last executing test programs: 9m1.092859165s ago: executing program 32 (id=3230): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d0334", 0x9}, {&(0x7f0000002340)="7e07bb6c34", 0x5}], 0x3, 0x0, 0x0, 0x24004010}], 0x1, 0x24044880) 8m50.059143029s ago: executing program 33 (id=3372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m19.63843142s ago: executing program 34 (id=4026): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x80, 0x440, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0xff2f156dba024678, 0x80}}, 0x50) 8m19.603796541s ago: executing program 4 (id=4029): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 8m19.53048592s ago: executing program 4 (id=4030): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000000d}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x3) 8m19.526544877s ago: executing program 4 (id=4031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 8m19.444969785s ago: executing program 4 (id=4032): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 8m19.444431948s ago: executing program 4 (id=4033): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x41}, 0x4008080) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 8m19.272353757s ago: executing program 4 (id=4038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 8m19.181137961s ago: executing program 35 (id=4038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 8m6.655954864s ago: executing program 6 (id=4327): timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sysinfo(&(0x7f0000000000)=""/177) 8m6.587531969s ago: executing program 6 (id=4331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x20, 0x0, 0x8000, 0x44, 0x7fff, 0x0, 0x2004c7, 0x0, 0xfffffffffffffffe, 0x7fffffff, 0x10007fff, 0x1000200004, 0x4, 0x0, 0x0, 0x1], 0x8080000, 0x10006}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m6.391794869s ago: executing program 6 (id=4337): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x27) 8m6.32154635s ago: executing program 6 (id=4340): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 8m6.320831722s ago: executing program 6 (id=4342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) shutdown(r0, 0x0) 8m6.043434514s ago: executing program 6 (id=4349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 8m5.999303624s ago: executing program 36 (id=4349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 7m45.490227805s ago: executing program 8 (id=4716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd0a, 0x25dfdbf7}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 7m45.403474824s ago: executing program 8 (id=4717): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 7m45.401510334s ago: executing program 8 (id=4718): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) 7m43.712666027s ago: executing program 8 (id=4743): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x1010f6, 0x1) 7m43.57063029s ago: executing program 8 (id=4745): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0xfffffffffffffe6e, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(&(0x7f0000000100)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) 7m43.254638413s ago: executing program 8 (id=4752): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}, 0x1, 0xfdffffff}, 0x0) 7m43.20966542s ago: executing program 37 (id=4752): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}, 0x1, 0xfdffffff}, 0x0) 6m11.233511395s ago: executing program 9 (id=6026): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x800, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9c, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6m11.038856767s ago: executing program 9 (id=6028): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x300, 0xfff7) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000029c0)='./file1\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004580)="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", 0x2000, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x78, 0x0, 0x3f5, {0x7, 0x8000, 0x0, {0x1, 0xfff, 0x3, 0x6, 0x0, 0x6, 0x7, 0x7, 0x7, 0x2000, 0x6, r2, r4, 0x2, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) 6m10.898696653s ago: executing program 9 (id=6030): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800103e, r3, 0x0) openat$cgroup_ro(r2, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/64, 0x40}], 0x1) 6m10.887921372s ago: executing program 9 (id=6031): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) 6m9.882258214s ago: executing program 9 (id=6047): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 6m8.994960069s ago: executing program 9 (id=6054): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x68, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mirred={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 5m53.937764814s ago: executing program 38 (id=6054): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x68, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mirred={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 5m45.583207801s ago: executing program 0 (id=6286): mkdir(&(0x7f00000005c0)='./bus\x00', 0xa) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300)) 5m45.533640488s ago: executing program 0 (id=6287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000003, 0x2) r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xfffffffd, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x7323, 0x0, 0x5, 0x0, 0x0) 5m44.584708849s ago: executing program 0 (id=6302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001c180)=@newtaction={0x1000, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xfec, 