last executing test programs: 12m17.317206888s ago: executing program 3 (id=737): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) 12m17.269542418s ago: executing program 3 (id=738): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000500), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 12m16.993050297s ago: executing program 3 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0xffffffffffffffca, {0x0, 0x3000}}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fe00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f56900000000000000000000000000000000000000000000000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a8c285400"}) 12m16.743464617s ago: executing program 3 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 12m16.667232108s ago: executing program 3 (id=744): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x8, 0x5, 0xb1, 0x3f, 0x1a, "3eccd25569e20900"}) 12m16.205551816s ago: executing program 3 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) 12m15.932960849s ago: executing program 32 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) 11m4.801918308s ago: executing program 0 (id=1431): mknod(&(0x7f0000000380)='./file0\x00', 0x1, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) landlock_restrict_self(r0, 0x0) renameat2(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f00000002c0)='.\x02\x00', 0x2) 11m4.735328708s ago: executing program 0 (id=1432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 11m4.669768701s ago: executing program 0 (id=1433): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000003, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000a00000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 11m4.572939133s ago: executing program 0 (id=1434): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 11m4.430269127s ago: executing program 0 (id=1435): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000019}) finit_module(r2, 0x0, 0x3) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) 11m4.078114888s ago: executing program 0 (id=1436): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x44000840) r1 = dup(r0) recvmmsg$unix(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000062, 0x0) 11m3.867537564s ago: executing program 33 (id=1436): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x44000840) r1 = dup(r0) recvmmsg$unix(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000062, 0x0) 8m57.147898451s ago: executing program 5 (id=3047): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 8m56.971944417s ago: executing program 5 (id=3048): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) 8m56.826106785s ago: executing program 5 (id=3049): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) 8m56.745300343s ago: executing program 5 (id=3050): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0x7, 0x6, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0x16, 0x2e, "b5ea4a811502acda16c0a9c25868203b77e822f941ebfe0d2f8d41a2069fcd2d09fc8cbf289e8f34abe7de32d0ff"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x100, 0x8}}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x18}, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) 8m54.406015707s ago: executing program 5 (id=3076): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x799843, 0x0) 8m54.388078075s ago: executing program 5 (id=3077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="26f2660f8a0000640f01cab9391001c0b800000000ba000000000f300f30660f1b9aa5ffffff660f38de48643f3e0f01df66b820018ec0b9800000c00f3235008000000f30", 0x45}], 0x0, 0x35, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m39.038116959s ago: executing program 34 (id=3077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="26f2660f8a0000640f01cab9391001c0b800000000ba000000000f300f30660f1b9aa5ffffff660f38de48643f3e0f01df66b820018ec0b9800000c00f3235008000000f30", 0x45}], 0x0, 0x35, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m15.781401917s ago: executing program 1 (id=4121): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) 7m15.622776825s ago: executing program 1 (id=4125): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 7m15.149925303s ago: executing program 1 (id=4128): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0xe, r2}, 0x10) 7m14.87113889s ago: executing program 1 (id=4130): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x8040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x111509e, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m14.713558976s ago: executing program 1 (id=4132): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 7m13.31393561s ago: executing program 1 (id=4140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) 7m12.974517814s ago: executing program 35 (id=4140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) 3.249916382s ago: executing program 2 (id=10101): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) (async) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_connect(0x5, 0x414, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x76, 0x31, 0xe4, 0x10, 0x22b8, 0x4224, 0xdb6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x402, 0x1, 0x3, 0x1, 0xa0, 0x8a, [{{0x9, 0x4, 0x1f, 0x8, 0x8, 0xa, 0xb5, 0x52, 0x4, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0xe, 0xff, 0x0, [@generic={0x2, 0x2}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x7, 0x6, 0x14, [@generic={0xa2, 0xb, "f254d93b0865fc4af2ab129309077d5fa6eb6e31d85bdd31b0c0c5cb857d763655f7cb6ea1c6bda61f80cdfde95423699e34d176c28e09b8f03e9e85d9609b8128ee66d6aa28cac3a29f6184c1cf7195ad3483428999a34cac20d9b9c4aafda71696af5b6f91299ee3127abbae68e0a4b70ca0550785f49c481e4738f37acd18b75ba90feee38737adc043baaa6984fd67a851cfa274f71c9e5b7dfd7481b56d"}, @generic={0x5f, 0xc, "5d2a924ab2a62dda7e1deed30f7a2ac35912c947f2a26db674e3d28f2ba36722a16e8f78d15e12a400cff5e1dc1c8e11c896909577c71f98a32da0358c12906e821fef9b8e50677c1f2f95ccbc7bdb5d4ccddeac9b432c851c9db5c31f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x20, 0x3, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x9}, @generic={0xe0, 0x4, "666126dcdf995298e2061a28c6fbceebc32511b2f30e7ced5cd6f51b9702fe8d1133f81d439682d5504ac4d13b959a2a29fdbd5c0dd934af21cf5a6382a8190a4d089a2f24f679d184b84ab09f0990bdadf06e3b6af12df190b4123ff1fbae840008f78dda545a2abfade5b7c3996137c531271d3776d28c5c35b99b15332d1614edd49bd454db5ec0a5a34ca5f8feac5cd22a06e41f0dcfdf7e97ec9e7443263cf6347f60fec956ebb151af6ddc91544da6364303f3578156d4aacdeb5d77ed4cab1abbb2f656cbcb504e96d278917d06e9d1cb744f24abb04336f1be12"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x6, 0xd, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x9}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x400, 0xf9, 0x7, 0x5, [@generic={0x98, 0x6, "c1392cd0e3cdefa8fcb4e6c6eb6632eccef328a3340a5a1147f52f9b2b99a74bc19b608dd722e41a724989bd3ace76ba850ccb1e55d40e4f6f562bf19fa4149062ab0317b54ec1ad17557ebe5f5b274ef51b486cf6c8fb2da80358a1c33c0ec5ac1c6572703e9a21c7c912a5f63169ce40827c57bb18a6b9ff8af696c437cab77c5d1600de10ed1aa9338454686fcb204377af941f8e"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x3}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x7, 0x2, 0x7, [@generic={0x24, 0x0, "3b645b88fd05502e352cb280a3df5569f53a49d1f43685d5a82844db017f03baecea"}, @generic={0xa2, 0x8, "f36c9ed0707470ac17225d3ebb18c93b357777e23b0e50653fb5583744f4cc8795067ea8f2815bb3c9c11466591b0c0456711cf8018fc3e3c49aee9e0b1a015e08cc5e0e859248f51ba7f54753916a5c488bda126fff77130ac40d64bde9f1d10ecf504218a6d8edffac0619e737379899314a32784e4db6a8cae972783527fc1c233c64a3162092d9e4b41ded3fc3f0765d82f3faf166ccb08a2d15cce489ee"}]}}, {{0x9, 0x5, 0x85, 0x0, 0x8, 0x3, 0x2, 0x1, [@generic={0x52, 0xf, "d11016b8b5460bd3cec64cd3d78077dca61c062204e12e386b5d299a7a7625190edcec0503ef21faaa7cd62c54228c5bb44d8416a1f26d89838cb01dc4b4a07293d721af1e8dd2de425273b491ee7a40"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x40, 0x8, 0x9}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x0, 0x10, 0x7, 0x20, 0x1}, 0x8, &(0x7f0000000580)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x458}}, {0x98, &(0x7f0000000600)=@string={0x98, 0x3, "da5466e5a5b7d5bbb7750474cc16a2e01074f87e2cc7355ce3d9c310e91735a10b5793a77185d95e0bda5e9c2d5df73a882b3cae1a1c67fc27078b5412cfc73f7bd679fcdf6cbc6f3e3c5c09330ea86c24ed2061d9bd2233f80487875d74bed9affce4af784f7a10f10a5350154e67d2d05cff0b5ec45d110ba238f439bd1de532f2fbd86cf0b2910a45966990bd700c94d270835b96"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x438}}, {0xcc, &(0x7f0000000700)=@string={0xcc, 0x3, "d1ce43d8ec4183dca618d4f8f73fc184af58a5d494d32081a1aa3acfbafa90ea4d7231c5d2fb7d39c7b85e211a13287dfdc77de0bd14142ce0271f54864756f307826837657f6168fa97b9ad85f71c34b85cd3d4882ac3e2116db13fb2507e07f12bcb23c4ba65951aad9300679812eccf21ed7bac367ead38d0b73e8e2b093a2c80fcd49ee42d5d729da7d48305d3ac2658f1b03de3e8e49e2253b7d4533f8d1a9699f7a5f77a6c267f9e5ed7dd2cfd64c74b0baebdff87e4154a08df14c2535b24b8fb0a0754ab4751"}}, {0xd0, &(0x7f0000000800)=@string={0xd0, 0x3, "52e523e1cb9c8bdeb4082ae529f90284bf101ff081bc46500bfc0904a4c4ea32b1177bead67cd2c7a01d5d5da5071962fe4da8d504cb5289dd4beaa2afeb70d414b1800a19f2ace208ec39eae40faff5089082266c2167aba1f87e5157d5dcff711986de8eef6d75f35fe1c73b0d2017189ef771fab6e96837b93bdb6cd89de949619005f4e7834315086d2a90cf3416a906979f25473cbcb25d51f3f499892037d1e42e177b27fee290e03faa229467a33dfc5d5db083acaf924386095dfc5de37a1f0b7ab70324d72cc4ebc361"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x410}}]}) 2.668840961s ago: executing program 2 (id=10107): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a00", @ANYRES16], 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0x7f, "0cf1809ecc2bc901afd744dfe302272213e5ce75e7bbfe478a6fc6e98ec737b3e859c39ea89975e35c3b47aa5c5577b8237eeb7237ca17d3062cdb944d44e0e3dd0054f6926a81c86f2b2afab5c2ff7c20f0bf7c38ac27c49b644d9a54fed14917f5c6cb38f6ea316127ebf05d1b1526104d2f102f36e8d08fcffea386bd11"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0xfffffffc, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x1, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x6, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0xffffffff, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x1, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x6, 0x5, 0x0, 0xfffffffe]}, 0x45c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x2}, {0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1}, {0x2, 0x1, 0x1}}], 0x28) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 2.093686388s ago: executing program 6 (id=10110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x33, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0x10002, 0xfffffffe, 0x9, 0x5b7d, 0x10000d8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x3ff, 0x5}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x448, &(0x7f0000000200)={0x0, 0x3eb3, 0x1, 0xfffffffc, 0x182}, &(0x7f0000000180), &(0x7f00000001c0)) r3 = add_key$user(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="41db", 0x2, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "c9fb508ab3d3e36992ba54976ef3192136aea4abf8ed2c34406a874f9a5a6146544a94076dd77a06a47cef9c95cbe76d531057ecc9ea6929db8cfff99249e36f", 0x3f}, 0x48, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000001880)=0x40, 0x4) sendmmsg$inet6(r6, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @private0, 0x85}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x18}}], 0x1, 0x4000804) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000100)=@ethtool_cmd={0x2c, 0x7, 0x8, 0xe39, 0x6, 0x61, 0x70, 0x4, 0x94, 0x2, 0xfffffffc, 0xffff8000, 0x7f, 0x5, 0x54, 0x4, [0x7f, 0x9]}}) r7 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r7, &(0x7f00000005c0)=@in6={0x21, 0x4, 0x2, 0x24, {0xa, 0x4e21, 0x2c1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}, 0x24) r8 = dup3(r2, r0, 0x80000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314, 0xc00000}], 0x0, 0x0, 0x0}) 1.913289278s ago: executing program 2 (id=10113): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'binfmt_misc\x00', 0x3a, '[-', 0x3a, './file0', 0x3a, [0x50]}, 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000007c0)='binfmt_misc\x00', 0x3000000, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, 0x0) 1.849216547s ago: executing program 2 (id=10116): r0 = socket$kcm(0x10, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4078, 0xe97}], 0x1, 0x42, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000b5000040"]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)={0xd4, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x87, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x5d, "d54d82651ff8950cc5fd220d97919f3ce597e0ed69650949bea81999b8c3dbebbcb7ebeb8ab617fb15600f9b01a9f0d70a6338d5958ba30786835b15a75c87448602a361e03342fe226c88d04b57eae893c386e3d6509815be725dca98"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x100}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r10, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9041c14080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000080)=0x1) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000015c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f00000004c0)={0xa8, r8, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ee83ba0463"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "5981032d321b8f30003f4b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x5) r11 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) bind$packet(r13, &(0x7f00000001c0)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000440)={0xffffffffffffffff, 0x8, 0x4, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x32}, @loopback}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 1.144586136s ago: executing program 7 (id=10121): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000000000000000000000000ffff7f000092c0cc3f00000000f40000000000ffff010000020000040000000000c00c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="b96b6e0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000340)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f00000005c0)="ed0308b479b24d", 0x7}, {&(0x7f00000041c0)="924a466bf684b376", 0x8}], 0x3) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980902, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x52, 0x1, 0x0, 0x10000, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9d9f19fda187767b5fa1c8c3422169d7764cc03047759a73eec3c3f659f0c2fc7d7b10d240bf217bf7dbcdb429f6a4326635dda219ace7786fa8"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="390000000a0a015dda1f6567dc080000000000000000020000000900010073797230000000000900020073797a3100000000"], 0x2c}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x110, 0xffffffffffffffff, 0x9c66e000) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_pressure(r7, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) read(r8, &(0x7f0000001240)=""/268, 0x10c) mremap(&(0x7f00007fd000/0xe000)=nil, 0xe000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48011}, 0x0) 1.142953637s ago: executing program 6 (id=10122): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a00", @ANYRES16], 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0x7f, "0cf1809ecc2bc901afd744dfe302272213e5ce75e7bbfe478a6fc6e98ec737b3e859c39ea89975e35c3b47aa5c5577b8237eeb7237ca17d3062cdb944d44e0e3dd0054f6926a81c86f2b2afab5c2ff7c20f0bf7c38ac27c49b644d9a54fed14917f5c6cb38f6ea316127ebf05d1b1526104d2f102f36e8d08fcffea386bd11"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0xfffffffc, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x1, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x6, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0xffffffff, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x1, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x6, 0x5, 0x0, 0xfffffffe]}, 0x45c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x2}, {0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1}, {0x2, 0x1, 0x1}}], 0x28) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 938.278737ms ago: executing program 7 (id=10123): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') syz_usb_connect(0x3, 0x24, &(0x7f0000004300)=ANY=[@ANYBLOB="120100024777d820490d0070b59701020301090212000109058005090467260045b99e53"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) pread64(r1, &(0x7f0000000140)=""/106, 0xfffffffffffffcb0, 0x1000007) 890.986735ms ago: executing program 2 (id=10124): r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x6, 0xc8, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x6, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x81}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0xd, "c6c5aa"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0x18, "4c86e08f8ed1"}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0xe, "c4acdc"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x4, 0x4, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7, 0x2, "d737", "cc"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3c, 0x3, 0x0, 0x81, "e287"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x5}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x20}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x2, 0x9, 0x0, "f9d66a", 'mt'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x9, 0xf1, {0x7, 0x25, 0x1, 0x81, 0xab, 0x6}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xc9, 0x40, 0x0, 0x8, 0x4}, 0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="050fb800039810016359311f8ac3980c9ffc5ea1e1c482aaefb194ac17ed3d310d45126444626d92ab74c83060482b6c74f57df764686616a5f080cdd9d9becc4702c578f365a59d51fa91923592c76346a62eae4fac1d28c1c29f7edb07e25378b08ce021daa096610bc9b7b26261f20f08418762fa2e256f492d0aa98c54ea956492cbcdf797c4dff97b6e815b7bf4a1324e303b08da3be539681ea407100210840101141004030000000000000000be97349b8ac6eadf"], 0x2, [{0xb, &(0x7f00000000c0)=@string={0xb, 0x3, "190d06bca295a423d5"}}, {0x8, &(0x7f0000000340)=@string={0x8, 0x3, "2694c733b81d"}}]}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1c, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0xffffe000) r6 = signalfd4(r1, &(0x7f00000003c0)={[0xfffffffffffffffb]}, 0x8, 0x40000) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000400)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141381) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) fadvise64(r4, 0x9154, 0x5, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) 628.549554ms ago: executing program 4 (id=10125): r0 = socket$inet(0x2, 0x4, 0x1dc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r2, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c00040000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x29, 0x0, 0xee01}, 0x6e6bb9}}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) 542.248228ms ago: executing program 4 (id=10126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r3, 0x2, 0xfffffff6, 0x0, 0xff00, 0x3, 0x40, 0x0, {r3, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x49, 0xc, 0x2, 0x8001}}, &(0x7f00000003c0)=0xb0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'veth1_to_team\x00', {0x2, 0x4e23, @broadcast}}) 541.879063ms ago: executing program 4 (id=10127): unshare(0x22020600) unshare(0x10010000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x134, 0x3d, 0x800, 0x0, 0x0, {0x4, 0x7c}, [@generic="fdd4b2b3c880fad468b3cb028d1a", @nested={0x102, 0x1, 0x0, 0x1, [@generic="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"]}, @nested={0xc, 0xcc, 0x0, 0x1, [@typed={0x8, 0xee, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x134}}, 0xc000) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) unshare(0x20980) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x400) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setreuid(0x0, 0xee00) setpriority(0x1, 0x0, 0xffffffffffffffff) r2 = fsmount(r1, 