001d00)=[{0x100c, 0x104, 0x9, "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"}, {0x14, 0x117, 0x6c, "c24045d8240a"}, {0x98, 0x102, 0x7, "1d11640d6f31bf334bdb988f2abe50e86a3b333e15a2eb70a44d1152aa615605dacf7287cdf9cec3a9a122de527352abeaad2904861c11ce6b54a5c31e110ab2ac1d7e1cda703a40a1865053fff2718041197b73adc19831c2ade945224a15c78b17ae22922b413798277ae1e7c896604a089f0e41914a8199ad04ee370a9a2f1b838b677d61acd8810ed5"}, {0xdc, 0x88, 0x4, "47d67d1cb593f0316d40a8321f73e3f004b0fa2350aad0bb85f4266bebb514cc9167328fa6eb28d9c27cfe3257033f5cc19acfe1b0cd827b662f698553ea475491d37de0570894c1516c9312829768bbcbbd853673c2c9cfe73026a89afcbdb935d84d10ff6cfcff51c12aff3820f5ad4743f33ebd198ef2e860f0ee503ab9c4f271c70dd220a689fdec4738372752e5ceed01067451b28eac08de52eea2fba454ac7c318a2a57ed1452144e086ffe8de6ed71a62ec1e7c9cedd6298eda24189ece5e7f8906d2b53ff421195b9e1"}, {0x100c, 0x117, 0x9, "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"}, {0x58, 0x108, 0x4000, "e7c2dbcfd00d445b22747252081adb5df7855fc0c54710a90147e9a3bb20e31046fdcfc2f9f5082a91cd8610825a256e30e9b86d438890613b41a9642cb0a4ff4c51af52de16e25cc4c5"}, {0xc, 0x88, 0x8}, {0x10, 0x1, 0x4, "85c4bd9e"}, {0x10, 0xff, 0x5, "30e0"}], 0x2224}, 0x80) recvmsg$kcm(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000001a00)="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", 0x2ef}, {0x0}], 0x2, 0x4) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 205.314181][ T8848] binder_alloc: 8846: binder_alloc_buf, no vma [ 205.357262][ C1] hrtimer: interrupt took 44685 ns [ 205.381842][ T8854] kvm: emulating exchange as write 09:39:35 executing program 5: socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0x0, 0x1, 0xc6d8, 0x9, 0x8, 0xfff8, 0xffff, {0x0, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x62}}, 0x0, 0x1f, 0xce73, 0x5, 0x200}}, &(0x7f0000000d40)=0xb0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000100001040800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010004000000040003800c0002001000000013d2f4f1fe000500", @ANYRES32, @ANYBLOB="08000a000a3d670bce5611111a912cac602bd38ae93a3b443825ebd4b5a7fe0d7f008d51022eb65cd09eb0e0abf7679faacc568e6955e2a1beff0f00008d20afeec016f4", @ANYRES32, @ANYBLOB="60d3d3672bb3e67d4c9b6a74fd71c5a92fc30094b86a86b400ec9d0810534716e1ffcc3ccdcace34ee88474ef67e7919fd2b97a8e5e4e00422b5fa709797afdee661ba21c98f21e3366cf54665ef06592b03148677ff3279a9d8e564d4ae13e65fe971cea25a274363a554527f7db83ae68b19e3a24ba08888adbae5186dfe3fe3a0ea9000fbd2b28342776eb05c8e86c3ed69"], 0x5c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0563044095ca3c1a49d648abee5d4fb78c52c7a583c61cde795e18a6b1d68c74277c81067ca26250cdb5bdd498fcbd0e8b083ade7a1c0ff2dfe167dafd3e7005f4abf3407fc4216361b7ed8f93ac5ab002ea395d125f15c1f5d2faf6a6d1660cf01af9be4caa3beeb5aaa6d97123edad8356bdaab951a7bd88ecbc0b4ab5f0881c514dbb104b223f3d5cc04aad3962bf5232135c49066e35f762972a236d62299386bdbb86ef2ab239cebfc66ec562f09250a043c01bb7edfa8fdd32601382e1"], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="20000000180003000000000000000000230000010000000000000000040001000000000092218968cde43b0f88513e19252a01b20fc88dc1a7088f45ceae5d34c0ad87bd0f77dbd8276867161b01b3167d84ad28625f573c000000000000003bd54e161c9cb20632e10ce0525ecc5b9399c9673a78fd16"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x4}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000340)={0x80c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x7f4, 0x80, "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"}, @NL80211_ATTR_PBSS={0x4}]}, 0x80c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2404c080) r5 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000040)='e/0proc\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4004240b, &(0x7f00000002c0)={0x5, 0x70, 0x0, 0x3, 0x8, 0x96, 0x0, 0x6, 