0x1, [@m_ipt={0xf84, 0x12, 0x0, 0x0, {{0x8}, {0xf5c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x8, 'raw\x00', 0xc}}, @TCA_IPT_TARG={0xefd, 0x6, {0x4, 'security\x00', 0x1, 0x0, "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"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x38, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0xe, 0x6, "8edf36e333ee6a16e03e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 5m43.673479305s ago: executing program 0 (id=6316): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x48) 5m42.82073651s ago: executing program 0 (id=6324): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 5m41.953669628s ago: executing program 0 (id=6338): socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setfsgid(0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42ddedc962"}}}}}, 0x0) 5m26.899670046s ago: executing program 39 (id=6338): socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setfsgid(0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42ddedc962"}}}}}, 0x0) 5m26.648644106s ago: executing program 3 (id=6495): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r2, &(0x7f0000000600)="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", 0xfec) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 5m26.549714863s ago: executing program 3 (id=6496): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000008000000010000000100001302000000060000f10000000003000000006161"], &(0x7f0000001f40)=""/4079, 0x38, 0xfef, 0x8}, 0x28) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m26.383452556s ago: executing program 3 (id=6498): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5m25.508607096s ago: executing program 3 (id=6505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) 5m25.222928109s ago: executing program 3 (id=6506): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff9000/0x1000)=nil, 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) 5m25.044951045s ago: executing program 40 (id=6506): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff9000/0x1000)=nil, 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) 15.494002924s ago: executing program 5 (id=7885): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x401, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 12.988690287s ago: executing program 5 (id=7895): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 12.623935638s ago: executing program 1 (id=7888): fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000280)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.126468476s ago: executing program 5 (id=7890): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x1, 0x3, 0x0, 0x6, 0x1, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 9.635903023s ago: executing program 2 (id=7892): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043c07aaaaaaaaaa1005074f078eaf317af3cd0fce4a812a104e8799d96bd57be0e1992a"], 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xd, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4d, 0x11e41e7a, 0x20000000, 0x2000000, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) wait4(r0, 0x0, 0x2, &(0x7f0000000280)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 9.347241021s ago: executing program 1 (id=7893): fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000280)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.663075125s ago: executing program 7 (id=7894): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0xfffffd1b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0xfffffffffffffff5, 0x0, 0x2}, &(0x7f0000000300)=[{}, {}]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.638669163s ago: executing program 5 (id=7896): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.315824243s ago: executing program 2 (id=7897): r0 = fsopen(&(0x7f0000000200)='adfs\x00', 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x81, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000001000001440005002001060000000000000000000000000000000002320000000a000000fc0100000000000000000000080000000000000004000000"], 0xf8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6.628389063s ago: executing program 1 (id=7898): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003b00000003"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000340)) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 6.468434146s ago: executing program 1 (id=7899): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 6.350482491s ago: executing program 7 (id=7900): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003011000060ce902d9f0c2f0081e949b93897bc"], 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001000088f7e2f46708397443b67555b18de000000000000000000000000000000000000000000000000000000000000bb000000000000000000000000f98c2c124597c24e79bc27db00e0973b97d65a843e13a0b863c4604f1d7b4c495937380e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000022000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd7000000000000200000100000000480003006465666c6174650000"], 0x134}}, 0x4810) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) 6.223933837s ago: executing program 7 (id=7901): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 5.905964711s ago: executing program 2 (id=7902): fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000280)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.18950648s ago: executing program 5 (id=7903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0x8008330e, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 