0x0, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f00000011c0)='cgroup.stat\x00', 0x5000000, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) readv(r3, &(0x7f00000012c0), 0x0) 507.780186ms ago: executing program 4 (id=10128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x40000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x10) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 430.651856ms ago: executing program 4 (id=10129): r0 = fsopen(&(0x7f0000000040)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 377.984593ms ago: executing program 6 (id=10130): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0x2}, 0x1) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000080)='2\x00', 0x2) sendfile(r0, r0, 0x0, 0x2002) modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) 377.520775ms ago: executing program 4 (id=10131): syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x48, 0x60, 0x72, 0x8, 0x471, 0x602, 0xb7c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x1, 0x0, 0xed, 0xf2, 0xb5}}]}}]}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) 359.006919ms ago: executing program 7 (id=10132): r0 = syz_socket_connect_nvme_tcp() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000030100c0"]) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) close(r0) 342.847745ms ago: executing program 6 (id=10133): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0xfff, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000000)=""/112) ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000005e00275399712f616aff0100005f490000000000000000000000000000000000020000200000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 257.825344ms ago: executing program 7 (id=10134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b040000000000000000020000054400040028000180080001006f7366001c0002800800014000000000080001400000001605000200c000001d18000180080001006e6174000c00028008000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4000040) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x40}, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, &(0x7f00000000c0)) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0xfffffffffffffe4d, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x6, 0x40200) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x63b189f4fb4d8e66, 0x11, 0x3, 0xa, 0x1000, 0x78, &(0x7f0000000940)="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"}) 257.625354ms ago: executing program 6 (id=10135): openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x4000000000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 249.468408ms ago: executing program 7 (id=10136): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xe8b, 0xffffffffffffffff, 'id1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000080)={{0x5, 0x6, 0x5, 0x3, '\x00', 0x84}, 0x0, [0x2, 0xf, 0x9, 0x1, 0xff, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0xffffffff, 0x10, 0xb68, 0x1, 0xb0, 0x5b2d, 0x7ea, 0x2, 0xd7a, 0x6, 0x900, 0x40, 0x8, 0xc9a, 0x8, 0x3, 0xc638, 0x4, 0x7fffffff, 0xfffffffffffffffd, 0x6, 0xfffffffffffff648, 0xfffffffffffffffc, 0x17, 0x9, 0xc25, 0x9, 0x4, 0x67eb8da6, 0xad7, 0x7f, 0x2, 0x8, 0x4c6b, 0x6, 0xffffffffffffff8a, 0x9, 0x69, 0x2, 0x1, 0x0, 0xe836, 0x400, 0x1, 0x3, 0xfffffffffffffffe, 0x5, 0xd, 0x8c7d, 0xd, 0x462, 0x1, 0x6, 0xf3dc, 0x101, 0x10000, 0x4, 0x2, 0x7, 0xe, 0x416cc357, 0x2, 0x4, 0xa, 0x1, 0x7, 0xab8, 0x2, 0x0, 0x5, 0x1ff, 0x8, 0x0, 0x2, 0x7, 0xc0a, 0x72f6, 0xfffffffffffff128, 0x72, 0x8, 0x2, 0xf5b00000000000, 0x9, 0x1564, 0x2e, 0x40, 0x3, 0x6f4, 0x4, 0x0, 0x8, 0x5, 0x5, 0xf97, 0xf69, 0x1, 0x8000000000000000, 0x81, 0x8, 0x9, 0xb433, 0x9, 0x9, 0x7, 0x14, 0x9, 0xe, 0x8, 0x0, 0x7, 0x7, 0x8, 0x2604, 0x8, 0x0, 0x4f, 0xb, 0x200, 0x8]}) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000840)=[{{&(0x7f00000006c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0xccd}}], 0x18}}], 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)) 208.058173ms ago: executing program 6 (id=10137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x4c, 0x0, "9850aefd374fa3fc96567405ccb772853e8109351ec3c12b48638e2f762b40660780cb75ff882832d6a1c6c20a4cb282ea619fda84db39d95685779f5e954229f79180bbeeb9939d81af21c28840e280"}, 0xd8) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0xb0, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_b, @from_mac, {0x4, 0x3}}, 0x2, @random, 0x8086, @val, @val, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x2, 0xc, 0xff56}}, @val={0x6, 0x2, 0x46}, @void, @val={0x25, 0x3, {0x0, 0x0, 0xf5}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x7, 0x0, {0x8001, 0xff, 0x0, 0x55, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x3, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4}}, @void}}, @NL80211_ATTR_PROBE_RESP={0xa, 0x91, "ba569c8a7dab"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x101}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 153.87011ms ago: executing program 7 (id=10138): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a00", @ANYRES16], 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0x7f, "0cf1809ecc2bc901afd744dfe302272213e5ce75e7bbfe478a6fc6e98ec737b3e859c39ea89975e35c3b47aa5c5577b8237eeb7237ca17d3062cdb944d44e0e3dd0054f6926a81c86f2b2afab5c2ff7c20f0bf7c38ac27c49b644d9a54fed14917f5c6cb38f6ea316127ebf05d1b1526104d2f102f36e8d08fcffea386bd11"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0xfffffffc, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x1, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x6, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0xffffffff, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x1, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x6, 0x5, 0x0, 0xfffffffe]}, 0x45c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x2}, {0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1}, {0x2, 0x1, 0x1}}], 0x28) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 0s ago: executing program 2 (id=10139): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000340)='wlan0\x00', &(0x7f0000000380)=@default_ibss_ssid, 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x43, 0x1, 0x0, "d02066fe6edd9a2a01000100565c000f30807278f8983c3c0a31965ebd9ca8ac", 0x31364d4e}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1, 0x5, 0x3}) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x204480, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000300)) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0xd}, 0x1c) fcntl$dupfd(r3, 0x0, r3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x141000, 0x140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) finit_module(r5, 0x0, 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f00000003c0)=0xfffffff8, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRES16=r2]) syz_80211_inject_frame(&(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="8400530008b49cae690108020100c7000101902200"], 0x14) syz_80211_join_ibss(&(0x7f0000000180)='wlan0\x00', &(0x7f00000001c0)=@random="a718b806c9d1f62ea0afe95fc224f4ef4cc9cb8c072b", 0x16, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 4.5128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d578eec9 code=0x7ff00000 [ 589.987547][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.099724][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.819017][T19060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5143'. [ 591.932883][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 591.932903][ T30] audit: type=1800 audit(1759148033.719:229): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5144" name="file1" dev="tmpfs" ino=1127 res=0 errno=0 [ 592.062618][T19050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.212157][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.584590][T19094] netlink: 'syz.4.5155': attribute type 10 has an invalid length. [ 592.600124][T19094] @ÿ: left promiscuous mode [ 592.611502][T19094] @ÿ: entered promiscuous mode [ 592.620325][T19094] team0: Device 1@ÿ failed to register rx_handler [ 592.926630][T19108] netlink: 'syz.6.5163': attribute type 10 has an invalid length. [ 592.957479][T19108] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5163'. [ 592.978942][T19108] team0: Port device geneve0 added [ 593.324151][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 593.354736][T19119] overlayfs: failed to clone upperpath [ 593.476709][T19122] overlayfs: failed to clone upperpath [ 593.871631][T19142] tipc: Enabling of bearer rejected, failed to enable media [ 593.906379][T19142] tipc: Enabling of bearer rejected, failed to enable media [ 594.436178][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.548353][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 596.028490][T19198] netlink: 'syz.6.5198': attribute type 3 has an invalid length. [ 596.036575][T19198] netlink: 'syz.6.5198': attribute type 3 has an invalid length. [ 596.660667][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 597.739836][T19231] netlink: 'syz.7.5214': attribute type 4 has an invalid length. [ 597.772620][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.884949][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 599.979783][T19259] overlayfs: failed to clone upperpath [ 599.996957][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.385249][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5229'. [ 601.109112][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.221282][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.968877][T19322] syz_tun: entered allmulticast mode [ 603.333444][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.445605][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.975230][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5259'. [ 605.258015][T19379] netlink: 'syz.2.5264': attribute type 4 has an invalid length. [ 605.557739][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 606.669978][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 606.751954][T19411] netlink: 'syz.4.5276': attribute type 4 has an invalid length. [ 607.782110][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 608.894384][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 610.006529][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 611.118610][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.230851][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.737319][T19527] lo speed is unknown, defaulting to 1000 [ 612.751831][T19527] lo speed is unknown, defaulting to 1000 [ 612.766538][T19527] lo speed is unknown, defaulting to 1000 [ 613.038113][T19527] infiniband syz0: set active [ 613.043344][T19527] infiniband syz0: added lo [ 613.099818][T19527] RDS/IB: syz0: added [ 613.107224][T16457] lo speed is unknown, defaulting to 1000 [ 613.116838][T19527] lo speed is unknown, defaulting to 1000 [ 613.342947][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 613.418812][T19527] lo speed is unknown, defaulting to 1000 [ 613.954920][T19527] lo speed is unknown, defaulting to 1000 [ 614.226478][T19527] lo speed is unknown, defaulting to 1000 [ 614.262501][T19569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.437966][T19527] lo speed is unknown, defaulting to 1000 [ 614.455080][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 614.894261][T19576] could not allocate digest TFM handle cryptd(streebog512-generic) [ 615.567432][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.588941][T19613] overlayfs: failed to clone upperpath [ 615.726260][T19617] overlayfs: failed to clone upperpath [ 616.679472][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 617.362713][T19666] lo speed is unknown, defaulting to 1000 [ 617.375685][T19667] netlink: 'syz.6.5372': attribute type 10 has an invalid length. [ 617.417578][T19671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.791576][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.301967][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5380'. [ 618.706783][T19705] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 618.713406][T19705] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 618.728207][T19705] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5385'. [ 618.738357][T19705] hsr_slave_0: left promiscuous mode [ 618.745354][T19705] hsr_slave_1: left promiscuous mode [ 618.903909][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.077183][T19713] overlayfs: failed to clone upperpath [ 619.302531][T19726] netlink: 'syz.2.5395': attribute type 10 has an invalid length. [ 619.382765][T19726] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 619.393913][T19726] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 619.550061][T19733] 9p: Unknown Cache mode or invalid value fs [ 619.660920][T19735] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 620.016331][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.302181][T19756] overlayfs: failed to clone upperpath [ 621.128191][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 622.250920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 622.470712][T19798] netlink: 'syz.4.5422': attribute type 10 has an invalid length. [ 622.479644][T19798] syz_tun: left allmulticast mode [ 622.501450][T19798] bridge0: port 3(syz_tun) entered disabled state [ 622.560558][T19798] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 623.352354][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.464545][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.822390][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.576684][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.300373][T19885] delete_channel: no stack [ 626.433891][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 626.688920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.826158][ T30] audit: type=1107 audit(1759148066.345:230): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 627.071513][T19903] netlink: 826 bytes leftover after parsing attributes in process `syz.4.5463'. [ 627.801019][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 628.020159][T19916] Invalid ELF header magic: != ELF [ 628.614302][ T30] audit: type=1326 audit(1759148068.019:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19924 comm="syz.4.5469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76d578eec9 code=0x0 [ 628.913152][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.207117][T19941] vxcan1: entered allmulticast mode [ 630.025455][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 630.703072][ T53] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 630.932971][T19988] netlink: 'syz.2.5494': attribute type 10 has an invalid length. [ 630.975368][T19988] team0: Device veth0_vlan failed to register rx_handler [ 630.984546][ T53] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 631.137459][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.249626][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.839594][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5538'. [ 632.865328][T20074] netlink: 'syz.6.5538': attribute type 10 has an invalid length. [ 632.874018][T20074] veth0_vlan: left promiscuous mode [ 632.882959][T20074] veth0_vlan: entered promiscuous mode [ 632.895814][T20074] team0: Device veth0_vlan failed to register rx_handler [ 633.067494][T20081] netlink: 'syz.7.5542': attribute type 1 has an invalid length. [ 633.093083][T20081] netlink: 'syz.7.5542': attribute type 1 has an invalid length. [ 633.105695][T20081] netlink: 'syz.7.5542': attribute type 1 has an invalid length. [ 633.361941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 633.479005][ T53] Bluetooth: hci0: unexpected event for opcode 0x200f [ 633.789037][ T53] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 634.380184][T20162] netlink: 'syz.4.5580': attribute type 21 has an invalid length. [ 634.404816][T20162] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5580'. [ 634.433603][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5581'. [ 634.473924][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 634.576338][T20169] netdevsim netdevsim2: Direct firmware load for x failed with error -2 [ 634.585507][T20169] netdevsim netdevsim2: Falling back to sysfs fallback for: x [ 634.967155][T20182] nftables ruleset with unbound set [ 635.063478][T20188] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5591'. [ 635.210452][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5593'. [ 635.586092][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 635.802544][T20228] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5611'. [ 635.873748][T20233] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5612'. [ 636.198001][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.407796][T20268] ptrace attach of ""[20271] was attempted by "./syz-executor exec"[20268] [ 636.530328][T20279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5635'. [ 636.530446][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5636'. [ 636.568744][T20278] netlink: 'syz.7.5636': attribute type 10 has an invalid length. [ 636.615707][T20278] veth0_vlan: left promiscuous mode [ 636.644819][T20278] veth0_vlan: entered promiscuous mode [ 636.666303][T20278] team0: Device veth0_vlan failed to register rx_handler [ 636.698311][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 637.054757][T20303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5648'. [ 637.081550][T20303] netlink: 'syz.7.5648': attribute type 10 has an invalid length. [ 637.092180][T20303] veth0_vlan: left promiscuous mode [ 637.099503][T20303] veth0_vlan: entered promiscuous mode [ 637.116981][T20303] team0: Device veth0_vlan failed to register rx_handler [ 637.300132][T20318] 0·: renamed from hsr0 (while UP) [ 637.340547][T20318] 0·: entered allmulticast mode [ 637.354918][T20318] hsr_slave_0: entered allmulticast mode [ 637.360649][T20318] hsr_slave_1: entered allmulticast mode [ 637.368102][T20318] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 637.490293][T20326] netlink: 'syz.7.5658': attribute type 10 has an invalid length. [ 637.498658][T20326] veth0_vlan: left promiscuous mode [ 637.505607][T20326] veth0_vlan: entered promiscuous mode [ 637.520720][T20326] team0: Device veth0_vlan failed to register rx_handler [ 637.538823][T20331] netlink: 'syz.6.5659': attribute type 33 has an invalid length. [ 637.558656][T20330] netlink: 'syz.4.5660': attribute type 10 has an invalid length. [ 637.567434][T20330] @ÿ: left promiscuous mode [ 637.587017][T20330] @ÿ: entered promiscuous mode [ 637.593597][T20330] team0: Device 1@ÿ failed to register rx_handler [ 637.756958][T20345] netlink: 'syz.4.5666': attribute type 10 has an invalid length. [ 637.765676][T20345] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 637.810420][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 638.379326][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.547673][T20395] Set syz0 is full, maxelem 0 reached [ 638.661494][T20403] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 638.744702][T20407] __nla_validate_parse: 4 callbacks suppressed [ 638.744724][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5697'. [ 638.779235][T20407] openvswitch: netlink: Message has 3 unknown bytes. [ 638.922967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 639.310269][T20449] netlink: 'syz.7.5718': attribute type 10 has an invalid length. [ 639.318430][T20449] lo: entered promiscuous mode [ 639.323562][T20449] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 639.389861][T20453] netlink: 'syz.7.5720': attribute type 10 has an invalid length. [ 639.398321][T20453] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5720'. [ 639.411136][T20453] dummy0: entered promiscuous mode [ 639.420451][T20453] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 639.826168][T20468] netlink: 'syz.2.5727': attribute type 10 has an