0x80c00, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x2, 0x8}, 0x20, 0x2, 0x800000, 0x1, 0x0, 0x6, 0xff}) [ 205.423205][ T8859] binder: 8857:8859 unknown command -934212091 [ 205.462253][ T8859] binder: 8857:8859 ioctl c0306201 20000200 returned -22 [ 205.531355][ T8871] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 09:39:35 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='auxv\x00') dup2(r2, r1) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x101940, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc044560f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x8}, 0x0, 0x0, 0x2000000, 0x0, 0x400000000, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) inotify_init1(0x0) poll(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000540)='/dev/video#\x00', 0x0, 0x2) poll(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) r4 = inotify_init1(0x0) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb, 0xefe], 0x4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 09:39:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) getpeername$l2tp6(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f0000000b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x10c7}], 0x1) [ 205.687157][ T8877] binder: 8866:8877 ioctl 41007701 20000040 returned -22 [ 205.701839][ T8877] binder: 8866:8877 ioctl 4004240b 200002c0 returned -22 [ 205.744700][ T8875] binder: 8866:8875 ioctl 41007701 20000040 returned -22 [ 205.761101][ T8880] binder_alloc: 8878: binder_alloc_buf, no vma 09:39:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0445609, &(0x7f00000002c0)={0x8, 0xb, 0x4, 0x40000, 0x9, {0x0, 0xea60}, {0x3, 0x8, 0x6, 0xc0, 0x2, 0x8, "3087afbc"}, 0x4, 0x4, @planes=&(0x7f00000000c0)={0x7fffffff, 0x1, @fd, 0x9}, 0x6, 0x0, 0xffffffffffffffff}) getdents(r4, &(0x7f0000000340), 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x84, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x84}}, 0x4040000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="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"/286], 0x28}}, 0x0) 09:39:36 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) linkat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', r4, &(0x7f0000000280)='./file0\x00', 0x1000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x46, 0x1, 0x8, 0x80, 0x0, 0xfffffffffffffc00, 0x8, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x20, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x8080, 0x2, 0x8, 0x0, 0x5, 0x3, 0x6}, r2, 0x8, r1, 0x1) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000001c0)={0x5}) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="d43bb4185658b15e90ad7ceed2ae05e0729484a3898e62c1dccca657492a64eed3f663b94d04e94ee6bafb67aea02807", 0x30}, {&(0x7f0000000380)="824bd31c4fa03743b2ab1311eb27fba318c212ec77042663c85708f63db6f63d788abbf9d3ac2997d48528111c307660c28e3f8954774d861ae795d54d5d50daa1785901169848ea8b47b46e", 0x4c}, {&(0x7f0000000400)="e664402718d98de9fc765a685f7048196abf9fec293f4ccd7183e39abf431ddd15608216d76b593fe6e95f2b4609ad6d88f23f38f63d1abb7d5e345f0694ba4263900daaf6a6e6d86acd983ba86df6dea7aaf46a9609a079706ceb3f2441a274b7fb34a9a5f6fef958ec5e46fb27de26ace8384c0b112427a8adcf49307f88b59ce9a9f442f408b32d947cc0d89865f2c8748dda7e13b2d6dc55d9deeebd4e02", 0xa0}, {&(0x7f0000003340)="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", 0x1c9}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x2c, 0x24004000) 09:39:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=ANY=[@ANYBLOB='D\x00\x00\x00l\x00\'\r\x00'/19, @ANYRES32=r2, @ANYBLOB="00000000000000000e0000000b000100666c6f77657200001400020005005000000000000500510000000000"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 