4.292710451s ago: executing program 1 (id=7904): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) io_uring_setup(0x7ba, &(0x7f0000000080)={0x0, 0x581e, 0x800, 0x0, 0x3d1}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uhid(0xffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000880)=ANY=[], 0x196) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xa, 0xfffffffffffffffd, 0x8001, 0x10001, 0x5, 0x100000000000045}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0x2}, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind(r2, 0x0, 0x0) 4.286193043s ago: executing program 7 (id=7905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x8040600) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.908137104s ago: executing program 2 (id=7906): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x9, 0x3, 0x1}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)={0x4}) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x100000000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) socket$packet(0x11, 0x3, 0x300) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 3.340349072s ago: executing program 7 (id=7907): fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000280)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.060821697s ago: executing program 2 (id=7908): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdir(0x0, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x6, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) landlock_restrict_self(r6, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) 1.521169389s ago: executing program 7 (id=7909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000040), 0xe7e) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 1.201688849s ago: executing program 2 (id=7910): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 1.051376579s ago: executing program 1 (id=7911): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 5 (id=7912): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) kernel console output (not intermixed with test programs): .202701][T23080] smc: adding ib device syz2 with port count 1 [ 478.204719][T23080] smc: ib device syz2 port 1 has no pnetid [ 478.206904][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6677'. [ 478.211031][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6677'. [ 478.341592][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 479.291414][ T5291] Bluetooth: hci3: command 0x0406 tx timeout [ 479.381063][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 480.099899][ T40] audit: type=1804 audit(1770900310.557:1835): pid=23119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6687" name="bus" dev="ramfs" ino=98027 res=1 errno=0 [ 480.107510][ T40] audit: type=1804 audit(1770900310.567:1836): pid=23119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6687" name="bus" dev="ramfs" ino=98027 res=1 errno=0 [ 480.371618][T23130] futex_wake_op: syz.1.6693 tries to shift op by -1; fix this program [ 480.410527][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 480.418620][T23132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6694'. [ 480.462366][T23134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6695'. [ 480.750367][T21649] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 480.900303][T21649] usb 6-1: Using ep0 maxpacket: 16 [ 480.903476][T21649] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 480.911462][T21649] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 480.916771][T21649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.919917][T21649] usb 6-1: Product: syz [ 480.922916][T21649] usb 6-1: Manufacturer: syz [ 480.924692][T21649] usb 6-1: SerialNumber: syz [ 480.929142][T21649] usb 6-1: config 0 descriptor?? [ 480.934764][T21649] hub 6-1:0.0: bad descriptor, ignoring hub [ 480.936696][T21649] hub 6-1:0.0: probe with driver hub failed with error -5 [ 480.942158][T21649] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.147527][ T40] audit: type=1326 audit(1770900311.607:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 481.160466][ T40] audit: type=1326 audit(1770900311.627:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 481.168259][ T40] audit: type=1326 audit(1770900311.627:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 481.179399][ T40] audit: type=1326 audit(1770900311.627:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 481.190878][ T40] audit: type=1326 audit(1770900311.637:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 481.200610][ T40] audit: type=1326 audit(1770900311.637:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 481.209860][T23136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.214613][T23136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.218491][ T40] audit: type=1326 audit(1770900311.637:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 481.234735][ T40] audit: type=1326 audit(1770900311.647:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 481.351370][T21649] usb 6-1: USB disconnect, device number 32 [ 481.450048][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 482.324345][T23172] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 482.345193][T23172] kvm: pic: non byte read [ 482.348290][T23172] kvm: pic: level sensitive irq not supported [ 482.348836][T23172] kvm: pic: non byte read [ 482.355879][T23172] kvm: pic: level sensitive irq not supported [ 482.356643][T23172] kvm: pic: non byte read [ 482.489963][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 482.766569][T23179] hsr0: entered