invalid length. [ 639.836054][T20468] 0·: left allmulticast mode [ 639.840825][T20468] hsr_slave_0: left allmulticast mode [ 639.858322][T20468] hsr_slave_1: left allmulticast mode [ 639.885737][T20468] bond0: (slave 70·): The slave device specified does not support setting the MAC address [ 639.917807][T20468] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 639.936473][T20468] bond0: (slave 70·): Error -22 calling dev_set_mtu [ 640.034933][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 640.152447][T20486] netlink: 'syz.7.5735': attribute type 4 has an invalid length. [ 640.179973][T20486] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5735'. [ 640.237842][T20486] : renamed from bond0 (while UP) [ 640.382960][T20500] dvmrp1: entered allmulticast mode [ 640.413627][T20502] team0: Device bond0 is already an upper device of the team interface [ 640.624030][T20515] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5751'. [ 640.946953][T20540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5762'. [ 640.973125][T20540] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 641.147052][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 641.334298][T20566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5776'. [ 641.661521][T20588] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5787'. [ 641.901815][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5796'. [ 641.933400][T20605] validate_nla: 2 callbacks suppressed [ 641.933418][T20605] netlink: 'syz.7.5796': attribute type 10 has an invalid length. [ 641.969202][T20605] veth0_vlan: left promiscuous mode [ 641.976043][T20605] veth0_vlan: entered promiscuous mode [ 641.989704][T20605] team0: Device veth0_vlan failed to register rx_handler [ 642.259242][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.352502][T20634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5809'. [ 642.432965][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5811'. [ 642.445037][T20639] netlink: 'syz.4.5811': attribute type 10 has an invalid length. [ 642.453178][T20639] @ÿ: left promiscuous mode [ 642.459110][T20639] @ÿ: entered promiscuous mode [ 642.467653][T20639] team0: Device 1@ÿ failed to register rx_handler [ 642.474802][T20643] netlink: 'syz.2.5809': attribute type 10 has an invalid length. [ 642.514738][T20643] team0: Device veth0_vlan failed to register rx_handler [ 642.767908][T20660] netlink: 'syz.4.5819': attribute type 10 has an invalid length. [ 642.788366][T20660] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 642.804635][T20660] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 642.838577][T20660] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 642.965456][T20670] netlink: 'syz.4.5824': attribute type 10 has an invalid length. [ 642.974260][T20670] @ÿ: left promiscuous mode [ 642.984190][T20670] @ÿ: entered promiscuous mode [ 642.991163][T20670] team0: Device 1@ÿ failed to register rx_handler [ 643.035906][T20674] netlink: 'syz.6.5825': attribute type 10 has an invalid length. [ 643.062327][T20674] veth0_vlan: left promiscuous mode [ 643.068979][T20674] veth0_vlan: entered promiscuous mode [ 643.085987][T20674] team0: Device veth0_vlan failed to register rx_handler [ 643.254380][ T53] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 643.368291][T20690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 643.377463][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 643.583285][T20709] netlink: 'syz.2.5836': attribute type 10 has an invalid length. [ 643.608048][T20709] team0: Device veth0_vlan failed to register rx_handler [ 644.101640][T20741] netlink: 'syz.4.5855': attribute type 10 has an invalid length. [ 644.116891][T20741] @ÿ: left promiscuous mode [ 644.126848][T20741] @ÿ: entered promiscuous mode [ 644.157060][T20741] team0: Device 1@ÿ failed to register rx_handler [ 644.483568][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.560713][T20772] __nla_validate_parse: 5 callbacks suppressed [ 644.560736][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5867'. [ 644.591711][T20775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5870'. [ 644.742448][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5872'. [ 645.029571][T20804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5882'. [ 645.365272][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5892'. [ 645.385410][T20825] netlink: 'syz.4.5892': attribute type 10 has an invalid length. [ 645.393991][T20825] @ÿ: left promiscuous mode [ 645.401903][T20825] @ÿ: entered promiscuous mode [ 645.410012][T20825] team0: Device 1@ÿ failed to register rx_handler [ 645.595782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 645.673957][T20843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.682127][T20843] IPv6: NLM_F_CREATE should be set when creating new route [ 645.689412][T20843] IPv6: NLM_F_CREATE should be set when creating new route [ 645.696729][T20843] IPv6: NLM_F_CREATE should be set when creating new route [ 645.833578][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5904'. [ 645.869350][T20855] netlink: 'syz.4.5905': attribute type 29 has an invalid length. [ 645.923317][T20859] team0: Device veth0_vlan failed to register rx_handler [ 646.505593][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5917'. [ 646.536829][T20885] veth0_vlan: left promiscuous mode [ 646.550703][T20885] veth0_vlan: entered promiscuous mode [ 646.567366][T20885] team0: Device veth0_vlan failed to register rx_handler [ 646.708109][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 647.820120][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 648.190781][T20944] validate_nla: 3 callbacks suppressed [ 648.190806][T20944] netlink: 'syz.2.5944': attribute type 1 has an invalid length. [ 648.244383][T20944] netlink: 'syz.2.5944': attribute type 1 has an invalid length. [ 648.291506][T20944] netlink: 'syz.2.5944': attribute type 1 has an invalid length. [ 648.606636][T20969] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 648.827054][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5963'. [ 648.932185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.300067][T21013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5976'. [ 649.397470][T21019] xt_l2tp: invalid flags combination: 8 [ 649.587503][T21030] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 649.671147][T21036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5987'. [ 650.044361][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 650.117122][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6000'. [ 650.296695][T21076] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 650.548426][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6010'. [ 650.675548][T21099] netlink: 'syz.4.6013': attribute type 2 has an invalid length. [ 650.694329][T21099] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6013'. [ 651.167225][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 651.371470][T21126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6024'. [ 651.406340][T21126] netlink: 'syz.7.6024': attribute type 10 has an invalid length. [ 651.416278][T21126] veth0_vlan: left promiscuous mode [ 651.423122][T21126] veth0_vlan: entered promiscuous mode [ 651.433556][T21126] team0: Device veth0_vlan failed to register rx_handler [ 651.804457][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6035'. [ 651.816501][T21149] netlink: 'syz.2.6034': attribute type 1 has an invalid length. [ 651.833420][T21150] netlink: 'syz.6.6035': attribute type 10 has an invalid length. [ 651.842211][T21150] veth0_vlan: left promiscuous mode [ 651.848867][T21150] veth0_vlan: entered promiscuous mode [ 651.858360][T21150] team0: Device veth0_vlan failed to register rx_handler [ 651.958651][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6038'. [ 652.078204][T21165] netlink: 'syz.2.6038': attribute type 10 has an invalid length. [ 652.098556][T21165] team0: Device veth0_vlan failed to register rx_handler [ 652.120958][T21167] netlink: 129704 bytes leftover after parsing attributes in process `syz.6.6042'. [ 652.268833][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.387103][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 652.494980][T21190] netlink: 'syz.2.6047': attribute type 10 has an invalid length. [ 652.513682][T21190] team0: Device veth0_vlan failed to register rx_handler [ 652.700107][T21200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6054'. [ 653.030888][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6061'. [ 653.046587][T21214] netlink: 'syz.6.6061': attribute type 10 has an invalid length. [ 653.055708][T21214] veth0_vlan: left promiscuous mode [ 653.062860][T21214] veth0_vlan: entered promiscuous mode [ 653.072280][T21214] team0: Device veth0_vlan failed to register rx_handler [ 653.381060][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 653.937122][T21248] netlink: 'syz.2.6071': attribute type 10 has an invalid length. [ 653.970454][T21248] team0: Device veth0_vlan failed to register rx_handler [ 654.493007][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 654.588002][T21278] netlink: 'syz.7.6086': attribute type 10 has an invalid length. [ 654.596838][T21278] veth0_vlan: left promiscuous mode [ 654.604540][T21278] veth0_vlan: entered promiscuous mode [ 654.614249][T21278] team0: Device veth0_vlan failed to register rx_handler [ 655.556642][T21339] __nla_validate_parse: 2 callbacks suppressed [ 655.556657][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6114'. [ 655.581487][T21339] netlink: 'syz.6.6114': attribute type 10 has an invalid length. [ 655.590056][T21339] veth0_vlan: left promiscuous mode [ 655.596698][T21339] veth0_vlan: entered promiscuous mode [ 655.604697][T21339] team0: Device veth0_vlan failed to register rx_handler [ 655.615919][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 656.717511][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 657.665001][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6145'. [ 657.676976][T21409] netlink: 'syz.6.6145': attribute type 10 has an invalid length. [ 657.687553][T21409] veth0_vlan: left promiscuous mode [ 657.694187][T21409] veth0_vlan: entered promiscuous mode [ 657.703298][T21409] team0: Device veth0_vlan failed to register rx_handler [ 657.773052][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6146'. [ 657.829645][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 657.862133][T21415] netlink: 'syz.2.6146': attribute type 10 has an invalid length. [ 657.886417][T21415] team0: Device veth0_vlan failed to register rx_handler [ 658.242327][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6156'. [ 658.258767][T21438] netlink: 'syz.6.6156': attribute type 10 has an invalid length. [ 658.268185][T21438] veth0_vlan: left promiscuous mode [ 658.274873][T21438] veth0_vlan: entered promiscuous mode [ 658.283809][T21438] team0: Device veth0_vlan failed to register rx_handler [ 658.314108][T21442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6153'. [ 658.500768][T21448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6158'. [ 658.588603][T21455] netlink: 'syz.2.6158': attribute type 10 has an invalid length. [ 658.628076][T21455] team0: Device veth0_vlan failed to register rx_handler [ 658.646595][T21459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6162'. [ 658.718506][T21461] @: renamed from vlan0 [ 658.870635][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6168'. [ 658.899736][T21472] netlink: 'syz.7.6168': attribute type 10 has an invalid length. [ 658.908251][T21472] veth0_vlan: left promiscuous mode [ 658.915962][T21472] veth0_vlan: entered promiscuous mode [ 658.925562][T21472] team0: Device veth0_vlan failed to register rx_handler [ 658.941825][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 659.128481][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6173'. [ 659.143053][T21483] netlink: 'syz.4.6173': attribute type 10 has an invalid length. [ 659.154191][T21483] @ÿ: left promiscuous mode [ 659.165616][T21483] @ÿ: entered promiscuous mode [ 659.180735][T21483] team0: Device 1@ÿ failed to register rx_handler [ 659.355132][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6180'. [ 659.378084][T21498] netlink: 'syz.4.6180': attribute type 10 has an invalid length. [ 659.386898][T21498] @ÿ: left promiscuous mode [ 659.393592][T21498] @ÿ: entered promiscuous mode [ 659.407140][T21498] team0: Device 1@ÿ failed to register rx_handler [ 659.604460][T21513] netlink: 'syz.4.6186': attribute type 10 has an invalid length. [ 659.612681][T21513] @ÿ: left promiscuous mode [ 659.619499][T21513] @ÿ: entered promiscuous mode [ 659.626577][T21513] team0: Device 1@ÿ failed to register rx_handler [ 659.816739][ T53] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 659.996765][T21528] netlink: zone id is out of range [ 660.003166][T21528] netlink: zone id is out of range [ 660.008600][T21528] netlink: zone id is out of range [ 660.064521][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 660.087399][T21528] netlink: set zone limit has 4 unknown bytes [ 661.075166][T21566] __nla_validate_parse: 1 callbacks suppressed [ 661.075187][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6211'. [ 661.096585][T21566] netlink: 'syz.6.6211': attribute type 10 has an invalid length. [ 661.108553][T21566] veth0_vlan: left promiscuous mode [ 661.115809][T21566] veth0_vlan: entered promiscuous mode [ 661.124425][T21566] team0: Device veth0_vlan failed to register rx_handler [ 661.166126][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 661.620954][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6222'. [ 661.699457][T21602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6224'. [ 661.720281][T21602] netlink: 'syz.4.6224': attribute type 10 has an invalid length. [ 661.729385][T21602] @ÿ: left promiscuous mode [ 661.737091][T21602] @ÿ: entered promiscuous mode [ 661.744650][T21602] team0: Device 1@ÿ failed to register rx_handler [ 662.273358][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6234'. [ 662.288868][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 662.314500][T21628] netlink: 'syz.7.6234': attribute type 10 has an invalid length. [ 662.324669][T21628] veth0_vlan: left promiscuous mode [ 662.332031][T21628] veth0_vlan: entered promiscuous mode [ 662.340811][T21628] team0: Device veth0_vlan failed to register rx_handler [ 662.872328][T21654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6245'. [ 662.903664][T21657] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6246'. [ 663.016042][T21654] netlink: 'syz.2.6245': attribute type 10 has an invalid length. [ 663.031410][T21654] team0: Device veth0_vlan failed to register rx_handler [ 663.291730][T21674] netlink: 'syz.6.6253': attribute type 2 has an invalid length. [ 663.300902][T21674] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6253'. [ 663.390466][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 663.499878][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6256'. [ 663.694071][T21689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6259'. [ 663.730043][T21689] netlink: 'syz.7.6259': attribute type 10 has an invalid length. [ 663.739094][T21689] veth0_vlan: left promiscuous mode [ 663.746882][T21689] veth0_vlan: entered promiscuous mode [ 663.756399][T21689] team0: Device veth0_vlan failed to register rx_handler [ 664.192802][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6270'. [ 664.215593][T21714] netlink: 'syz.7.6270': attribute type 10 has an invalid length. [ 664.223813][T21714] veth0_vlan: left promiscuous mode [ 664.232011][T21714] veth0_vlan: entered promiscuous mode [ 664.240772][T21714] team0: Device veth0_vlan failed to register rx_handler [ 664.392663][T21719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.499366][T21719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.510128][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 664.616655][T21719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.739555][T21719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.852425][T21738] netlink: 'syz.4.6281': attribute type 10 has an invalid length. [ 664.860921][T21738] @ÿ: left promiscuous mode [ 664.867426][T21738] @ÿ: entered promiscuous mode [ 664.874991][T21738] team0: Device 1@ÿ failed to register rx_handler [ 664.945352][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.966470][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.977735][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.005946][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.396966][T21764] netlink: 'syz.4.6292': attribute type 10 has an invalid length. [ 665.405657][T21764] @ÿ: left promiscuous mode [ 665.412414][T21764] @ÿ: entered promiscuous mode [ 665.420757][T21764] team0: Device 1@ÿ failed to register rx_handler [ 665.561011][T21768] netlink: 'syz.4.6294': attribute type 2 has an invalid length. [ 665.584571][T21768] netlink: 'syz.4.6294': attribute type 6 has an invalid length. [ 665.614665][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.381668][T21791] netlink: 'syz.4.6302': attribute type 10 has an invalid length. [ 666.392017][T21791] @ÿ: left promiscuous mode [ 666.398725][T21791] @ÿ: entered promiscuous mode [ 666.406092][T21791] team0: Device 1@ÿ failed to register rx_handler [ 666.547241][T21795] __nla_validate_parse: 1 callbacks suppressed [ 666.547260][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6304'. [ 666.726802][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.976631][T21813] netlink: 'syz.2.6311': attribute type 10 has an invalid length. [ 666.986431][T21813] team0: Device veth0_vlan failed to register rx_handler [ 667.505093][T21834] netlink: 'syz.4.6322': attribute type 29 has an invalid length. [ 667.524476][T21834] netlink: 'syz.4.6322': attribute type 29 has an invalid length. [ 667.537168][T21834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6322'. [ 667.674832][T21839] netlink: 'syz.4.6324': attribute type 10 has an invalid length. [ 667.683178][T21839] @ÿ: left promiscuous mode [ 667.690376][T21839] @ÿ: entered promiscuous mode [ 667.700752][T21839] team0: Device 1@ÿ failed to register rx_handler [ 667.838933][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 668.240858][T21855] netlink: 'syz.6.6330': attribute type 10 has an invalid length. [ 668.249253][T21855] veth0_vlan: left promiscuous mode [ 668.256676][T21855] veth0_vlan: entered promiscuous mode [ 668.266094][T21855] team0: Device veth0_vlan failed to register rx_handler [ 668.612943][T21864] veth0_vlan: left promiscuous mode [ 668.621175][T21864] veth0_vlan: entered promiscuous mode [ 668.629770][T21864] team0: Device veth0_vlan failed to register rx_handler [ 668.880995][T21760] Set syz1 is full, maxelem 65536 reached [ 668.951297][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 669.090098][T21878] @ÿ: left promiscuous mode [ 669.096067][T21878] @ÿ: entered promiscuous mode [ 669.108802][T21878] team0: Device 1@ÿ failed to register rx_handler [ 669.232869][T21886] @ÿ: left promiscuous mode [ 669.239006][T21886] @ÿ: entered promiscuous mode [ 669.254858][T21886] team0: Device 1@ÿ failed to register rx_handler [ 669.516506][T21901] veth0_vlan: left promiscuous mode [ 669.548479][T21901] veth0_vlan: entered promiscuous mode [ 669.573955][T21901] team0: Device veth0_vlan failed to register rx_handler [ 669.680850][T21912] veth0_vlan: left promiscuous mode [ 669.697097][T21912] veth0_vlan: entered promiscuous mode [ 669.715346][T21912] team0: Device veth0_vlan failed to register rx_handler [ 669.996997][T21924] overlayfs: failed to clone lowerpath [ 670.063451][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 670.195579][T21934] veth0_vlan: left promiscuous mode [ 670.203112][T21934] veth0_vlan: entered promiscuous mode [ 670.225761][T21934] team0: Device veth0_vlan failed to register rx_handler [ 670.410146][T21945] overlayfs: failed to clone upperpath [ 670.422587][T21943] validate_nla: 6 callbacks suppressed [ 670.422605][T21943] netlink: 'syz.7.6368': attribute type 10 has an invalid length. [ 670.496027][T21943] veth0_vlan: left promiscuous mode [ 670.504217][T21943] veth0_vlan: entered promiscuous mode [ 670.515840][T21943] team0: Device veth0_vlan failed to register rx_handler [ 671.175480][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 671.386553][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 671.400714][T21971] netlink: 'syz.4.6380': attribute type 10 has an invalid length. [ 671.408853][T21971] @ÿ: left promiscuous mode [ 671.415997][T21971] @ÿ: entered promiscuous mode [ 671.422617][T21971] team0: Device 1@ÿ failed to register rx_handler [ 671.891279][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6389'. [ 671.908700][T21991] netlink: 'syz.4.6389': attribute type 10 has an invalid length. [ 671.917988][T21991] @ÿ: left promiscuous mode [ 671.924695][T21991] @ÿ: entered promiscuous mode [ 671.931406][T21991] team0: Device 1@ÿ failed to register rx_handler [ 671.959333][ T30] audit: type=1800 audit(1759148108.566:232): pid=21995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6391" name="nullb0" dev="tmpfs" ino=1501 res=0 errno=0 [ 672.012011][ T30] audit: type=1800 audit(1759148108.613:233): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6392" name="nullb0" dev="tmpfs" ino=7216 res=0 errno=0 [ 672.287501][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 672.388786][T22020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6400'. [ 672.403017][T22020] netlink: 'syz.4.6400': attribute type 10 has an invalid length. [ 672.411685][T22020] @ÿ: left promiscuous mode [ 672.418292][T22020] @ÿ: entered promiscuous mode [ 672.425007][T22020] team0: Device 1@ÿ failed to register rx_handler [ 672.579272][T22030] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6404'. [ 672.593058][T22030] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 672.768265][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6411'. [ 672.782136][T22043] netlink: 'syz.6.6411': attribute type 10 has an invalid length. [ 672.790895][T22043] veth0_vlan: left promiscuous mode [ 672.797318][T22043] veth0_vlan: entered promiscuous mode [ 672.806341][T22043] team0: Device veth0_vlan failed to register rx_handler [ 673.399877][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 673.973978][T22089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6425'. [ 673.983414][T22089] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 674.104966][T22093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6428'. [ 674.512444][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 674.561139][T22123] syzkaller0: entered promiscuous mode [ 674.573145][T22123] syzkaller0 (unregistering): left promiscuous mode [ 675.623879][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 676.567923][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6481'. [ 676.736063][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 677.848375][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 677.914890][T22266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6499'. [ 677.940824][T22266] netlink: 'syz.4.6499': attribute type 10 has an invalid length. [ 677.952909][T22266] @ÿ: left promiscuous mode [ 677.963332][T22266] @ÿ: entered promiscuous mode [ 677.970435][T22266] team0: Device 1@ÿ failed to register rx_handler [ 678.749077][T22280] "syz.7.6507" (22280) uses obsolete ecb(arc4) skcipher [ 678.971072][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 679.486517][T22313] "syz.6.6517" (22313) uses obsolete ecb(arc4) skcipher [ 679.810953][T22333] "syz.2.6526" (22333) uses obsolete ecb(arc4) skcipher [ 680.083307][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 681.165318][T22396] overlayfs: failed to clone upperpath [ 681.184667][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 681.536329][T22415] overlayfs: failed to clone upperpath [ 681.548841][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6561'. [ 681.646143][T22420] netlink: 'syz.2.6561': attribute type 10 has an invalid length. [ 681.667560][T22420] team0: Device veth0_vlan failed to register rx_handler [ 682.133538][T22451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6574'. [ 682.146351][T22451] netlink: 'syz.4.6574': attribute type 10 has an invalid length. [ 682.158001][T22451] @ÿ: left promiscuous mode [ 682.164138][T22451] @ÿ: entered promiscuous mode [ 682.171375][T22451] team0: Device 1@ÿ failed to register rx_handler [ 682.296827][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 682.501512][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'. [ 682.514415][T22473] netlink: 'syz.4.6585': attribute type 10 has an invalid length. [ 682.542881][T22473] @ÿ: left promiscuous mode [ 682.548878][T22473] @ÿ: entered promiscuous mode [ 682.558453][T22473] team0: Device 1@ÿ failed to register rx_handler [ 682.685040][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6588'. [ 682.915474][T22501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6597'. [ 682.943207][T22501] netlink: 'syz.7.6597': attribute type 10 has an invalid length. [ 682.951949][T22501] veth0_vlan: left promiscuous mode [ 682.958600][T22501] veth0_vlan: entered promiscuous mode [ 682.967246][T22501] team0: Device veth0_vlan failed to register rx_handler [ 683.070982][T22507] overlayfs: failed to clone lowerpath [ 683.408993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 683.802629][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6618'. [ 683.889247][T22554] netlink: 'syz.2.6618': attribute type 10 has an invalid length. [ 683.905319][T22554] team0: Device veth0_vlan failed to register rx_handler [ 684.260452][T22574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6625'. [ 684.394162][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6628'. [ 684.409341][T22580] netlink: 'syz.6.6628': attribute type 10 has an invalid length. [ 684.419370][T22580] veth0_vlan: left promiscuous mode [ 684.427640][T22580] veth0_vlan: entered promiscuous mode [ 684.438202][T22580] team0: Device veth0_vlan failed to register rx_handler [ 684.532010][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 684.890374][T22602] overlayfs: failed to clone lowerpath [ 685.251789][T22628] overlayfs: failed to clone upperpath [ 685.633313][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 686.756185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 687.584106][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6694'. [ 687.668582][T22730] netlink: 'syz.2.6694': attribute type 10 has an invalid length. [ 687.694259][T22730] team0: Device veth0_vlan failed to register rx_handler [ 687.857631][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 688.682415][T22758] lo speed is unknown, defaulting to 1000 [ 688.810510][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6707'. [ 688.932488][T22769] netlink: 'syz.2.6707': attribute type 10 has an invalid length. [ 688.952697][T22769] team0: Device veth0_vlan failed to register rx_handler [ 688.969840][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 689.051615][T22764] lo speed is unknown, defaulting to 1000 [ 689.477636][T22789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6716'. [ 689.499323][T22789] netlink: 'syz.4.6716': attribute type 10 has an invalid length. [ 689.508000][T22789] @ÿ: left promiscuous mode [ 689.514551][T22789] @ÿ: entered promiscuous mode [ 689.522396][T22789] team0: Device 1@ÿ failed to register rx_handler [ 690.081985][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 690.160714][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6725'. [ 690.185682][T22810] netlink: 'syz.6.6725': attribute type 10 has an invalid length. [ 690.194296][T22810] veth0_vlan: left promiscuous mode [ 690.203327][T22810] veth0_vlan: entered promiscuous mode [ 690.224984][T22810] team0: Device veth0_vlan failed to register rx_handler [ 690.796725][T22826] overlayfs: failed to clone upperpath [ 690.972439][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6737'. [ 690.986650][T22837] netlink: 'syz.6.6737': attribute type 10 has an invalid length. [ 690.995377][T22837] veth0_vlan: left promiscuous mode [ 691.003750][T22837] veth0_vlan: entered promiscuous mode [ 691.013046][T22837] team0: Device veth0_vlan failed to register rx_handler [ 691.194279][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 691.689762][T22874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6750'. [ 691.779308][T22879] netlink: 'syz.2.6750': attribute type 10 has an invalid length. [ 691.798045][T22879] team0: Device veth0_vlan failed to register rx_handler [ 692.292877][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6763'. [ 692.306315][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 692.309676][T22905] netlink: 'syz.4.6763': attribute type 10 has an invalid length. [ 692.323324][T22905] @ÿ: left promiscuous mode [ 692.334758][T22905] @ÿ: entered promiscuous mode [ 692.341683][T22905] team0: Device 1@ÿ failed to register rx_handler [ 693.203049][T22938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6776'. [ 693.216834][T22938] netlink: 'syz.4.6776': attribute type 10 has an invalid length. [ 693.225405][T22938] @ÿ: left promiscuous mode [ 693.232393][T22938] @ÿ: entered promiscuous mode [ 693.239635][T22938] team0: Device 1@ÿ failed to register rx_handler [ 693.418442][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 693.717588][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6785'. [ 693.796038][T22966] netlink: 'syz.2.6785': attribute type 10 has an invalid length. [ 693.805678][T22966] team0: Device veth0_vlan failed to register rx_handler [ 693.870200][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6786'. [ 693.950099][T22968] netlink: 'syz.2.6786': attribute type 10 has an invalid length. [ 693.962532][T22968] team0: Device veth0_vlan failed to register rx_handler [ 694.530622][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 694.805450][T22997] overlayfs: overlapping lowerdir path [ 694.920692][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6799'. [ 694.933651][T23002] netlink: 'syz.4.6799': attribute type 10 has an invalid length. [ 694.943046][T23002] @ÿ: left promiscuous mode [ 694.949318][T23002] @ÿ: entered promiscuous mode [ 694.955948][T23002] team0: Device 1@ÿ failed to register rx_handler [ 695.642795][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 695.745310][T23031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 695.841972][T23034] netlink: 'syz.2.6808': attribute type 10 has an invalid length. [ 695.872684][T23034] team0: Device veth0_vlan failed to register rx_handler [ 696.443627][T23059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6819'. [ 696.754952][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 697.176448][T23092] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 697.353398][T23101] lo speed is unknown, defaulting to 1000 [ 697.867081][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 698.115063][T23114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6838'. [ 698.142175][T23114] netlink: 'syz.6.6838': attribute type 10 has an invalid length. [ 698.162517][T23114] veth0_vlan: left promiscuous mode [ 698.178913][T23114] veth0_vlan: entered promiscuous mode [ 698.192763][T23114] team0: Device veth0_vlan failed to register rx_handler [ 698.708637][T23137] netlink: 'syz.2.6845': attribute type 12 has an invalid length. [ 698.781378][T23141] overlayfs: failed to clone upperpath [ 698.979432][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 699.855250][T23188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6871'. [ 699.864750][T23189] overlayfs: failed to clone upperpath [ 700.091393][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 700.287934][T23212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6882'. [ 701.117647][T23239] overlayfs: failed to clone upperpath [ 701.203725][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 701.658984][T23260] overlayfs: failed to clone upperpath [ 701.874128][ T53] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 701.896262][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.315747][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 702.479486][T23291] overlayfs: failed to clone lowerpath [ 702.492881][T23291] overlayfs: failed to clone lowerpath [ 703.168377][T23313] overlayfs: failed to clone upperpath [ 703.328403][T23321] overlayfs: failed to clone upperpath [ 703.427917][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 703.436572][T23323] overlayfs: failed to clone upperpath [ 704.489985][T23374] tipc: Enabling of bearer rejected, failed to enable media [ 704.540073][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 704.666332][T23385] overlayfs: failed to clone upperpath [ 705.501449][T23411] overlayfs: failed to clone upperpath [ 705.652252][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 705.908173][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6988'. [ 706.165597][ T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 706.175712][ T53] Bluetooth: hci0: Injecting HCI hardware error event [ 706.184919][ T53] Bluetooth: hci0: hardware error 0x00 [ 706.588917][T23444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6991'. [ 706.764392][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 706.826619][T23453] lo speed is unknown, defaulting to 1000 [ 707.628864][T23493] overlayfs: failed to clone upperpath [ 707.717864][T23497] netlink: 'syz.4.7015': attribute type 10 has an invalid length. [ 707.751762][T23497] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 707.876565][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 708.043815][T23514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7022'. [ 708.053928][T23514] bridge_slave_1: left allmulticast mode [ 708.060271][T23514] bridge_slave_1: left promiscuous mode [ 708.066476][T23514] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.090459][T23514] bridge_slave_0: left allmulticast mode [ 708.096190][T23514] bridge_slave_0: left promiscuous mode [ 708.114141][T23514] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.209112][T23522] overlayfs: failed to clone upperpath [ 708.305991][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7028'. [ 708.389968][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 708.988933][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 709.057290][T23548] netlink: 'syz.4.7039': attribute type 10 has an invalid length. [ 709.345210][T23565] overlayfs: failed to clone upperpath [ 710.100865][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 711.013750][T23630] tipc: Enabled bearer , priority 0 [ 711.223703][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 711.698581][T23663] netlink: 'syz.6.7087': attribute type 10 has an invalid length. [ 712.325211][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 712.938872][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7106'. [ 713.167365][T23712] overlayfs: failed to clone upperpath [ 713.437345][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 714.549587][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 714.811803][T23760] overlayfs: failed to clone upperpath [ 715.672408][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 716.773859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 716.782759][T23825] overlayfs: failed to clone upperpath [ 717.312584][T23857] tipc: Enabling of bearer rejected, failed to enable media [ 717.886078][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 718.998236][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 720.098973][T23979] netlink: 'syz.6.7226': attribute type 10 has an invalid length. [ 720.107687][T23979] netlink: 2 bytes leftover after parsing attributes in process `syz.6.7226'. [ 720.117335][T23979] bond0: entered promiscuous mode [ 720.122742][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 720.130511][T23979] bond_slave_0: entered promiscuous mode [ 720.136655][T23979] bond_slave_1: entered promiscuous mode [ 720.586566][T24003] overlayfs: failed to clone upperpath [ 720.603534][T24003] overlayfs: failed to clone lowerpath [ 721.222486][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 722.334661][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 723.208735][T24074] overlayfs: failed to clone upperpath [ 723.234520][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7266'. [ 723.446813][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 723.847328][T24106] netlink: 'syz.6.7281': attribute type 10 has an invalid length. [ 723.855634][T24106] veth0_vlan: left promiscuous mode [ 723.862125][T24106] veth0_vlan: entered promiscuous mode [ 723.872939][T24106] team0: Device veth0_vlan failed to register rx_handler [ 724.214317][T24111] overlayfs: failed to clone upperpath [ 724.415710][T24118] sctp: [Deprecated]: syz.4.7286 (pid 24118) Use of int in max_burst socket option. [ 724.415710][T24118] Use struct sctp_assoc_value instead [ 724.559236][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 724.614004][T24129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7290'. [ 724.627464][T24129] netlink: 'syz.6.7290': attribute type 10 has an invalid length. [ 724.637278][T24129] veth0_vlan: left promiscuous mode [ 724.643932][T24129] veth0_vlan: entered promiscuous mode [ 724.653771][T24129] team0: Device veth0_vlan failed to register rx_handler [ 725.108849][T24146] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7297'. [ 725.247441][T24155] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7300'. [ 725.281820][T24152] lo speed is unknown, defaulting to 1000 [ 725.302969][T24155] netlink: 'syz.7.7300': attribute type 10 has an invalid length. [ 725.318595][T24155] veth0_vlan: left promiscuous mode [ 725.327637][T24155] veth0_vlan: entered promiscuous mode [ 725.342715][T24155] team0: Device veth0_vlan failed to register rx_handler [ 725.686296][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 726.375303][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7313'. [ 726.462831][T24191] netlink: 'syz.2.7313': attribute type 10 has an invalid length. [ 726.472376][T24191] team0: Device veth0_vlan failed to register rx_handler [ 726.783333][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 727.194822][T24208] netlink: 'syz.6.7323': attribute type 10 has an invalid length. [ 727.375656][T24208] veth0_vlan: left promiscuous mode [ 727.390480][T24208] veth0_vlan: entered promiscuous mode [ 727.399580][T24208] team0: Device veth0_vlan failed to register rx_handler [ 727.895639][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 728.004023][T24235] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7332'. [ 728.019160][T24235] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7332'. [ 728.033601][T24235] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7332'. [ 728.045044][T24235] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7332'. [ 728.675456][T24242] netlink: 'syz.4.7334': attribute type 10 has an invalid length. [ 728.712210][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.735877][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.755051][T24245] netlink: 'syz.2.7335': attribute type 10 has an invalid length. [ 728.764617][T24245] team0: Device veth0_vlan failed to register rx_handler [ 729.007644][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 729.158499][T24259] netlink: 'syz.4.7341': attribute type 10 has an invalid length. [ 729.391183][T24270] netlink: 'syz.7.7346': attribute type 10 has an invalid length. [ 