09:39:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB="a7090bbfe0159fd8162edcdf528a02da2c49bf867907a6d3ed13f1c9e218d6acf2a6d6b5feabf55e5b1bf9bf5a382bc02d65360b81ee0c369cf53d7a857d41648e601028b37df4bb21876b66aa1793d9a490d922ea9a25f66d4d0f25e64ef91af6c78b122f249316f4ccf2946386b772f9056b8a1a5e0fff2f1ff5bca4e477552892f225507df214", @ANYRES16=r2, @ANYRESDEC=r3, @ANYRESHEX], @ANYRESHEX=r4, @ANYRES32=r5, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYPTR64]], @ANYRES64=r1, @ANYRESHEX=r2, @ANYRES32, @ANYRES64=r6], 0x6e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r7 = syz_open_pts(r0, 0x0) readv(r7, &(0x7f0000000800)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffff82, 0x0, "00000000000000ff0700"}) 09:39:36 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000080)='GPL\x00', 0x4, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) [ 205.929982][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.958653][ T8887] bond0: (slave veth3): Enslaving as an active interface with an up link [ 206.018966][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 206.039870][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 206.069839][ T8901] binder: 8900:8901 ioctl 8010500c 20000100 returned -22 [ 206.089321][ T8901] binder_alloc: 8900: binder_alloc_buf, no vma [ 206.100532][ T8902] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 206.101008][ T8901] binder: 8900:8901 ioctl 5386 20000000 returned -22 09:39:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x234) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 206.173412][ T8901] binder: 8900:8901 ioctl 8010500c 20000100 returned -22 [ 206.181503][ T8905] binder_alloc: 8900: binder_alloc_buf, no vma [ 206.195859][ T8908] binder: 8900:8908 ioctl 5386 20000000 returned -22 09:39:36 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c00000000000000030000000000000000000000000000000000000002000000000000000500"/68], 0x44) 09:39:36 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x9) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x325100, 0x0) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0xd, 0x4, 0x6, 0x9, 0x0, 0xff, 0x40040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x2}, 0x140a2, 0xffffffff, 0x3, 0x9, 0xfffffffffffffff7, 0x8000, 0x4500}, 0x0, 0x1000a, r4, 0x9) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file0\x00') dup3(r1, r3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, r5) sync_file_range(0xffffffffffffffff, 0x0, 0x20, 0x4) 09:39:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3c43, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xd62f, 0x0, 0x1, 0x40000, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getitimer(0x2, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) open(0x0, 0x40c2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x48ea, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000000180)=""/190, &(0x7f0000000040)=0xbe) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 09:39:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="056303ddf10440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000028c0)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000002900)={0x77359400}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000001380)) perf_event_open(&(0x7f0000000140)={0x3, 0xfffffffffffffe41, 0x9, 0x4, 0x82, 0x0, 0x0, 0x7ffffffd, 0x3240e, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000002880), 0x6}, 0x8100, 0x5, 0x3, 0x6, 0x5, 0x6}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040ab0405500000092218948cde43b0f8ec046408e1bdd1086e606000000000000009083e5e7fff168548d714099ff3c1697a655f079f305f211cf666d43c3b939cf3c5e4698f738819c958b6d2265e59e8059404ac70bcf1f12155626f6695e1a797c610f73644f2f46c9f3a9342ba0b1e5ed1f4ec2ed"], 0x20}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000100)="da8d0dd3edb6a0f7db43564a87e75714", 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002740)={0x9, 