promiscuous mode [ 482.771899][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6712'. [ 482.775640][T23179] hsr_slave_0: left promiscuous mode [ 482.778835][T23179] hsr_slave_1: left promiscuous mode [ 482.800892][T23179] hsr0 (unregistering): left promiscuous mode [ 483.199717][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6717'. [ 483.255645][T23195] bond1: Invalid ad_actor_system MAC address. [ 483.258153][T23195] bond1: option ad_actor_system: invalid value (68719607821) [ 483.262806][T23195] bond1 (unregistering): Released all slaves [ 483.529015][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 483.796679][T23209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6722'. [ 484.071443][T23224] netlink: 'syz.2.6725': attribute type 39 has an invalid length. [ 484.568496][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 485.491562][T23249] syzkaller0: entered promiscuous mode [ 485.493564][T23249] syzkaller0: entered allmulticast mode [ 485.607961][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 485.678147][ T5949] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 486.657474][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 486.869681][T23292] netlink: 'syz.2.6749': attribute type 10 has an invalid length. [ 487.686881][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 487.716098][ T5949] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 488.736383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 488.887821][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 488.887832][ T40] audit: type=1326 audit(1770900319.351:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.899651][ T40] audit: type=1326 audit(1770900319.351:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.908029][ T40] audit: type=1326 audit(1770900319.351:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.920675][ T40] audit: type=1326 audit(1770900319.351:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.929368][ T40] audit: type=1326 audit(1770900319.351:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.938954][ T40] audit: type=1326 audit(1770900319.351:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.956524][ T40] audit: type=1326 audit(1770900319.351:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.964020][ T40] audit: type=1326 audit(1770900319.351:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.986446][ T40] audit: type=1326 audit(1770900319.351:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 488.995445][ T40] audit: type=1326 audit(1770900319.351:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.6762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 489.332097][T23351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6768'. [ 489.466055][T23353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6770'. [ 489.534308][T23353] bridge8: port 1(veth27) entered blocking state [ 489.538294][T23353] bridge8: port 1(veth27) entered disabled state [ 489.541355][T23353] veth27: entered allmulticast mode [ 489.545194][T23353] veth27: entered promiscuous mode [ 489.775866][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 490.805778][T23392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6778'. [ 490.816042][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 491.148869][T23395] netlink: 'syz.5.6779': attribute type 3 has an invalid length. [ 491.152333][T23395] netlink: 'syz.5.6779': attribute type 3 has an invalid length. [ 491.352293][T23401] binder: BINDER_SET_CONTEXT_MGR already set [ 491.354604][T23401] binder: 23400:23401 ioctl 4018620d 80000100 returned -16 [ 491.361334][T23401] binder: BINDER_SET_CONTEXT_MGR already set [ 491.366764][T23401] binder: 23400:23401 ioctl 4018620d 80004a80 returned -16 [ 491.665475][ T2028] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 491.834865][ T2028] usb 6-1: Using ep0 maxpacket: 8 [ 491.838226][ T2028] usb 6-1: config 0 interface 0 has no altsetting 0 [ 491.840442][ T2028] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 491.843415][ T2028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.851888][ T2028] usb 6-1: config 0 descriptor?? [ 491.854847][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 492.028091][T23415] syzkaller0: entered promiscuous mode [ 492.030646][T23415] syzkaller0: entered allmulticast mode [ 492.275585][ T2028] mcp2221 0003:04D8:00DD.001B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 492.397003][ T2028] IPVS: starting estimator thread 0... [ 492.397424][T23425] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 492.463423][T23428] syzkaller0: entered promiscuous mode [ 492.466602][T23428] syzkaller0: entered allmulticast mode [ 492.470719][T23403] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 492.475092][ T2028] usb 6-1: USB disconnect, device number 33 [ 492.504822][T23426] IPVS: using max 43 ests per chain, 103200 per kthread [ 492.884274][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 493.923815][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 493.940492][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 493.940505][ T40] audit: type=1804 audit(1770900324.403:1891): pid=23452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6799" name="/newroot/57/file0" dev="tmpfs" ino=315 res=1 errno=0 [ 493.950128][T23452] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1 [ 493.953255][T23452] ref_ctr increment failed for inode: 0x13b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026b924c0 [ 493.960363][T23452] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: -1 [ 