729.405290][T24270] veth0_vlan: left promiscuous mode [ 729.420053][T24270] veth0_vlan: entered promiscuous mode [ 729.444297][T24270] team0: Device veth0_vlan failed to register rx_handler [ 729.653876][T24278] overlayfs: failed to clone upperpath [ 730.119837][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 731.037979][T24316] netlink: 'syz.7.7367': attribute type 10 has an invalid length. [ 731.061078][T24316] veth0_vlan: left promiscuous mode [ 731.067675][T24316] veth0_vlan: entered promiscuous mode [ 731.080881][T24316] team0: Device veth0_vlan failed to register rx_handler [ 731.103885][T24322] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7368'. [ 731.139825][T24322] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.231971][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 731.233400][T24322] bridge_slave_0 (unregistering): left allmulticast mode [ 731.266497][T24322] bridge_slave_0 (unregistering): left promiscuous mode [ 731.274006][T24322] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.431067][T24336] /dev/nullb0: Can't lookup blockdev [ 731.622046][T24349] netlink: 'syz.4.7381': attribute type 10 has an invalid length. [ 731.631357][T24349] @ÿ: left promiscuous mode [ 731.637625][T24349] @ÿ: entered promiscuous mode [ 731.645789][T24349] team0: Device 1@ÿ failed to register rx_handler [ 732.017354][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7387'. [ 732.342768][T24369] overlayfs: failed to clone upperpath [ 732.354811][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 732.411941][T24371] netlink: 'syz.4.7391': attribute type 10 has an invalid length. [ 732.420269][T24371] @ÿ: left promiscuous mode [ 732.426660][T24371] @ÿ: entered promiscuous mode [ 732.436932][T24371] team0: Device 1@ÿ failed to register rx_handler [ 733.456367][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 733.739020][T24401] netlink: 'syz.2.7402': attribute type 10 has an invalid length. [ 733.764525][T24401] team0: Device veth0_vlan failed to register rx_handler [ 733.907321][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7407'. [ 734.568438][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 735.429663][T24466] netlink: 'syz.6.7428': attribute type 10 has an invalid length. [ 735.680733][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 735.818876][T24476] fuse: Unknown parameter 'fd0x0000000000000003' [ 736.792868][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 737.891493][T24507] Set syz1 is full, maxelem 65536 reached [ 737.904970][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 739.017083][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 740.129319][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 741.241449][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 741.567445][T24574] netlink: 'syz.6.7474': attribute type 10 has an invalid length. [ 741.712343][T24574] veth0_vlan: left promiscuous mode [ 741.773468][T24574] veth0_vlan: entered promiscuous mode [ 741.790564][T24574] team0: Device veth0_vlan failed to register rx_handler [ 742.353778][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 742.390101][T24603] netlink: 'syz.6.7486': attribute type 10 has an invalid length. [ 742.398974][T24603] veth0_vlan: left promiscuous mode [ 742.405735][T24603] veth0_vlan: entered promiscuous mode [ 742.414371][T24603] team0: Device veth0_vlan failed to register rx_handler [ 743.321260][T24637] netlink: 'syz.2.7497': attribute type 10 has an invalid length. [ 743.357307][T24637] team0: Device veth0_vlan failed to register rx_handler [ 743.466057][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 744.043384][T24657] netlink: 'syz.6.7506': attribute type 10 has an invalid length. [ 744.083028][T24657] team0: Port device dummy0 added [ 744.578219][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 745.701555][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 746.231229][T24711] openvswitch: netlink: Flow actions attr not present in new flow. [ 746.364489][T24722] netlink: 'syz.6.7536': attribute type 10 has an invalid length. [ 746.380242][T24722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7536'. [ 746.390349][T24722] dummy0: entered promiscuous mode [ 746.432246][T24722] team0: Port device dummy0 removed [ 746.439860][T24722] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 746.627256][T24738] netlink: 'syz.6.7545': attribute type 29 has an invalid length. [ 746.802403][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 746.819138][T24749] netlink: 'syz.7.7551': attribute type 10 has an invalid length. [ 746.827732][T24749] veth0_vlan: left promiscuous mode [ 746.834538][T24749] veth0_vlan: entered promiscuous mode [ 746.842033][T24749] team0: Device veth0_vlan failed to register rx_handler [ 747.168802][T24774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7562'. [ 747.254264][T24779] netlink: 'syz.2.7562': attribute type 10 has an invalid length. [ 747.276607][T24779] team0: Device veth0_vlan failed to register rx_handler [ 747.531279][T24797] netlink: 'syz.4.7571': attribute type 10 has an invalid length. [ 747.539530][T24797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7571'. [ 747.550495][T24797] dummy0: entered promiscuous mode [ 747.562448][T24797] bridge0: port 3(dummy0) entered blocking state [ 747.569028][T24797] bridge0: port 3(dummy0) entered disabled state [ 747.575927][T24797] dummy0: entered allmulticast mode [ 747.724687][T24806] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7575'. [ 747.740304][T24806] netlink: 'syz.7.7575': attribute type 10 has an invalid length. [ 747.749415][T24806] veth0_vlan: left promiscuous mode [ 747.758044][T24806] veth0_vlan: entered promiscuous mode [ 747.765426][T24806] team0: Device veth0_vlan failed to register rx_handler [ 747.914483][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 748.144834][T24814] netlink: 'syz.2.7580': attribute type 1 has an invalid length. [ 748.153828][T24814] netlink: 'syz.2.7580': attribute type 1 has an invalid length. [ 748.316034][T24824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7585'. [ 748.384016][T24827] netlink: 'syz.2.7585': attribute type 10 has an invalid length. [ 748.393561][T24827] team0: Device veth0_vlan failed to register rx_handler [ 749.026593][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 750.138749][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 750.320117][T24897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.327571][T24897] IPv6: NLM_F_CREATE should be set when creating new route [ 750.334914][T24897] IPv6: NLM_F_CREATE should be set when creating new route [ 750.342202][T24897] IPv6: NLM_F_CREATE should be set when creating new route [ 751.251139][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 752.363059][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 753.200355][T25018] @: renamed from vlan0 [ 753.419828][T25023] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7676'. [ 753.439749][T25025] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7677'. [ 753.475247][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 754.447293][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7695'. [ 754.461799][T25064] netlink: 'syz.4.7695': attribute type 10 has an invalid length. [ 754.470077][T25064] @ÿ: left promiscuous mode [ 754.475896][T25064] @ÿ: entered promiscuous mode [ 754.482283][T25064] team0: Device 1@ÿ failed to register rx_handler [ 754.539599][T25066] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7696'. [ 754.587374][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 755.340184][T25083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7704'. [ 755.412067][T25083] netlink: 'syz.7.7704': attribute type 10 has an invalid length. [ 755.423983][T25083] veth0_vlan: left promiscuous mode [ 755.430561][T25083] veth0_vlan: entered promiscuous mode [ 755.436898][T25091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7707'. [ 755.461916][T25091] netlink: 'syz.6.7707': attribute type 10 has an invalid length. [ 755.462264][T25083] team0: Device veth0_vlan failed to register rx_handler [ 755.499423][T25091] veth0_vlan: left promiscuous mode [ 755.506034][T25091] veth0_vlan: entered promiscuous mode [ 755.522072][T25091] team0: Device veth0_vlan failed to register rx_handler [ 755.699723][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 756.173678][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7719'. [ 756.186565][T25124] netlink: 'syz.4.7719': attribute type 10 has an invalid length. [ 756.196671][T25124] @ÿ: left promiscuous mode [ 756.203413][T25124] @ÿ: entered promiscuous mode [ 756.210426][T25124] team0: Device 1@ÿ failed to register rx_handler [ 756.281538][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7722'. [ 756.293731][T25130] netlink: 'syz.4.7722': attribute type 10 has an invalid length. [ 756.302808][T25130] @ÿ: left promiscuous mode [ 756.309768][T25130] @ÿ: entered promiscuous mode [ 756.316280][T25130] team0: Device 1@ÿ failed to register rx_handler [ 756.526476][T25142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7728'. [ 756.582299][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7730'. [ 756.594706][T25146] netlink: 'syz.4.7730': attribute type 10 has an invalid length. [ 756.604090][T25146] @ÿ: left promiscuous mode [ 756.610302][T25146] @ÿ: entered promiscuous mode [ 756.616558][T25146] team0: Device 1@ÿ failed to register rx_handler [ 756.811750][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 756.998700][T25166] netlink: 'syz.4.7739': attribute type 10 has an invalid length. [ 757.007049][T25166] @ÿ: left promiscuous mode [ 757.018579][T25166] @ÿ: entered promiscuous mode [ 757.032537][T25166] team0: Device 1@ÿ failed to register rx_handler [ 757.674347][T25201] netlink: 'syz.2.7750': attribute type 10 has an invalid length. [ 757.683970][T25201] team0: Device veth0_vlan failed to register rx_handler [ 757.923872][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 758.352665][T25220] netlink: 'syz.2.7759': attribute type 2 has an invalid length. [ 758.401387][ T30] audit: type=1326 audit(1759148189.388:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25221 comm="syz.2.7760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f059038eec9 code=0x0 [ 759.036021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 759.502878][T25267] netlink: 'syz.4.7776': attribute type 2 has an invalid length. [ 759.511133][T25267] __nla_validate_parse: 3 callbacks suppressed [ 759.511151][T25267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7776'. [ 759.636498][T25275] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 760.148211][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 760.153404][T25310] overlayfs: failed to clone upperpath [ 760.816949][T25323] overlayfs: failed to clone upperpath [ 760.892622][T25327] overlayfs: failed to clone lowerpath [ 760.946457][T25329] overlayfs: failed to clone upperpath [ 761.030457][ T30] audit: type=1800 audit(1759148191.847:235): pid=25336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7806" name="nullb0" dev="tmpfs" ino=4464 res=0 errno=0 [ 761.235861][ T30] audit: type=1800 audit(1759148192.044:236): pid=25348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7811" name="nullb0" dev="tmpfs" ino=4464 res=0 errno=0 [ 761.260385][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 761.366061][ T30] audit: type=1800 audit(1759148192.165:237): pid=25355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7814" name="nullb0" dev="tmpfs" ino=4464 res=0 errno=0 [ 761.951857][T25391] netlink: 'syz.7.7828': attribute type 13 has an invalid length. [ 762.003086][T25393] overlayfs: failed to clone upperpath [ 762.372561][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 762.496028][T25419] overlayfs: failed to clone upperpath [ 763.484743][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 764.596856][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 764.820704][T25480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7863'. [ 764.834185][T25480] netlink: 'syz.4.7863': attribute type 10 has an invalid length. [ 764.843196][T25480] @ÿ: left promiscuous mode [ 764.849269][T25480] @ÿ: entered promiscuous mode [ 764.855446][T25480] team0: Device 1@ÿ failed to register rx_handler [ 765.465133][T25495] overlayfs: failed to clone upperpath [ 765.559218][T25499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7873'. [ 765.571969][T25499] netlink: 'syz.4.7873': attribute type 10 has an invalid length. [ 765.580089][T25499] @ÿ: left promiscuous mode [ 765.588336][T25499] @ÿ: entered promiscuous mode [ 765.594858][T25499] team0: Device 1@ÿ failed to register rx_handler [ 765.709043][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 765.970083][T25517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7882'. [ 765.994447][T25517] netlink: 'syz.7.7882': attribute type 10 has an invalid length. [ 766.003810][T25517] veth0_vlan: left promiscuous mode [ 766.010864][T25517] veth0_vlan: entered promiscuous mode [ 766.017797][T25517] team0: Device veth0_vlan failed to register rx_handler [ 766.782853][T25542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7891'. [ 766.810972][T25542] netlink: 'syz.6.7891': attribute type 10 has an invalid length. [ 766.821191][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 766.831161][T25542] veth0_vlan: left promiscuous mode [ 766.853614][T25542] veth0_vlan: entered promiscuous mode [ 766.861290][T25542] team0: Device veth0_vlan failed to register rx_handler [ 767.602257][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.933637][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 769.056167][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 770.077978][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7946'. [ 770.157729][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 770.159438][T25677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7947'. [ 770.179910][T25677] netlink: 'syz.6.7947': attribute type 10 has an invalid length. [ 770.188461][T25677] veth0_vlan: left promiscuous mode [ 770.195836][T25677] veth0_vlan: entered promiscuous mode [ 770.203487][T25677] team0: Device veth0_vlan failed to register rx_handler [ 770.491168][T25686] overlayfs: failed to clone upperpath [ 770.905541][T25698] netlink: 'syz.4.7957': attribute type 2 has an invalid length. [ 770.914123][T25698] netlink: 'syz.4.7957': attribute type 8 has an invalid length. [ 770.922576][T25698] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7957'. [ 771.257266][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7961'. [ 771.270100][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 771.270651][T25706] netlink: 'syz.6.7961': attribute type 10 has an invalid length. [ 771.285537][T25706] veth0_vlan: left promiscuous mode [ 771.296742][T25706] veth0_vlan: entered promiscuous mode [ 771.306261][T25706] team0: Device veth0_vlan failed to register rx_handler [ 771.980294][T25737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7973'. [ 771.992798][T25737] netlink: 'syz.4.7973': attribute type 10 has an invalid length. [ 772.004789][T25737] @ÿ: left promiscuous mode [ 772.011353][T25737] @ÿ: entered promiscuous mode [ 772.017982][T25737] team0: Device 1@ÿ failed to register rx_handler [ 772.382341][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 772.457750][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7975'. [ 772.553867][T25749] netlink: 'syz.2.7975': attribute type 10 has an invalid length. [ 772.587896][T25749] team0: Device veth0_vlan failed to register rx_handler [ 772.874407][T25762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7982'. [ 772.888411][T25762] netlink: 'syz.6.7982': attribute type 10 has an invalid length. [ 772.896968][T25762] veth0_vlan: left promiscuous mode [ 772.905418][T25762] veth0_vlan: entered promiscuous mode [ 772.913106][T25762] team0: Device veth0_vlan failed to register rx_handler [ 772.972151][T25764] overlayfs: failed to clone upperpath [ 773.116506][T25772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7987'. [ 773.128514][T25772] netlink: 'syz.4.7987': attribute type 10 has an invalid length. [ 773.137175][T25772] @ÿ: left promiscuous mode [ 773.143182][T25772] @ÿ: entered promiscuous mode [ 773.149566][T25772] team0: Device 1@ÿ failed to register rx_handler [ 773.345667][T25782] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7992'. [ 773.370344][T25782] netlink: 'syz.7.7992': attribute type 10 has an invalid length. [ 773.378959][T25782] veth0_vlan: left promiscuous mode [ 773.385338][T25782] veth0_vlan: entered promiscuous mode [ 773.392655][T25782] team0: Device veth0_vlan failed to register rx_handler [ 773.494390][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 773.530988][T25790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7996'. [ 773.561855][T25790] netlink: 'syz.7.7996': attribute type 10 has an invalid length. [ 773.570974][T25790] veth0_vlan: left promiscuous mode [ 773.577823][T25790] veth0_vlan: entered promiscuous mode [ 773.592575][T25790] team0: Device veth0_vlan failed to register rx_handler [ 773.917626][T25804] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8002'. [ 773.952436][T25804] veth0_vlan: left promiscuous mode [ 773.959918][T25804] veth0_vlan: entered promiscuous mode [ 773.968413][T25804] team0: Device veth0_vlan failed to register rx_handler [ 774.321074][T25814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8007'. [ 774.334377][T25814] veth0_vlan: left promiscuous mode [ 774.341201][T25814] veth0_vlan: entered promiscuous mode [ 774.347915][T25814] team0: Device veth0_vlan failed to register rx_handler [ 774.606563][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.994754][T25835] @ÿ: left promiscuous mode [ 775.001042][T25835] @ÿ: entered promiscuous mode [ 775.008279][T25835] team0: Device 1@ÿ failed to register rx_handler [ 775.553133][T25848] overlayfs: failed to clone upperpath [ 775.718586][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 775.764034][T25856] validate_nla: 3 callbacks suppressed [ 775.764054][T25856] netlink: 'syz.7.8026': attribute type 10 has an invalid length. [ 775.796313][T25856] veth0_vlan: left promiscuous mode [ 775.810290][T25856] veth0_vlan: entered promiscuous mode [ 775.827676][T25856] team0: Device veth0_vlan failed to register rx_handler [ 776.410458][T25879] __nla_validate_parse: 2 callbacks suppressed [ 776.410479][T25879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8036'. [ 776.443460][T25883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8037'. [ 776.491229][T25883] netlink: 'syz.6.8037': attribute type 10 has an invalid length. [ 776.499469][T25879] netlink: 'syz.7.8036': attribute type 10 has an invalid length. [ 776.508254][T25879] veth0_vlan: left promiscuous mode [ 776.518875][T25879] veth0_vlan: entered promiscuous mode [ 776.534399][T25879] team0: Device veth0_vlan failed to register rx_handler [ 776.564275][T25883] veth0_vlan: left promiscuous mode [ 776.571127][T25883] veth0_vlan: entered promiscuous mode [ 776.588304][T25883] team0: Device veth0_vlan failed to register rx_handler [ 776.830851][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 776.878149][T25902] overlayfs: overlapping lowerdir path [ 777.942814][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 778.220082][T25953] overlayfs: failed to clone upperpath [ 778.419077][T25958] lo speed is unknown, defaulting to 1000 [ 778.987319][T25968] overlayfs: failed to clone upperpath [ 779.061749][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 779.652809][T25997] overlayfs: failed to clone upperpath [ 779.943096][T26006] overlayfs: failed to clone upperpath [ 780.165863][T26019] overlayfs: failed to clone upperpath [ 