0x0, [{0x1, 0x1000, &(0x7f0000001540)=""/4096}, {0x1, 0x3e, &(0x7f0000001280)=""/62}, {0x4000, 0xff8, &(0x7f0000002a80)=""/4088}, {0x4, 0x9e, &(0x7f00000012c0)=""/158}, {0x2000, 0x0, &(0x7f0000001380)}, {0x4000, 0xec, &(0x7f00000002c0)=""/236}, {0x4, 0x33, &(0x7f0000002540)=""/51}, {0xd000, 0xcf, &(0x7f0000002980)=""/207}, {0x100000, 0x85, &(0x7f0000002680)=""/133}]}) dup2(r0, r2) 09:39:37 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$vsock_stream(0x28, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0fa043d26e84d4c5601c043a51a98d1b732da05f53d219a773b71a07bbd6609c3459995329d79c0bd824e3ed8a181b8b66b24ea0ff98d09808a3131fe9b1c4a66c61999c5e1d4913c038104cf472ab56acf674ee0ccb9b9ee9d0ce044f3649aedd0366c67289b02376710407bf6038537775b44e48172c333d188be901fbae280f514e06d0a944a41ecf29e76c7c62f4818f4d8e365ad2d977c2714b5a62e1943a21451217888e59f5af94ecbe46d6ebad8c984859179b40b6511bdc7fb42da2dfc2f1ba633f25196f3b6b84b69f3b3a2137da"], 0x20}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)=0x8) socket$alg(0x26, 0x5, 0x0) r2 = openat$ttynull(0xffffff9c, &(0x7f00000001c0)='/dev/ttynull\x00', 0x80, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000240)=0x2) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') perf_event_open(&(0x7f000001d000)={0x1ac4e67a76f3a0bb, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 09:39:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x1, 0x9d}, &(0x7f0000000180)=0x88) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x3d1d}, 0x8) r5 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) 09:39:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3c43, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xd62f, 0x0, 0x1, 0x40000, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getitimer(0x2, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) open(0x0, 0x40c2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x48ea, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000000180)=""/190, &(0x7f0000000040)=0xbe) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 09:39:37 executing program 1: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xddf3) setreuid(0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x13}], 0x1, 0x0) socket(0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 09:39:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xfc, 0x3, 0x7, 0x0, 0x0, 0xf7f0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x2, 0x100008}, 0x111c4, 0x10005, 0x0, 0x7, 0x7, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) r5 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040010000000000000000000000000000000000000000000000000000fdffffff00001800"/53, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB="0000200000000000fffffffc008000"/24]], 0x0, 0x1000000, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) dup(0xffffffffffffffff) r7 = getpgrp(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00', r8}, 0x30) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:39:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x9}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000040)) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x1, 0x10000, 0x9, 0x7, 0x100}, {0x9683, 0x9e3}, 0x3f, 0x6e6bb4, 0x0, 0x0, 0x3, 0x2}, {{@in6=@loopback, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x3502, 0x2, 0x3, 0x73, 0x80000001, 0x1, 0x7}}, 0xe4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='%', 0x1a000, 0x0, 0x0, 0x0) [ 207.718696][ T8970] binder: 8960:8970 unknown command 0 [ 207.746176][ T8970] binder: 8960:8970 ioctl c0306201 20000280 returned -22 