493.963228][T23452] ref_ctr decrement failed for inode: 0x13b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026b924c0 [ 493.967075][T23452] uprobe: syz.1.6799:23452 failed to unregister, leaking uprobe [ 494.053772][T22629] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 494.207525][T22629] usb 10-1: config 0 has an invalid interface number: 205 but max is 0 [ 494.210189][T22629] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.214031][T22629] usb 10-1: config 0 has no interface number 0 [ 494.216137][T22629] usb 10-1: config 0 interface 205 has no altsetting 0 [ 494.220501][T22629] usb 10-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 494.224177][T22629] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.226812][T22629] usb 10-1: Product: syz [ 494.228232][T22629] usb 10-1: Manufacturer: syz [ 494.230301][T22629] usb 10-1: SerialNumber: syz [ 494.233507][T22629] usb 10-1: config 0 descriptor?? [ 494.240984][T22629] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 494.245172][T22629] dvb-usb: bulk message failed: -22 (3/0) [ 494.273067][T22629] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 494.277303][T22629] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 494.283318][T22629] usb 10-1: media controller created [ 494.289057][T22629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.320321][T22629] dvb-usb: bulk message failed: -22 (6/0) [ 494.327056][T22629] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 494.335031][T22629] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input67 [ 494.341403][T22629] dvb-usb: schedule remote query interval to 150 msecs. [ 494.346784][T22629] dvb-usb: bulk message failed: -22 (3/0) [ 494.363586][T22629] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 494.480554][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6803'. [ 494.507368][T22629] dvb-usb: bulk message failed: -22 (1/0) [ 494.511083][T22629] dvb-usb: error while querying for an remote control event. [ 494.673605][ T2028] dvb-usb: bulk message failed: -22 (1/0) [ 494.675973][ T2028] dvb-usb: error while querying for an remote control event. [ 494.833365][ T2028] dvb-usb: bulk message failed: -22 (1/0) [ 494.835589][ T2028] dvb-usb: error while querying for an remote control event. [ 494.878655][ T2028] usb 10-1: USB disconnect, device number 4 [ 494.916865][ T2028] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 494.963336][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 495.841830][T23479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6809'. [ 495.901208][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6809'. [ 496.002744][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 496.059731][T23486] netlink: 'syz.2.6811': attribute type 1 has an invalid length. [ 496.060621][T23482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.074532][T23482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.193371][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.197670][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.202034][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.211187][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.316260][T23489] netlink: 'syz.5.6812': attribute type 1 has an invalid length. [ 496.325063][T23491] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6813'. [ 496.344456][T23489] bond1: entered promiscuous mode [ 496.352409][T23489] bond1: entered allmulticast mode [ 496.366574][T23497] netlink: 'syz.2.6815': attribute type 1 has an invalid length. [ 496.384938][T23497] smc: adding net device bond0 with user defined pnetid SYZ2 [ 496.397580][T23489] bond1: (slave ip6gretap1): making interface the new active one [ 496.401117][T23489] ip6gretap1: entered promiscuous mode [ 496.405748][T23489] ip6gretap1: entered allmulticast mode [ 496.408944][T23489] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 496.418062][T23497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6815'. [ 496.423303][T23497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.436633][T23489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6812'. [ 496.462893][T23497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.473598][T23497] bond0: (slave geneve5): making interface the new active one [ 496.477886][T23497] bond0: (slave geneve5): Enslaving as an active interface with an up link [ 496.485169][T23489] bond1: left promiscuous mode [ 496.487281][T23489] ip6gretap1: left promiscuous mode [ 496.489622][T23489] bond1: left allmulticast mode [ 496.491788][T23489] ip6gretap1: left allmulticast mode [ 496.503957][T23489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.522609][T23310] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 496.552050][T23310] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 496.557233][T23310] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 496.559911][T23310] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 497.042242][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 497.328288][T23523] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6824'. [ 498.091678][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 499.121242][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 499.920192][T23547] syz_tun: entered allmulticast mode [ 499.923325][T23547] syz_tun: left allmulticast mode [ 500.074541][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6841'. [ 500.095968][T23679] netlink: 'syz.1.6841': attribute type 2 has an invalid length. [ 500.170715][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 