780.171705][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 780.506738][T26040] overlayfs: failed to clone upperpath [ 780.977339][T26060] overlayfs: failed to clone upperpath [ 781.279409][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 781.742263][T26095] overlayfs: failed to clone upperpath [ 781.973255][T26104] overlayfs: failed to clone upperpath [ 782.391457][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 783.503621][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 783.959877][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8149'. [ 784.247934][T26171] netlink: 'syz.2.8155': attribute type 4 has an invalid length. [ 784.272854][T26171] netlink: 'syz.2.8155': attribute type 4 has an invalid length. [ 784.615853][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 784.789848][T26192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8162'. [ 785.402764][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8174'. [ 785.727993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 785.785459][T26247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8185'. [ 786.586891][T26275] overlayfs: failed to clone upperpath [ 786.850835][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 787.098080][T26288] overlayfs: failed to clone upperpath [ 787.464607][T26310] overlayfs: failed to clone upperpath [ 787.613241][T26318] overlayfs: failed to clone upperpath [ 787.623388][T26318] overlayfs: failed to clone upperpath [ 787.952300][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 788.152534][T26324] overlayfs: failed to clone upperpath [ 788.395375][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8224'. [ 788.763830][T26354] overlayfs: failed to clone upperpath [ 789.045185][T26368] overlayfs: failed to clone upperpath [ 789.064499][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 789.785546][T26379] overlayfs: failed to clone upperpath [ 789.809103][T26382] overlayfs: failed to clone upperpath [ 790.097563][T26395] overlayfs: failed to clone upperpath [ 790.176738][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.343854][T26409] overlayfs: failed to clone upperpath [ 790.726930][T26434] overlayfs: failed to clone upperpath [ 790.951953][T26446] overlayfs: failed to clone upperpath [ 791.016550][T26450] tipc: Enabling of bearer rejected, already enabled [ 791.288758][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 792.353784][T26524] tipc: Enabled bearer , priority 0 [ 792.400985][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 792.929576][T26531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8313'. [ 793.034073][T26535] overlayfs: failed to clone upperpath [ 793.046550][T26535] overlayfs: failed to clone upperpath [ 793.275299][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8323'. [ 793.356550][T26553] overlayfs: failed to clone upperpath [ 793.513195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 794.625397][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 794.901598][T26628] overlayfs: failed to clone lowerpath [ 794.910413][T26628] overlayfs: failed to clone upperpath [ 795.029979][T26636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8364'. [ 795.737491][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 796.082704][T26663] overlayfs: failed to clone upperpath [ 796.354593][T26676] overlayfs: failed to clone upperpath [ 796.489807][T26686] overlayfs: failed to clone upperpath [ 796.581623][T26693] ªªªªªª_congesti: renamed from lo (while UP) [ 796.849740][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 797.384726][T26721] netlink: 'syz.2.8403': attribute type 10 has an invalid length. [ 797.392824][T26721] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8403'. [ 797.413399][T26721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.421398][T26721] bridge0: port 1(bond0) entered blocking state [ 797.428492][T26721] bridge0: port 1(bond0) entered disabled state [ 797.435204][T26721] bond0: entered allmulticast mode [ 797.441257][T26721] bond_slave_0: entered allmulticast mode [ 797.447199][T26721] bond_slave_1: entered allmulticast mode [ 797.453991][T26721] team0: entered allmulticast mode [ 797.459798][T26721] team_slave_0: entered allmulticast mode [ 797.465662][T26721] team_slave_1: entered allmulticast mode [ 797.471727][T26721] geneve0: entered allmulticast mode [ 797.477059][T26721] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 797.488439][T26721] bridge0: port 1(bond0) entered blocking state [ 797.494986][T26721] bridge0: port 1(bond0) entered forwarding state [ 797.874171][T26745] overlayfs: failed to clone upperpath [ 797.885225][T26745] overlayfs: failed to clone lowerpath [ 797.961955][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 798.397159][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20003. Sending cookies. [ 799.084708][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 799.872743][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8438'. [ 800.186096][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 800.841365][T26822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8448'. [ 801.298325][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 801.745984][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8457'. [ 802.410473][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 802.512820][T26867] netlink: 'syz.4.8468': attribute type 10 has an invalid length. [ 802.521531][T26867] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8468'. [ 802.531265][T26867] bond0: entered promiscuous mode [ 802.536520][T26867] bond_slave_0: entered promiscuous mode [ 802.542959][T26867] bond_slave_1: entered promiscuous mode [ 802.549049][T26867] batadv_slave_0: entered promiscuous mode [ 802.555709][T26867] team0: entered promiscuous mode [ 802.561568][T26867] team_slave_0: entered promiscuous mode [ 802.567591][T26867] team_slave_1: entered promiscuous mode [ 802.575494][T26867] batadv0: entered promiscuous mode [ 802.582315][T26867] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 802.592719][T26867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.600248][T26867] bridge0: port 4(bond0) entered blocking state [ 802.607665][T26867] bridge0: port 4(bond0) entered disabled state [ 802.615142][T26867] bond0: entered allmulticast mode [ 802.620545][T26867] bond_slave_0: entered allmulticast mode [ 802.627318][T26867] bond_slave_1: entered allmulticast mode [ 802.633398][T26867] batadv_slave_0: entered allmulticast mode [ 802.640422][T26867] team0: entered allmulticast mode [ 802.646651][T26867] team_slave_0: entered allmulticast mode [ 802.652537][T26867] team_slave_1: entered allmulticast mode [ 802.659158][T26867] batadv0: entered allmulticast mode [ 802.664580][T26867] syz_tun: entered allmulticast mode [ 802.677658][T26867] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 802.778596][T26869] overlayfs: failed to clone upperpath [ 802.831082][T26872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8471'. [ 802.883033][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 802.892880][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 803.192019][T26886] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 803.522685][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 803.716492][T26895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8480'. [ 804.635292][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 804.693360][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8492'. [ 804.929673][T26932] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 805.746931][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 805.816703][T26953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8502'. [ 806.859305][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 807.010585][T26986] netlink: 'syz.4.8517': attribute type 10 has an invalid length. [ 807.053810][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.072856][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.339939][T26992] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 807.971512][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 809.083594][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 809.099201][T27022] overlayfs: failed to clone upperpath [ 809.833108][T27044] netlink: 'syz.2.8540': attribute type 10 has an invalid length. [ 809.872270][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.880780][T27046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8541'. [ 809.893415][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.050560][T27054] fuse: Unknown parameter 'fd0x0000000000000003' [ 810.195797][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 810.316603][T27065] netlink: 'syz.6.8551': attribute type 10 has an invalid length. [ 810.339810][T19503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.347932][T19503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.485483][T27074] batadv0: entered allmulticast mode [ 811.308164][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 811.901238][T27103] overlayfs: failed to clone upperpath [ 812.034240][T27107] overlayfs: failed to clone upperpath [ 812.231717][T27107] Process accounting resumed [ 812.420076][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 812.770041][T27116] netlink: 826 bytes leftover after parsing attributes in process `syz.6.8569'. [ 812.853909][T27120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8570'. [ 812.873772][T27120] netlink: 'syz.4.8570': attribute type 10 has an invalid length. [ 812.883635][T27120] @ÿ: left promiscuous mode [ 812.889333][T27120] @ÿ: entered promiscuous mode [ 812.895910][T27120] team0: Device 1@ÿ failed to register rx_handler [ 813.129051][T27125] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 813.419753][T27130] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 813.532218][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 813.680281][T27139] netlink: 'syz.4.8577': attribute type 2 has an invalid length. [ 813.694646][T27139] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8577'. [ 814.644394][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 814.934758][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8605'. [ 814.954477][T27197] netlink: 'syz.6.8605': attribute type 10 has an invalid length. [ 814.963628][T27197] veth0_vlan: left promiscuous mode [ 814.971503][T27197] veth0_vlan: entered promiscuous mode [ 814.979254][T27197] team0: Device veth0_vlan failed to register rx_handler [ 815.428889][T27228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8620'. [ 815.443095][T27228] netlink: 'syz.4.8620': attribute type 10 has an invalid length. [ 815.451569][T27228] @ÿ: left promiscuous mode [ 815.457934][T27228] @ÿ: entered promiscuous mode [ 815.464058][T27228] team0: Device 1@ÿ failed to register rx_handler [ 815.756643][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 815.885304][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8630'. [ 815.898760][T27249] netlink: 'syz.6.8630': attribute type 10 has an invalid length. [ 815.908653][T27249] veth0_vlan: left promiscuous mode [ 815.915199][T27249] veth0_vlan: entered promiscuous mode [ 815.922362][T27249] team0: Device veth0_vlan failed to register rx_handler [ 816.306478][T27260] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 816.517805][T27269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8639'. [ 816.530968][T27269] netlink: 'syz.4.8639': attribute type 10 has an invalid length. [ 816.539591][T27269] @ÿ: left promiscuous mode [ 816.545891][T27269] @ÿ: entered promiscuous mode [ 816.552612][T27269] team0: Device 1@ÿ failed to register rx_handler [ 816.792503][T27278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.871631][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 817.042682][T27290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8648'. [ 817.058963][T27290] netlink: 'syz.4.8648': attribute type 10 has an invalid length. [ 817.067339][T27290] @ÿ: left promiscuous mode [ 817.074728][T27290] @ÿ: entered promiscuous mode [ 817.081807][T27290] team0: Device 1@ÿ failed to register rx_handler [ 817.282453][T27301] netlink: 'syz.7.8654': attribute type 10 has an invalid length. [ 817.290763][T27301] dummy0: left promiscuous mode [ 817.295942][T27301] team0: Device dummy0 is up. Set it down before adding it as a team port [ 817.375282][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8656'. [ 817.392038][T27305] netlink: 'syz.4.8656': attribute type 10 has an invalid length. [ 817.400450][T27305] @ÿ: left promiscuous mode [ 817.407854][T27305] @ÿ: entered promiscuous mode [ 817.415249][T27305] team0: Device 1@ÿ failed to register rx_handler [ 817.538412][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8660'. [ 817.579978][T27312] netlink: 'syz.4.8660': attribute type 10 has an invalid length. [ 817.588710][T27312] @ÿ: left promiscuous mode [ 817.594874][T27312] @ÿ: entered promiscuous mode [ 817.605950][T27312] team0: Device 1@ÿ failed to register rx_handler [ 817.980861][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 819.093035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 819.631638][T27423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8714'. [ 819.649714][T27425] netlink: 'syz.7.8715': attribute type 29 has an invalid length. [ 819.733597][T27434] netlink: 'syz.2.8714': attribute type 10 has an invalid length. [ 819.772038][T27434] team0: Device veth0_vlan failed to register rx_handler [ 820.205254][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 820.970280][T27489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8743'. [ 821.001669][T27489] netlink: 'syz.7.8743': attribute type 10 has an invalid length. [ 821.010300][T27489] veth0_vlan: left promiscuous mode [ 821.018603][T27489] veth0_vlan: entered promiscuous mode [ 821.026702][T27489] team0: Device veth0_vlan failed to register rx_handler [ 821.317364][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 821.366040][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8754'. [ 821.410310][T27511] netlink: 'syz.4.8754': attribute type 10 has an invalid length. [ 821.419381][T27511] @ÿ: left promiscuous mode [ 821.426279][T27511] @ÿ: entered promiscuous mode [ 821.433137][T27511] team0: Device 1@ÿ failed to register rx_handler [ 822.214378][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8765'. [ 822.249787][T27541] netlink: 'syz.7.8765': attribute type 10 has an invalid length. [ 822.258951][T27541] veth0_vlan: left promiscuous mode [ 822.265708][T27541] veth0_vlan: entered promiscuous mode [ 822.273397][T27541] team0: Device veth0_vlan failed to register rx_handler [ 822.353002][ T5952] kworker/0:5 (5952) used greatest stack depth: 17144 bytes left [ 822.414575][T27551] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8769'. [ 822.429595][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 823.541717][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 823.938340][T27621] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8804'. [ 824.653877][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 825.631803][T27653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8818'. [ 825.655494][T27653] netlink: 'syz.7.8818': attribute type 10 has an invalid length. [ 825.664146][T27653] veth0_vlan: left promiscuous mode [ 825.672678][T27653] veth0_vlan: entered promiscuous mode [ 825.679478][T27653] team0: Device veth0_vlan failed to register rx_handler [ 825.765998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 825.776215][T27657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8820'. [ 825.791845][T27657] netlink: 'syz.4.8820': attribute type 10 has an invalid length. [ 825.800192][T27657] @ÿ: left promiscuous mode [ 825.805972][T27657] @ÿ: entered promiscuous mode [ 825.812608][T27657] team0: Device 1@ÿ failed to register rx_handler [ 826.469013][T27666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8823'. [ 826.657766][T27675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8826'. [ 826.745796][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8828'. [ 826.832901][T27679] netlink: 'syz.2.8828': attribute type 10 has an invalid length. [ 826.842605][T27679] team0: Device veth0_vlan failed to register rx_handler [ 826.878225][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 827.827107][T27708] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8838'. [ 827.990526][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 828.331484][T27737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8852'. [ 828.719683][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8861'. [ 828.750812][T27760] netlink: 'syz.7.8861': attribute type 10 has an invalid length. [ 828.759310][T27760] veth0_vlan: left promiscuous mode [ 828.766476][T27760] veth0_vlan: entered promiscuous mode [ 828.774075][T27760] team0: Device veth0_vlan failed to register rx_handler [ 829.102588][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 829.634960][T27790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8873'. [ 829.660987][T27790] netlink: 'syz.7.8873': attribute type 10 has an invalid length. [ 829.669327][T27790] veth0_vlan: left promiscuous mode [ 829.675780][T27790] veth0_vlan: entered promiscuous mode [ 829.683170][T27790] team0: Device veth0_vlan failed to register rx_handler [ 830.214723][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 830.865576][ T30] audit: type=1326 audit(1759148257.156:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27827 comm="syz.7.8889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ee178eec9 code=0x0 [ 831.326974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 832.029377][T27865] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 832.439054][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 832.741130][ T30] audit: type=1800 audit(1759148258.914:239): pid=27887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8917" name="nullb0" dev="tmpfs" ino=7216 res=0 errno=0 [ 832.865882][T27892] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 833.083484][T27904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8924'. [ 833.108694][T27904] netlink: 'syz.4.8924': attribute type 10 has an invalid length. [ 833.134393][T27904] @ÿ: left promiscuous mode [ 833.147994][T27904] @ÿ: entered promiscuous mode [ 833.165164][T27904] team0: Device 1@ÿ failed to register rx_handler [ 833.301726][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.396840][T27923] lo: left promiscuous mode [ 833.415956][T27925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8932'. [ 833.501941][T27931] netlink: 'syz.2.8932': attribute type 10 has an invalid length. [ 833.512846][T27931] team0: Device veth0_vlan failed to register rx_handler [ 833.551190][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 833.693442][T27935] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 833.763291][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8938'. [ 833.862628][T27945] netlink: 'syz.2.8938': attribute type 10 has an invalid length. [ 833.872615][T27945] team0: Device veth0_vlan failed to register rx_handler [ 834.232083][T27961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8947'. [ 834.260897][T27961] netlink: 'syz.4.8947': attribute type 10 has an invalid length. [ 834.279021][T27961] @ÿ: left promiscuous mode [ 834.295960][T27961] @ÿ: entered promiscuous mode [ 834.313536][T27961] team0: Device 1@ÿ failed to register rx_handler [ 834.336594][T27967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8947'. [ 834.583428][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8953'. [ 834.618222][T27977] netlink: 'syz.7.8953': attribute type 10 has an invalid length. [ 834.626742][T27977] veth0_vlan: left promiscuous mode [ 834.633963][T27977] veth0_vlan: entered promiscuous mode [ 834.641062][T27977] team0: Device