09:39:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) gettid() rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013001d0400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0014000000140003006970766c616e31000000000000000000ed97ce9703d10a8590bafd81c16240c69ef4f70ea0864d40f4559c07dfd407538efb1f609e4f508936965cbf4aa868ec05c0669ff6a46b067169e98e4e64d40ff0750000000000"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x2a, 0x7, 0x0, 0xfffff010}, {}]}, 0x8) r3 = socket$inet(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028}, {0x80000006}]}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000c0a43ba5d806055b6fdd80b4000000014", 0x39}], 0x1}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000280)=0x6, 0x4) r6 = fcntl$dupfd(r3, 0x406, r2) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x0, &(0x7f0000000280)=0x6, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) 09:39:38 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000001500)={&(0x7f0000000100), 0xc, &(0x7f00000014c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000180003000000000000000000230000000000000000000000040001000000000092218948cde43b0f"], 0x20}}, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) setuid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) [ 207.771492][ T8979] binder: 8960:8979 ioctl 1267 20000040 returned -22 [ 207.831417][ T8966] ================================================================== [ 207.839859][ T8966] BUG: KASAN: slab-out-of-bounds in gfn_to_pfn+0x4a6/0x4c0 [ 207.847066][ T8966] Read of size 8 at addr ffff8880a69f7468 by task syz-executor.3/8966 [ 207.855218][ T8966] [ 207.857562][ T8966] CPU: 1 PID: 8966 Comm: syz-executor.3 Not tainted 5.7.0-rc2-syzkaller #0 [ 207.866152][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.876393][ T8966] Call Trace: [ 207.879707][ T8966] dump_stack+0x188/0x20d [ 207.884061][ T8966] print_address_description.constprop.0.cold+0xd3/0x315 [ 207.891102][ T8966] ? gfn_to_pfn+0x4a6/0x4c0 [ 207.895618][ T8966] __kasan_report.cold+0x35/0x4d [ 207.900601][ T8966] ? gfn_to_pfn+0x4a6/0x4c0 [ 207.905117][ T8966] ? gfn_to_pfn+0x4a6/0x4c0 [ 207.909634][ T8966] kasan_report+0x33/0x50 [ 207.913981][ T8966] gfn_to_pfn+0x4a6/0x4c0 [ 207.918462][ T8966] reexecute_instruction+0x1fa/0x430 [ 207.923771][ T8966] x86_emulate_instruction+0x880/0x1c50 [ 207.929375][ T8966] ? mmio_info_in_cache+0x135/0x520 [ 207.934864][ T8966] kvm_mmu_page_fault+0x308/0x15d0 [ 207.940006][ T8966] ? find_held_lock+0x2d/0x110 [ 207.944789][ T8966] ? kvm_nx_lpage_recovery_worker+0x790/0x790 [ 207.950876][ T8966] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 207.956439][ T8966] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 207.962443][ T8966] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 207.968121][ T8966] ? handle_ept_violation+0x206/0x550 [ 207.973530][ T8966] ? vmx_inject_irq+0x5b0/0x5b0 [ 207.978394][ T8966] vmx_handle_exit+0x2b8/0x1700 [ 207.983329][ T8966] vcpu_enter_guest+0xfea/0x59d0 [ 207.988307][ T8966] ? kvm_vcpu_reload_apic_access_page+0x300/0x300 [ 207.994744][ T8966] ? kvm_arch_vcpu_ioctl_run+0x23a/0x16e0 [ 208.001182][ T8966] ? lock_release+0x800/0x800 [ 208.005889][ T8966] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 208.011437][ T8966] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 208.017416][ T8966] ? kvm_check_async_pf_completion+0x2a4/0x400 [ 208.023554][ T8966] ? lockdep_hardirqs_on+0x463/0x620 [ 208.028825][ T8966] ? kvm_arch_vcpu_ioctl_run+0x3fb/0x16e0 [ 208.034529][ T8966] kvm_arch_vcpu_ioctl_run+0x3fb/0x16e0 [ 208.040065][ T8966] kvm_vcpu_ioctl+0x493/0xe60 [ 208.044727][ T8966] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 208.051128][ T8966] ? __fget_files+0x30d/0x500 [ 208.055814][ T8966] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 208.061688][ T8966] ? do_vfs_ioctl+0x50c/0x12d0 [ 208.066437][ T8966] ? ioctl_file_clone+0x180/0x180 [ 208.071461][ T8966] ? __fget_files+0x32f/0x500 [ 208.076142][ T8966] kvm_vcpu_compat_ioctl+0x1ab/0x350 [ 208.081434][ T8966] ? kvm_vcpu_ioctl+0xe60/0xe60 [ 208.086306][ T8966] ? kvm_vcpu_ioctl+0xe60/0xe60 [ 208.091181][ T8966] __ia32_compat_sys_ioctl+0x23d/0x2b0 [ 208.096651][ T8966] do_fast_syscall_32+0x270/0xe90 [ 208.101689][ T8966] entry_SYSENTER_compat+0x70/0x7f [ 208.106793][ T8966] [ 208.109103][ T8966] Allocated by task 8966: [ 208.113417][ T8966] save_stack+0x1b/0x40 [ 208.117572][ T8966] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 208.123202][ T8966] kvmalloc_node+0x61/0xf0 [ 208.127612][ T8966] kvm_set_memslot+0x115/0x1530 [ 208.132454][ T8966] __kvm_set_memory_region+0xcf7/0x1320 [ 208.138006][ T8966] kvm_set_memory_region+0x29/0x50 [ 208.143125][ T8966] kvm_vm_ioctl+0x678/0x23e0 [ 208.147716][ T8966] kvm_vm_compat_ioctl+0x125/0x240 [ 208.152849][ T8966] __ia32_compat_sys_ioctl+0x23d/0x2b0 [ 208.158327][ T8966] do_fast_syscall_32+0x270/0xe90 [ 208.163363][ T8966] entry_SYSENTER_compat+0x70/0x7f [ 208.168454][ T8966] [ 208.170762][ T8966] Freed by task 7479: [ 208.174839][ T8966] save_stack+0x1b/0x40 [ 208.178976][ T8966] __kasan_slab_free+0xf7/0x140 [ 208.183927][ T8966] kfree+0x109/0x2b0 [ 208.187818][ T8966] skb_free_head+0x8b/0xa0 [ 208.192240][ T8966] skb_release_data+0x42e/0x8b0 [ 208.197078][ T8966] skb_release_all+0x46/0x60 [ 208.201649][ T8966] kfree_skb+0xfa/0x410 [ 208.205788][ T8966] ip6_mc_input+0x9a8/0xec0 [ 208.210271][ T8966] ip6_rcv_finish+0x1d9/0x310 [ 208.215061][ T8966] ipv6_rcv+0xf8/0x3f0 [ 208.219154][ T8966] __netif_receive_skb_one_core+0xf5/0x160 [ 208.224956][ T8966] __netif_receive_skb+0x27/0x1c0 [ 208.229985][ T8966] process_backlog+0x21e/0x7a0 [ 208.234745][ T8966] net_rx_action+0x4c2/0x1070 [ 208.239424][ T8966] __do_softirq+0x26c/0x9f7 [ 208.243902][ T8966] [ 208.246214][ T8966] The buggy address belongs to the object at ffff8880a69f7000 [ 208.246214][ T8966] which belongs to the cache kmalloc-2k of size 2048 [ 208.260262][ T8966] The buggy address is located 1128 bytes inside of [ 208.260262][ T8966] 2048-byte region [ffff8880a69f7000, ffff8880a69f7800) [ 208.273700][ T8966] The buggy address belongs to the page: [ 208.279316][ T8966] page:ffffea00029a7dc0 refcount:1 mapcount:0 mapping:00000000ac68ae4c index:0x0 [ 208.288399][ T8966] flags: 0xfffe0000000200(slab) [ 208.293250][ T8966] raw: 00fffe0000000200 ffffea0002417c48 ffffea0002440b08 ffff8880aa000e00 [ 208.301821][ T8966] raw: 0000000000000000 ffff8880a69f7000 0000000100000001 0000000000000000 [ 208.310401][ T8966] page dumped because: kasan: bad access detected [ 208.316801][ T8966] [ 208.319110][ T8966] Memory state around the buggy address: [ 208.324722][ T8966] ffff8880a69f7300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 208.332765][ T8966] ffff8880a69f7380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 208.340809][ T8966] >ffff8880a69f7400: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 208.348952][ T8966] ^ [ 208.356404][ T8966] ffff8880a69f7480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.364446][ T8966] ffff8880a69f7500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.372489][ T8966] ================================================================== 09:39:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x104082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x5481, 0x0, 0x0, 0x4, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x3) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x116) flistxattr(r3, &(0x7f00000000c0)=""/10, 0xa) flock(0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x2c, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x40fdf) [ 208.380535][ T8966] Disabling lock debugging due to kernel taint [ 208.407240][ T8983] batman_adv: batadv0: Adding interface: ipvlan1 [ 208.413967][ T8983] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.449172][ T8983] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 208.466539][ T8983] batman_adv: batadv0: Removing interface: ipvlan1 09:39:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3c43, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xd62f, 0x0, 0x1, 0x40000, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getitimer(0x2, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) open(0x0, 0x40c2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x48ea, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0x0, 0x1000000, 0x0}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000000180)=""/190, &(0x7f0000000040)=0xbe) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) [ 208.646377][ T8966] Kernel panic - not syncing: panic_on_warn set ... [ 208.653010][ T8966] CPU: 1 PID: 8966 Comm: syz-executor.3 Tainted: G B 5.7.0-rc2-syzkaller #0 [ 208.663079][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.673218][ T8966] Call Trace: [ 208.676504][ T8966] dump_stack+0x188/0x20d [ 208.680823][ T8966] panic+0x2e3/0x75c [ 208.684701][ T8966] ? add_taint.cold+0x16/0x16 [ 208.689365][ T8966] ? preempt_schedule_common+0x5e/0xc0 [ 208.694804][ T8966] ? gfn_to_pfn+0x4a6/0x4c0 [ 208.699308][ T8966] ? preempt_schedule_thunk+0x16/0x18 [ 208.704661][ T8966] ? trace_hardirqs_on+0x55/0x220 [ 208.709662][ T8966] ? gfn_to_pfn+0x4a6/0x4c0 [ 208.714145][ T8966] end_report+0x4d/0x53 [ 208.718282][ T8966] __kasan_report.cold+0xd/0x4d [ 208.723129][ T8966] ? gfn_to_pfn+0x4a6/0x4c0 [ 208.727611][ T8966] ? gfn_to_pfn+0x4a6/0x4c0 [ 208.732089][ T8966] kasan_report+0x33/0x50 [ 208.736430][ T8966] gfn_to_pfn+0x4a6/0x4c0 [ 208.740758][ T8966] reexecute_instruction+0x1fa/0x430 [ 208.746041][ T8966] x86_emulate_instruction+0x880/0x1c50 [ 208.751594][ T8966] ? mmio_info_in_cache+0x135/0x520 [ 208.756773][ T8966] kvm_mmu_page_fault+0x308/0x15d0 [ 208.761865][ T8966] ? find_held_lock+0x2d/0x110 [ 208.766609][ T8966] ? kvm_nx_lpage_recovery_worker+0x790/0x790 [ 208.772656][ T8966] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 208.778180][ T8966] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 208.784142][ T8966] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 208.789670][ T8966] ? handle_ept_violation+0x206/0x550 [ 208.795022][ T8966] ? vmx_inject_irq+0x5b0/0x5b0 [ 208.799863][ T8966] vmx_handle_exit+0x2b8/0x1700 [ 208.804697][ T8966] vcpu_enter_guest+0xfea/0x59d0 [ 208.809625][ T8966] ? kvm_vcpu_reload_apic_access_page+0x300/0x300 [ 208.816039][ T8966] ? kvm_arch_vcpu_ioctl_run+0x23a/0x16e0 [ 208.821742][ T8966] ? lock_release+0x800/0x800 [ 208.826402][ T8966] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 208.831925][ T8966] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 208.837900][ T8966] ? kvm_check_async_pf_completion+0x2a4/0x400 [ 208.844051][ T8966] ? lockdep_hardirqs_on+0x463/0x620 [ 208.849322][ T8966] ? kvm_arch_vcpu_ioctl_run+0x3fb/0x16e0 [ 208.855045][ T8966] kvm_arch_vcpu_ioctl_run+0x3fb/0x16e0 [ 208.860598][ T8966] kvm_vcpu_ioctl+0x493/0xe60 [ 208.865289][ T8966] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 208.871689][ T8966] ? __fget_files+0x30d/0x500 [ 208.876368][ T8966] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 208.882240][ T8966] ? do_vfs_ioctl+0x50c/0x12d0 [ 208.887000][ T8966] ? ioctl_file_clone+0x180/0x180 [ 208.892003][ T8966] ? __fget_files+0x32f/0x500 [ 208.896746][ T8966] kvm_vcpu_compat_ioctl+0x1ab/0x350 [ 208.902011][ T8966] ? kvm_vcpu_ioctl+0xe60/0xe60 [ 208.906844][ T8966] ? kvm_vcpu_ioctl+0xe60/0xe60 [ 208.911705][ T8966] __ia32_compat_sys_ioctl+0x23d/0x2b0 [ 208.917174][ T8966] do_fast_syscall_32+0x270/0xe90 [ 208.922198][ T8966] entry_SYSENTER_compat+0x70/0x7f [ 208.928581][ T8966] Kernel Offset: disabled [ 208.932899][ T8966] Rebooting in 86400 seconds..