501.200236][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 501.683694][ T1229] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 501.687208][ T1229] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 501.691566][ T1229] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 501.694998][ T1229] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 502.239756][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 502.853471][T23723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6854'. [ 503.092217][T23730] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6857'. [ 503.279079][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 503.351367][T23738] binder: BINDER_SET_CONTEXT_MGR already set [ 503.353970][T23738] binder: 23737:23738 ioctl 4018620d 800000c0 returned -16 [ 503.365115][T23738] binder: BINDER_SET_CONTEXT_MGR already set [ 503.377822][T23738] binder: 23737:23738 ioctl 4018620d 80000040 returned -16 [ 504.318687][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.216321][T23800] netlink: 'syz.7.6874': attribute type 1 has an invalid length. [ 505.255106][T23800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6874'. [ 505.260282][T23800] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.276627][T23800] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.284833][T23800] bond8: (slave geneve3): making interface the new active one [ 505.289112][T23800] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 505.292827][ T60] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 505.297207][ T60] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 505.300901][ T60] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 505.304074][ T60] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 505.358088][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.593762][T23810] binder: BINDER_SET_CONTEXT_MGR already set [ 505.596630][T23810] binder: 23809:23810 ioctl 4018620d 80000480 returned -16 [ 505.604869][T23810] binder: BINDER_SET_CONTEXT_MGR already set [ 505.606991][T23810] binder: 23809:23810 ioctl 4018620d 80004a80 returned -16 [ 506.397613][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 506.783254][T23835] syz.2.6883: vmalloc error: size 2147479872, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 506.797489][T23835] CPU: 1 UID: 0 PID: 23835 Comm: syz.2.6883 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.797519][T23835] Tainted: [L]=SOFTLOCKUP [ 506.797525][T23835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 506.797536][T23835] Call Trace: [ 506.797542][T23835] [ 506.797549][T23835] dump_stack_lvl+0x100/0x190 [ 506.797570][T23835] warn_alloc.cold+0x95/0x1c1 [ 506.797590][T23835] ? __pfx_warn_alloc+0x10/0x10 [ 506.797610][T23835] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 506.797622][T23835] ? irqentry_exit+0x180/0x670 [ 506.797643][T23835] __vmalloc_node_range_noprof+0x1252/0x1530 [ 506.797665][T23835] ? netlink_alloc_large_skb+0x9b/0x150 [ 506.797685][T23835] ? alloc_pages_mpol+0x25a/0x550 [ 506.797700][T23835] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 506.797716][T23835] ? __lock_acquire+0x4a5/0x2630 [ 506.797732][T23835] __kvmalloc_node_noprof+0x3de/0xa00 [ 506.797744][T23835] ? netlink_alloc_large_skb+0x9b/0x150 [ 506.797761][T23835] ? netlink_alloc_large_skb+0x9b/0x150 [ 506.797778][T23835] ? __pfx___might_resched+0x10/0x10 [ 506.797791][T23835] ? find_held_lock+0x2b/0x80 [ 506.797805][T23835] ? aa_file_perm+0x268/0x1530 [ 506.797820][T23835] netlink_alloc_large_skb+0x9b/0x150 [ 506.797838][T23835] netlink_sendmsg+0x680/0xda0 [ 506.797857][T23835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.797876][T23835] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 506.797894][T23835] sock_write_iter+0x566/0x610 [ 506.797907][T23835] ? __pfx_sock_write_iter+0x10/0x10 [ 506.797923][T23835] ? bpf_lsm_file_permission+0x9/0x10 [ 506.797935][T23835] ? security_file_permission+0x76/0x210 [ 506.797948][T23835] ? rw_verify_area+0xce/0x6d0 [ 506.797966][T23835] vfs_write+0x6ac/0x1070 [ 506.797977][T23835] ? __pfx_sock_write_iter+0x10/0x10 [ 506.797990][T23835] ? __pfx_vfs_write+0x10/0x10 [ 506.797999][T23835] ? find_held_lock+0x2b/0x80 [ 506.798021][T23835] ksys_write+0x1f8/0x250 [ 506.798032][T23835] ? __pfx_ksys_write+0x10/0x10 [ 506.798046][T23835] __do_fast_syscall_32+0xe3/0x8c0 [ 506.798065][T23835] do_fast_syscall_32+0x32/0x70 [ 506.798082][T23835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.798095][T23835] RIP: 0023:0xf7fa2f6c [ 506.798105][T23835] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 506.798115][T23835] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 506.798127][T23835] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 506.798133][T23835] RDX: 00000000ffffff03 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.798140][T23835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.798146][T23835] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 506.798152][T23835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.798165][T23835] [ 506.798230][T23835] Mem-Info: [ 506.917766][T23835] active_anon:3215 inactive_anon:1455 isolated_anon:0 [ 506.917766][T23835] active_file:879 inactive_file:2534 isolated_file:0 [ 506.917766][T23835] unevictable:1768 dirty:511 writeback:0 [ 506.917766][T23835] slab_reclaimable:8005 slab_unreclaimable:87290 [ 506.917766][T23835] mapped:23187 shmem:3917 pagetables:1576 [ 506.917766][T23835] sec_pagetables:332 bounce:0 [ 506.917766][T23835] kernel_misc_reclaimable:0 [ 506.917766][T23835] free:56554 free_pcp:3115 free_cma:0 [ 