veth0_vlan failed to register rx_handler [ 834.663435][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 834.822489][T27989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8957'. [ 834.881127][T27989] netlink: 'syz.7.8957': attribute type 10 has an invalid length. [ 834.895413][T27989] veth0_vlan: left promiscuous mode [ 834.910768][T27989] veth0_vlan: entered promiscuous mode [ 834.924689][T27989] team0: Device veth0_vlan failed to register rx_handler [ 834.936040][T27996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8957'. [ 835.432216][T28024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8970'. [ 835.536393][T28030] netlink: 'syz.2.8970': attribute type 10 has an invalid length. [ 835.554732][T28030] team0: Device veth0_vlan failed to register rx_handler [ 835.628981][T28030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8970'. [ 835.775603][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 836.154103][T28054] netlink: 'syz.4.8982': attribute type 10 has an invalid length. [ 836.164381][T28054] @ÿ: left promiscuous mode [ 836.170421][T28054] @ÿ: entered promiscuous mode [ 836.177416][T28054] team0: Device 1@ÿ failed to register rx_handler [ 836.241648][T28056] netlink: 'syz.4.8983': attribute type 10 has an invalid length. [ 836.251396][T28056] @ÿ: left promiscuous mode [ 836.260545][T28056] @ÿ: entered promiscuous mode [ 836.268697][T28056] team0: Device 1@ÿ failed to register rx_handler [ 836.686202][T28078] netlink: 'syz.2.8991': attribute type 10 has an invalid length. [ 836.698079][T28078] team0: Device veth0_vlan failed to register rx_handler [ 836.887683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 836.905996][T28089] team0: Device veth0_vlan failed to register rx_handler [ 837.372383][T28106] veth0_vlan: left promiscuous mode [ 837.383701][T28106] veth0_vlan: entered promiscuous mode [ 837.397817][T28106] team0: Device veth0_vlan failed to register rx_handler [ 837.450653][T28110] team0: Device veth0_vlan failed to register rx_handler [ 837.715361][T28120] team_slave_0: entered allmulticast mode [ 837.752545][T28120] team_slave_0: entered promiscuous mode [ 837.999846][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 838.464713][T28165] overlayfs: failed to clone upperpath [ 838.816595][T28169] overlayfs: failed to clone upperpath [ 839.111979][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 839.933579][T28215] __nla_validate_parse: 6 callbacks suppressed [ 839.933601][T28215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9046'. [ 840.088880][T28221] validate_nla: 3 callbacks suppressed [ 840.088902][T28221] netlink: 'syz.2.9046': attribute type 10 has an invalid length. [ 840.104448][T28221] team0: Device veth0_vlan failed to register rx_handler [ 840.224201][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 841.336343][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 842.325867][T28338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9096'. [ 842.338809][T28338] netlink: 'syz.4.9096': attribute type 10 has an invalid length. [ 842.347754][T28338] @ÿ: left promiscuous mode [ 842.354916][T28338] @ÿ: entered promiscuous mode [ 842.361536][T28338] team0: Device 1@ÿ failed to register rx_handler [ 842.448508][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 843.408043][T28384] netlink: 'syz.4.9116': attribute type 29 has an invalid length. [ 843.417592][T28384] netlink: 'syz.4.9116': attribute type 29 has an invalid length. [ 843.560875][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 844.672871][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 844.937340][T28452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9147'. [ 844.968670][T28452] netlink: 'syz.7.9147': attribute type 10 has an invalid length. [ 844.979023][T28452] veth0_vlan: left promiscuous mode [ 844.985946][T28452] veth0_vlan: entered promiscuous mode [ 844.993643][T28452] team0: Device veth0_vlan failed to register rx_handler [ 845.416250][T28479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9159'. [ 845.508536][T28486] netlink: 'syz.2.9159': attribute type 10 has an invalid length. [ 845.518722][T28486] team0: Device veth0_vlan failed to register rx_handler [ 845.770739][T28496] overlayfs: failed to clone upperpath [ 845.795724][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 846.052340][T28515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9171'. [ 846.766008][T28545] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 846.897168][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 847.408971][T28568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9193'. [ 848.009389][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 849.121464][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 849.146950][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9209'. [ 849.229076][T28613] netlink: 'syz.2.9209': attribute type 10 has an invalid length. [ 849.242155][T28613] team0: Device veth0_vlan failed to register rx_handler [ 849.480217][T28620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9211'. [ 850.233725][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 850.596437][T28649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9225'. [ 850.659829][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9226'. [ 850.715865][T28651] netlink: 'syz.7.9226': attribute type 10 has an invalid length. [ 850.724665][T28651] veth0_vlan: left promiscuous mode [ 850.738406][T28651] veth0_vlan: entered promiscuous mode [ 850.745729][T28651] team0: Device veth0_vlan failed to register rx_handler [ 851.345839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 851.418798][T28669] overlayfs: failed to clone upperpath [ 851.471009][T28672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9236'. [ 851.484372][T28672] netlink: 'syz.4.9236': attribute type 10 has an invalid length. [ 851.494874][T28672] @ÿ: left promiscuous mode [ 851.502547][T28672] @ÿ: entered promiscuous mode [ 851.511842][T28672] team0: Device 1@ÿ failed to register rx_handler [ 851.642440][T28683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9241'. [ 851.671863][T28685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9239'. [ 851.709357][T28679] overlayfs: overlapping lowerdir path [ 851.927212][T28693] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 852.280658][T28708] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 852.458085][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 853.102099][T28736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9258'. [ 853.570185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 853.625101][T28749] overlayfs: failed to clone upperpath [ 854.048866][T28772] overlayfs: failed to clone upperpath [ 854.682363][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 854.795977][T28804] overlayfs: failed to clone upperpath [ 855.155973][T28823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9296'. [ 855.176476][T28823] netlink: 'syz.6.9296': attribute type 10 has an invalid length. [ 855.189238][T28823] veth0_vlan: left promiscuous mode [ 855.196463][T28823] veth0_vlan: entered promiscuous mode [ 855.203954][T28823] team0: Device veth0_vlan failed to register rx_handler [ 855.436828][T28834] overlayfs: failed to clone upperpath [ 855.794737][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 856.184116][T28885] overlayfs: failed to clone upperpath [ 856.287857][T28891] overlayfs: failed to clone upperpath [ 856.899587][T28916] overlayfs: failed to clone upperpath [ 856.906709][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 857.897040][T28962] overlayfs: failed to clone upperpath [ 858.018836][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 858.184669][T28972] overlayfs: failed to clone upperpath [ 858.217990][T28975] overlayfs: failed to clone upperpath [ 858.703037][T29004] overlayfs: failed to clone upperpath [ 858.703424][T29003] tipc: Enabling of bearer rejected, already enabled [ 858.913596][T29016] overlayfs: failed to clone upperpath [ 859.131108][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 859.737589][T29067] /dev/nullb0: Can't lookup blockdev [ 860.243267][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 860.346456][T29098] overlayfs: failed to clone upperpath [ 861.022654][T29122] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 861.355444][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 861.797001][T29152] tipc: Enabling of bearer rejected, already enabled [ 862.467550][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 862.505473][T29175] overlayfs: failed to clone upperpath [ 863.189003][T29205] overlayfs: failed to clone upperpath [ 863.279610][T29209] tipc: Enabling of bearer rejected, failed to enable media [ 863.679024][T29226] overlayfs: failed to clone upperpath [ 863.715315][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 863.984784][T29236] overlayfs: failed to clone upperpath [ 864.863497][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 865.231197][T29273] tipc: Enabled bearer , priority 0 [ 865.974260][T29314] overlayfs: failed to clone upperpath [ 865.980215][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 866.888302][T29342] overlayfs: failed to clone upperpath [ 866.983430][T29348] tipc: Enabling of bearer rejected, failed to enable media [ 867.032554][T29350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9530'. [ 867.087772][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 867.563425][T29366] tipc: Enabling of bearer rejected, already enabled [ 867.623750][T29368] overlayfs: failed to clone upperpath [ 868.199641][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 868.443246][T29384] tipc: Enabling of bearer rejected, already enabled [ 868.461339][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030892000: rx timeout, send abort [ 868.470049][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030892000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 868.484790][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030870000: rx timeout, send abort [ 868.498286][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030870000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 869.304757][T29417] netlink: 'syz.7.9563': attribute type 4 has an invalid length. [ 869.313496][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 869.923543][T29442] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9574'. [ 870.261632][T29464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9585'. [ 870.424066][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 870.700385][T29466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9586'. [ 871.194322][T29496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9597'. [ 871.536350][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 872.648194][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 872.798921][T29552] overlayfs: failed to clone upperpath [ 873.552280][T29564] overlayfs: failed to clone upperpath [ 873.740814][T29555] orangefs_mount: mount request failed with -4 [ 873.760694][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 874.093348][T29592] tipc: Enabling of bearer rejected, already enabled [ 874.872572][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 875.046937][T29625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9648'. [ 875.833176][T29637] overlayfs: failed to clone upperpath [ 875.985243][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 876.164272][T29639] netlink: 'syz.7.9653': attribute type 4 has an invalid length. [ 876.715203][T29659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9660'. [ 877.022616][T29667] /dev/nullb0: Can't lookup blockdev [ 877.097217][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 877.547813][T29676] overlayfs: failed to clone upperpath [ 877.724386][T29682] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 878.209264][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 879.321148][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 880.177124][T29769] overlayfs: failed to clone upperpath [ 880.444421][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 881.545548][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 881.643597][T29795] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 881.905244][T29802] netlink: 'syz.4.9716': attribute type 10 has an invalid length. [ 881.952839][T29804] ªªªªªª_congesti speed is unknown, defaulting to 1000 [ 882.657861][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 882.810520][T29821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9722'. [ 883.022262][T29823] netlink: 'syz.2.9722': attribute type 10 has an invalid length. [ 883.064922][T29823] team0: Device veth0_vlan failed to register rx_handler [ 883.516788][T29831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9724'. [ 883.536217][T29831] netlink: 'syz.4.9724': attribute type 10 has an invalid length. [ 883.544544][T29831] @ÿ: left promiscuous mode [ 883.552523][T29831] @ÿ: entered promiscuous mode [ 883.561791][T29831] team0: Device 1@ÿ failed to register rx_handler [ 883.769767][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 883.955913][T29839] overlayfs: failed to clone upperpath [ 884.095635][T29846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9731'. [ 884.115221][T29846] netlink: 'syz.6.9731': attribute type 10 has an invalid length. [ 884.123434][T29846] veth0_vlan: left promiscuous mode [ 884.129942][T29846] veth0_vlan: entered promiscuous mode [ 884.136881][T29846] team0: Device veth0_vlan failed to register rx_handler [ 884.202400][T29844] Process accounting resumed [ 884.370787][T29856] netlink: 'syz.2.9732': attribute type 10 has an invalid length. [ 884.375212][T29855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9733'. [ 884.395145][T29856] team0: Device veth0_vlan failed to register rx_handler [ 884.397695][T29855] netlink: 'syz.6.9733': attribute type 10 has an invalid length. [ 884.425978][T29855] veth0_vlan: left promiscuous mode [ 884.433403][T29855] veth0_vlan: entered promiscuous mode [ 884.440567][T29855] team0: Device veth0_vlan failed to register rx_handler [ 884.541797][T29859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9734'. [ 884.559520][T29859] netlink: 'syz.6.9734': attribute type 10 has an invalid length. [ 884.570440][T29859] veth0_vlan: left promiscuous mode [ 884.580737][T29859] veth0_vlan: entered promiscuous mode [ 884.591621][T29859] team0: Device veth0_vlan failed to register rx_handler [ 884.777997][T29866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9737'. [ 884.882488][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 885.061169][T29884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9743'. [ 885.076674][T29884] netlink: 'syz.6.9743': attribute type 10 has an invalid length. [ 885.086212][T29884] veth0_vlan: left promiscuous mode [ 885.092624][T29884] veth0_vlan: entered promiscuous mode [ 885.099906][T29884] team0: Device veth0_vlan failed to register rx_handler [ 885.994313][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 886.320129][T29941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9763'. [ 886.338288][T29941] netlink: 'syz.4.9763': attribute type 10 has an invalid length. [ 886.346567][T29941] @ÿ: left promiscuous mode [ 886.356890][T29941] @ÿ: entered promiscuous mode [ 886.363692][T29941] team0: Device 1@ÿ failed to register rx_handler [ 886.576598][T29959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9771'. [ 886.799612][T29970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9777'. [ 886.814112][T29970] netlink: 'syz.4.9777': attribute type 10 has an invalid length. [ 886.827031][T29970] @ÿ: left promiscuous mode [ 886.835629][T29970] @ÿ: entered promiscuous mode [ 886.843114][T29970] team0: Device 1@ÿ failed to register rx_handler [ 887.106927][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 887.251308][T29994] veth0_vlan: left promiscuous mode [ 887.259281][T29994] veth0_vlan: entered promiscuous mode [ 887.268380][T29994] team0: Device veth0_vlan failed to register rx_handler [ 887.343896][T29996] validate_nla: 1 callbacks suppressed [ 887.343920][T29996] netlink: 'syz.7.9789': attribute type 2 has an invalid length. [ 888.229300][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 888.277668][T30043] overlayfs: failed to clone upperpath [ 888.442010][T30042] Process accounting resumed [ 888.752153][T30073] netlink: 'syz.7.9818': attribute type 10 has an invalid length. [ 888.788097][T30073] veth0_vlan: left promiscuous mode [ 888.794624][T30073] team0: Device veth0_vlan failed to register rx_handler [ 888.898053][T30078] Invalid source name [ 888.902311][T30078] UBIFS error (pid: 30078): cannot open "./file0", error -22 [ 888.936286][T30083] __nla_validate_parse: 3 callbacks suppressed [ 888.936307][T30083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9830'. [ 889.044214][T30083] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 889.096621][T30094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9827'. [ 889.105860][T30094] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 889.341484][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 889.657477][T30102] netlink: 'syz.4.9831': attribute type 10 has an invalid length. [ 889.681687][T30102] @ÿ: left promiscuous mode [ 889.693247][T30102] @ÿ: entered promiscuous mode [ 889.703206][T30102] team0: Device 1@ÿ failed to register rx_handler [ 889.949877][T30120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9840'. [ 890.061042][T30125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9843'. [ 890.073368][T30125] IPVS: Unknown mcast interface: vcan0 [ 890.167225][T30130] sctp: [Deprecated]: syz.2.9844 (pid 30130) Use of int in max_burst socket option. [ 890.167225][T30130] Use struct sctp_assoc_value instead [ 890.251458][T30133] fuse: Bad value for 'fd' [ 890.442749][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 890.601904][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.611269][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.555535][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 891.576551][T30192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9868'. [ 891.804980][T30208] overlayfs: missing 'lowerdir' [ 892.307309][T30223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9881'. [ 892.667110][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 893.409473][T30259] netlink: 'syz.2.9897': attribute type 2 has an invalid length. [ 893.584487][ T30] audit: type=1326 audit(1759148315.806:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30264 comm="syz.6.9900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f775d58eec9 code=0x0 [ 893.759337][T30276] netlink: 'syz.4.9901': attribute type 10 has an invalid length. [ 893.767745][T30276] @ÿ: left promiscuous mode [ 893.774054][T30276] @ÿ: entered promiscuous mode [ 893.780266][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 893.789809][T30276] team0: Device 1@ÿ failed to register rx_handler [ 894.071495][T30292] netlink: 'syz.4.9908': attribute type 21 has an invalid length. [ 894.081953][T30292] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9908'. [ 894.091728][T30292] netlink: 'syz.4.9908': attribute type 5 has an invalid length. [ 894.099630][T30292] netlink: 'syz.4.9908': attribute type 6 has an invalid length. [ 894.109756][T30292] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9908'. [ 894.205521][T30300] netlink: 'syz.4.9911': attribute type 11 has an invalid length. [ 894.891463][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 895.495779][T30332] netlink: 'syz.4.9925': attribute type 2 has an invalid length. [ 895.551731][T30334] netlink: 'syz.6.9926': attribute type 3 has an invalid length. [ 896.014528][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 