506.940152][T23835] Node 0 active_anon:2468kB inactive_anon:192kB active_file:0kB inactive_file:408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:0kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9572kB pagetables:1968kB sec_pagetables:1180kB all_unreclaimable? yes Balloon:0kB [ 506.959163][T23835] Node 1 active_anon:8288kB inactive_anon:5628kB active_file:3516kB inactive_file:9728kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92584kB dirty:2044kB writeback:0kB shmem:8336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6952kB pagetables:4236kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB [ 506.973827][T23835] Node 0 DMA free:2096kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.992131][T23835] lowmem_reserve[]: 0 287 287 287 287 [ 506.996493][T23835] Node 0 DMA32 free:17320kB boost:0kB min:13208kB low:16508kB high:19808kB reserved_highatomic:2048KB free_highatomic:896KB active_anon:2468kB inactive_anon:156kB active_file:0kB inactive_file:408kB unevictable:3536kB writepending:0kB zspages:2152kB present:1032196kB managed:294288kB mlocked:0kB bounce:0kB free_pcp:1468kB local_pcp:348kB free_cma:0kB [ 507.012994][T23835] lowmem_reserve[]: 0 0 0 0 0 [ 507.016421][T23835] Node 1 DMA32 free:205320kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:696KB active_anon:5812kB inactive_anon:5628kB active_file:3516kB inactive_file:9728kB unevictable:3536kB writepending:2044kB zspages:5416kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:17056kB local_pcp:1280kB free_cma:0kB [ 507.028346][T23835] lowmem_reserve[]: 0 0 0 0 0 [ 507.030252][T23835] Node 0 DMA: 28*4kB (UM) 12*8kB (UM) 2*16kB (M) 2*32kB (U) 2*64kB (M) 3*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2096kB [ 507.040961][T23835] Node 0 DMA32: 449*4kB (UE) 307*8kB (UE) 64*16kB (UME) 76*32kB (UMEH) 43*64kB (UMEH) 17*128kB (UMEH) 6*256kB (UMH) 2*512kB (M) 2*1024kB (U) 0*2048kB 0*4096kB = 17244kB [ 507.054966][T23835] Node 1 DMA32: 2593*4kB (UMEH) 5458*8kB (UMEH) 3757*16kB (UMEH) 335*32kB (UMEH) 130*64kB (UMEH) 97*128kB (UME) 53*256kB (UM) 32*512kB (UME) 29*1024kB (UME) 0*2048kB 0*4096kB = 205252kB [ 507.066479][T23835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.071516][T23835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 507.078150][T23835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.082761][T23835] Node 1 hugepages_total=6 hugepages_free=1 hugepages_surp=2 hugepages_size=2048kB [ 507.086857][T23835] 6165 total pagecache pages [ 507.088945][T23835] 964 pages in swap cache [ 507.090943][T23835] Free swap = 97244kB [ 507.092426][T23835] Total swap = 124996kB [ 507.094558][T23835] 524155 pages RAM [ 507.096234][T23835] 0 pages HighMem/MovableOnly [ 507.098705][T23835] 209690 pages reserved [ 507.100079][T23835] 0 pages cma reserved [ 507.126897][T23837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6884'. [ 507.277731][T23843] syzkaller0: entered promiscuous mode [ 507.280014][T23843] syzkaller0: entered allmulticast mode [ 507.436996][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 507.527207][ T40] audit: type=1326 audit(1770900337.990:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.543025][ T40] audit: type=1326 audit(1770900337.990:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.551329][ T40] audit: type=1326 audit(1770900337.990:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.560341][ T40] audit: type=1326 audit(1770900337.990:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.567984][ T40] audit: type=1326 audit(1770900337.990:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.587096][ T40] audit: type=1326 audit(1770900337.990:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.604109][ T40] audit: type=1326 audit(1770900337.990:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.620095][ T40] audit: type=1326 audit(1770900337.990:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.638445][ T40] audit: type=1326 audit(1770900337.990:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.652143][ T40] audit: type=1326 audit(1770900337.990:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.1.6891" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 507.689735][T23857] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.692579][T23857] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.752276][T23857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.762029][T23857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.856767][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.860396][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.864076][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.868283][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.331406][T23878] syzkaller0: entered promiscuous mode [ 508.333449][T23878] syzkaller0: entered allmulticast mode [ 508.476487][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 509.300429][T23887] fuse: root generation should be zero [ 509.525976][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 509.558542][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6904'. [ 509.755628][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6909'. [ 509.761000][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6909'. [ 509.764717][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6909'. [ 509.770021][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6909'. [ 509.835379][T23915] 8021q: adding VLAN 0 to HW filter on device bond9 [ 509.861330][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6911'. [ 