896.252429][T30365] fuse: Bad value for 'fd' [ 896.260373][T30365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9937'. [ 896.939607][T30383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9943'. [ 897.115770][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 897.518537][T30400] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9947'. [ 897.539505][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9947'. [ 897.786260][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9954'. [ 897.952276][T30429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9956'. [ 898.228179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 899.005379][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 899.184491][T30485] netlink: 'syz.4.9979': attribute type 12 has an invalid length. [ 899.194810][T30485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9979'. [ 899.233497][T30490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9978'. [ 899.292724][T30492] netlink: 'syz.4.9980': attribute type 10 has an invalid length. [ 899.340089][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 899.915700][T30507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9987'. [ 900.146399][T30523] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9993'. [ 900.452626][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 900.595314][T30530] batadv0: left allmulticast mode [ 900.600741][T30530] syz_tun: left allmulticast mode [ 901.306403][T14173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.314658][T14173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.564455][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 902.250836][T30584] __nla_validate_parse: 2 callbacks suppressed [ 902.250856][T30584] netlink: 68 bytes leftover after parsing attributes in process `syz.7.10019'. [ 902.280701][T30586] netlink: 'syz.2.10020': attribute type 4 has an invalid length. [ 902.291489][T30586] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10020'. [ 902.316041][T30586] netlink: 'syz.2.10020': attribute type 2 has an invalid length. [ 902.349944][T30588] netlink: 76 bytes leftover after parsing attributes in process `syz.7.10021'. [ 902.680490][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 902.803393][T30620] sctp: [Deprecated]: syz.4.10029 (pid 30620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.803393][T30620] Use struct sctp_sack_info instead [ 902.959029][T30627] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10030'. [ 903.802452][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 903.857321][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.865362][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.881290][T30661] netlink: 'syz.4.10047': attribute type 33 has an invalid length. [ 903.890102][T30661] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10047'. [ 904.637494][ T30] audit: type=1326 audit(1759148555.125:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30698 comm="syz.2.10060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f059038eec9 code=0x0 [ 904.925140][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 905.220022][T30718] netlink: 'syz.4.10063': attribute type 2 has an invalid length. [ 905.522043][T30734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10069'. [ 905.674683][T30741] overlayfs: failed to clone upperpath [ 905.674686][T30742] overlayfs: failed to clone upperpath [ 905.744839][T30747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10071'. [ 906.046309][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 906.273754][T30776] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 906.351532][T30780] netlink: 'syz.4.10081': attribute type 2 has an invalid length. [ 906.396081][T30782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10082'. [ 906.406655][T30782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10082'. [ 906.417686][T30782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10082'. [ 907.133072][T30820] sctp: [Deprecated]: syz.7.10097 (pid 30820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 907.133072][T30820] Use struct sctp_sack_info instead [ 907.168640][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 907.264654][T30829] tipc: Enabling of bearer rejected, failed to enable media [ 907.683934][T30840] overlayfs: failed to clone upperpath [ 907.879320][T30844] __nla_validate_parse: 12 callbacks suppressed [ 907.879341][T30844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10106'. [ 907.953231][T30850] netlink: 'syz.7.10105': attribute type 33 has an invalid length. [ 907.967973][T30850] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10105'. [ 908.025408][T30854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10107'. [ 908.289733][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 908.558555][T30860] netdevsim netdevsim6: Direct firmware load for Ò failed with error -2 [ 908.570197][T30860] netdevsim netdevsim6: Falling back to sysfs fallback for: Ò [ 909.050868][T30886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10116'. [ 909.422402][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 909.573446][T30898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10122'. [ 910.518711][T30936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10138'. [ 910.532762][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 910.769019][ C0] ------------[ cut here ]------------ [ 910.774625][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 910.785527][ C0] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x5e2/0x820, CPU#0: syz.2.10139/30939 [ 910.796390][ C0] Modules linked in: [ 910.800327][ C0] CPU: 0 UID: 0 PID: 30939 Comm: syz.2.10139 Not tainted syzkaller #0 PREEMPT(full) [ 910.809920][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 910.820195][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 910.826604][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 f7 d0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 df 8b 7c f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 910.846385][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 910.852481][ C0] RAX: feb98dc273606000 RBX: 000000000000000c RCX: ffff88805ba55ac0 [ 910.860564][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 910.869094][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 910.877147][ C0] R10: dffffc0000000000 R11: fffffbfff1c7a65c R12: ffff88804fcc3168 [ 910.885239][ C0] R13: 0000000000000000 R14: ffff88805b190e80 R15: ffff88805b193138 [ 910.893434][ C0] FS: 00007f059121e6c0(0000) GS:ffff8881257b7000(0000) knlGS:0000000000000000 [ 910.902492][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 910.909133][ C0] CR2: 00007f059121bf70 CR3: 000000005c39c000 CR4: 00000000003526f0 [ 910.917215][ C0] Call Trace: [ 910.920572][ C0] [ 910.923467][ C0] rate_control_send_low+0x1a7/0x7b0 [ 910.928898][ C0] rate_control_get_rate+0x20b/0x5d0 [ 910.934486][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 910.940359][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 910.946892][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 910.952340][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 910.958185][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 910.963934][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 910.969988][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 910.975667][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 910.981386][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 910.987059][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 910.992670][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 910.998369][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 911.003939][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 911.010149][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 911.015799][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 911.023134][ C0] __iterate_interfaces+0x2ab/0x590 [ 911.028452][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 911.034671][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 911.041991][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 911.048115][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 911.055409][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 911.060685][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 911.066626][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 911.072034][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 911.077795][ C0] ? read_tsc+0x9/0x20 [ 911.082014][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 911.087942][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 911.093208][ C0] handle_softirqs+0x286/0x870 [ 911.098115][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 911.103120][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 911.108534][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 911.113787][ C0] __irq_exit_rcu+0xca/0x1f0 [ 911.118579][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 911.123841][ C0] irq_exit_rcu+0x9/0x30 [ 911.128459][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 911.134170][ C0] [ 911.137296][ C0] [ 911.140309][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 911.146361][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 911.151756][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 1b 40 48 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 911.171644][ C0] RSP: 0018:ffffc9000ecbf560 EFLAGS: 00000206 [ 911.177770][ C0] RAX: feb98dc273606000 RBX: 0000000000000206 RCX: feb98dc273606000 [ 911.185849][ C0] RDX: 0000000000000005 RSI: ffffffff8de77b47 RDI: ffffffff8c056e60 [ 911.194095][ C0] RBP: ffff88805ba566b8 R08: ffffea00015b8eb7 R09: 1ffffd40002b71d6 [ 911.202304][ C0] R10: dffffc0000000000 R11: fffff940002b71d7 R12: 0000000000000005 [ 911.210422][ C0] R13: 0000000000000005 R14: ffffffff8e53d320 R15: ffff88805ba55ac0 [ 911.218524][ C0] ? folio_try_get+0x1c/0x340 [ 911.223298][ C0] ? folio_try_get+0x1c/0x340 [ 911.228055][ C0] folio_try_get+0x1d1/0x340 [ 911.232705][ C0] next_uptodate_folio+0xcb/0x5d0 [ 911.238112][ C0] filemap_map_pages+0x11ea/0x1c60 [ 911.243297][ C0] ? __lock_acquire+0xab9/0xd20 [ 911.248331][ C0] ? filemap_map_pages+0x15c/0x1c60 [ 911.253677][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 911.259253][ C0] ? __handle_mm_fault+0x2789/0x5400 [ 911.264596][ C0] ? __handle_mm_fault+0x2789/0x5400 [ 911.270003][ C0] __handle_mm_fault+0x347e/0x5400 [ 911.275176][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 911.280772][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 911.285952][ C0] handle_mm_fault+0x40a/0x8e0 [ 911.290842][ C0] __get_user_pages+0x165c/0x2a00 [ 911.295959][ C0] populate_vma_page_range+0x29f/0x3a0 [ 911.301543][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 911.307571][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 911.313579][ C0] ? down_read+0x1ad/0x2e0 [ 911.318049][ C0] __mm_populate+0x24c/0x380 [ 911.322834][ C0] ? __pfx___mm_populate+0x10/0x10 [ 911.328004][ C0] ? up_write+0x1c4/0x420 [ 911.332438][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 911.337093][ C0] ? __se_sys_futex+0x36f/0x400 [ 911.342035][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 911.347203][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 911.352147][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 911.356964][ C0] do_syscall_64+0xfa/0xfa0 [ 911.361526][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 911.366916][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.373045][ C0] ? clear_bhb_loop+0x60/0xb0 [ 911.377842][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.383799][ C0] RIP: 0033:0x7f059038eec9 [ 911.388371][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.408073][ C0] RSP: 002b:00007f059121e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 911.416593][ C0] RAX: ffffffffffffffda RBX: 00007f05905e5fa0 RCX: 00007f059038eec9 [ 911.424618][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 911.432680][ C0] RBP: 00007f0590411f91 R08: ffffffffffffffff R09: 0000000000000000 [ 911.440742][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 911.448912][ C0] R13: 00007f05905e6038 R14: 00007f05905e5fa0 R15: 00007fff5d1fa6e8 [ 911.456956][ C0] [ 911.460105][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 911.467430][ C0] CPU: 0 UID: 0 PID: 30939 Comm: syz.2.10139 Not tainted syzkaller #0 PREEMPT(full) [ 911.477020][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 911.487118][ C0] Call Trace: [ 911.490434][ C0] [ 911.493311][ C0] dump_stack_lvl+0x99/0x250 [ 911.498045][ C0] ? __asan_memcpy+0x40/0x70 [ 911.502696][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.507962][ C0] ? __pfx__printk+0x10/0x10 [ 911.512586][ C0] vpanic+0x237/0x6d0 [ 911.516606][ C0] ? __pfx_vpanic+0x10/0x10 [ 911.521307][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 911.526618][ C0] panic+0xb9/0xc0 [ 911.530380][ C0] ? __pfx_panic+0x10/0x10 [ 911.534829][ C0] __warn+0x334/0x4c0 [ 911.538849][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 911.544506][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 911.550153][ C0] report_bug+0x2be/0x4f0 [ 911.554502][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 911.560172][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 911.566182][ C0] ? __rate_control_send_low+0x5e4/0x820 [ 911.571841][ C0] handle_bug+0x84/0x160 [ 911.576193][ C0] exc_invalid_op+0x1a/0x50 [ 911.580873][ C0] asm_exc_invalid_op+0x1a/0x20 [ 911.585752][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 911.592129][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 f7 d0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 df 8b 7c f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 911.612202][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 911.618283][ C0] RAX: feb98dc273606000 RBX: 000000000000000c RCX: ffff88805ba55ac0 [ 911.626275][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 911.634271][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 911.642350][ C0] R10: dffffc0000000000 R11: fffffbfff1c7a65c R12: ffff88804fcc3168 [ 911.650435][ C0] R13: 0000000000000000 R14: ffff88805b190e80 R15: ffff88805b193138 [ 911.658451][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 911.664127][ C0] rate_control_send_low+0x1a7/0x7b0 [ 911.669448][ C0] rate_control_get_rate+0x20b/0x5d0 [ 911.674764][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 911.680589][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 911.686928][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 911.692339][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 911.698285][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 911.704050][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 911.710057][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 911.715626][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 911.721200][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 911.726788][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 911.732358][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 911.737932][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 911.743415][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 911.749564][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 911.755141][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 911.762417][ C0] __iterate_interfaces+0x2ab/0x590 [ 911.767689][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 911.773967][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 911.781372][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 911.787460][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 911.794506][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 911.799721][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 911.805796][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 911.811023][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 911.816848][ C0] ? read_tsc+0x9/0x20 [ 911.821038][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 911.826874][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 911.832011][ C0] handle_softirqs+0x286/0x870 [ 911.836894][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 911.841683][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 911.846985][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 911.852200][ C0] __irq_exit_rcu+0xca/0x1f0 [ 911.856922][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 911.862347][ C0] irq_exit_rcu+0x9/0x30 [ 911.866870][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 911.872733][ C0] [ 911.875677][ C0] [ 911.878695][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 911.884781][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 911.890266][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 1b 40 48 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 911.909886][ C0] RSP: 0018:ffffc9000ecbf560 EFLAGS: 00000206 [ 911.916013][ C0] RAX: feb98dc273606000 RBX: 0000000000000206 RCX: feb98dc273606000 [ 911.923995][ C0] RDX: 0000000000000005 RSI: ffffffff8de77b47 RDI: ffffffff8c056e60 [ 911.931994][ C0] RBP: ffff88805ba566b8 R08: ffffea00015b8eb7 R09: 1ffffd40002b71d6 [ 911.939976][ C0] R10: dffffc0000000000 R11: fffff940002b71d7 R12: 0000000000000005 [ 911.947957][ C0] R13: 0000000000000005 R14: ffffffff8e53d320 R15: ffff88805ba55ac0 [ 911.955956][ C0] ? folio_try_get+0x1c/0x340 [ 911.960650][ C0] ? folio_try_get+0x1c/0x340 [ 911.965528][ C0] folio_try_get+0x1d1/0x340 [ 911.970216][ C0] next_uptodate_folio+0xcb/0x5d0 [ 911.975354][ C0] filemap_map_pages+0x11ea/0x1c60 [ 911.980763][ C0] ? __lock_acquire+0xab9/0xd20 [ 911.985726][ C0] ? filemap_map_pages+0x15c/0x1c60 [ 911.990945][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 911.996425][ C0] ? __handle_mm_fault+0x2789/0x5400 [ 912.001754][ C0] ? __handle_mm_fault+0x2789/0x5400 [ 912.007074][ C0] __handle_mm_fault+0x347e/0x5400 [ 912.012249][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 912.017778][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 912.022928][ C0] handle_mm_fault+0x40a/0x8e0 [ 912.027726][ C0] __get_user_pages+0x165c/0x2a00 [ 912.032809][ C0] populate_vma_page_range+0x29f/0x3a0 [ 912.038389][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 912.044388][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 912.050383][ C0] ? down_read+0x1ad/0x2e0 [ 912.054993][ C0] __mm_populate+0x24c/0x380 [ 912.059609][ C0] ? __pfx___mm_populate+0x10/0x10 [ 912.064761][ C0] ? up_write+0x1c4/0x420 [ 912.069150][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 912.073792][ C0] ? __se_sys_futex+0x36f/0x400 [ 912.078693][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 912.083834][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 912.088741][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 912.093635][ C0] do_syscall_64+0xfa/0xfa0 [ 912.098952][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.104188][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.110391][ C0] ? clear_bhb_loop+0x60/0xb0 [ 912.115148][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.121406][ C0] RIP: 0033:0x7f059038eec9 [ 912.125839][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.145478][ C0] RSP: 002b:00007f059121e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 912.153936][ C0] RAX: ffffffffffffffda RBX: 00007f05905e5fa0 RCX: 00007f059038eec9 [ 912.161923][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 912.169908][ C0] RBP: 00007f0590411f91 R08: ffffffffffffffff R09: 0000000000000000 [ 912.177981][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 912.185999][ C0] R13: 00007f05905e6038 R14: 00007f05905e5fa0 R15: 00007fff5d1fa6e8 [ 912.194091][ C0] [ 912.197507][ C0] Kernel Offset: disabled [ 912.201866][ C0] Rebooting in 86400 seconds..