509.864274][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6911'. [ 509.870061][T23915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.874907][T23915] bond9: (slave bond0): making interface the new active one [ 509.878572][T23915] bond9: (slave bond0): Enslaving as an active interface with an up link [ 509.892951][T23915] syz_tun: left allmulticast mode [ 509.895272][T23915] syz_tun: left promiscuous mode [ 509.898131][T23915] bridge0: port 3(syz_tun) entered disabled state [ 509.904268][T23915] bond9: (slave bond0): Releasing active interface [ 509.909209][T23915] bridge_slave_0: left allmulticast mode [ 509.911114][T23915] bridge_slave_0: left promiscuous mode [ 509.913113][T23915] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.918826][T23915] bridge_slave_1: left allmulticast mode [ 509.920685][T23915] bridge_slave_1: left promiscuous mode [ 509.922581][T23915] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.928812][T23915] bond0: (slave bond_slave_1): Releasing backup interface [ 509.934843][T23915] team0: Port device team_slave_0 removed [ 509.939590][T23915] team0: Port device team_slave_1 removed [ 509.942345][T23915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.948018][T23915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.555507][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 510.958926][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6918'. [ 511.277997][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.280900][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.594909][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 511.779327][T23964] binder: BINDER_SET_CONTEXT_MGR already set [ 511.781646][T23964] binder: 23963:23964 ioctl 4018620d 80000000 returned -16 [ 511.790702][T23964] binder: BINDER_SET_CONTEXT_MGR already set [ 511.793395][T23964] binder: 23963:23964 ioctl 4018620d 80000040 returned -16 [ 511.797267][T23964] binder: 23963:23964 ioctl c0306201 800003c0 returned -14 [ 511.990037][T23973] overlayfs: failed to clone upperpath [ 512.308406][T23990] netlink: 'syz.5.6934': attribute type 4 has an invalid length. [ 512.644389][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 512.897375][T23998] syzkaller0: entered promiscuous mode [ 512.903074][T23998] syzkaller0: entered allmulticast mode [ 513.084236][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 513.084253][ T40] audit: type=1326 audit(1770900343.553:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.093254][ T40] audit: type=1326 audit(1770900343.553:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.100865][ T40] audit: type=1326 audit(1770900343.563:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.110444][ T40] audit: type=1326 audit(1770900343.563:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.117730][ T40] audit: type=1326 audit(1770900343.563:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.126062][ T40] audit: type=1326 audit(1770900343.563:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.134486][ T40] audit: type=1326 audit(1770900343.563:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.141400][ T40] audit: type=1326 audit(1770900343.563:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.148394][ T40] audit: type=1326 audit(1770900343.563:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.155234][ T40] audit: type=1326 audit(1770900343.563:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24003 comm="syz.7.6946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 513.673962][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 514.125270][T24046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.131436][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6945'. [ 514.135113][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6945'. [ 514.139117][T24046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.143860][T24046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.147395][T24046] bond1: (slave bond0): making interface the new active one [ 514.150354][T24046] bond1: (slave bond0): Enslaving as an active interface with an up link [ 514.167233][ T12] bond0: (slave geneve5): link status definitely down, disabling slave [ 514.171650][ T12] bond0: now running without any active interface! [ 514.177855][T24046] bond2: (slave vti0): Releasing backup interface [ 514.181281][T24046] bond3: (slave bridge1): Releasing active interface [ 514.185008][T24046] team0: Port device bond4 removed [ 514.187434][T24046] bond5: (slave gretap1): Releasing active interface [ 514.190219][T24046] batman_adv: batadv0: Removing interface: ip6gretap1 [ 514.193322][T24046] bond6: (slave ip6gretap2): Releasing active interface [ 514.197205][T24046] bond7: (slave vcan1): Releasing backup interface [ 514.202245][T24046] bond12: (slave bond13): Releasing backup interface [ 514.206929][T24046] veth27: left allmulticast mode [ 514.209060][T24046] veth27: left promiscuous mode [ 514.211317][T24046] bridge8: port 1(veth27) entered disabled state [ 514.217416][T24046] bond1: (slave bond0): Releasing active interface [ 514.229158][T24046] bond0: (slave geneve5): Releasing active interface [ 514.628201][T24062] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 514.641143][T24062] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 514.645413][T24062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 514.649315][T24062] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 514.652892][T24062] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 514.661266][T24062] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 514.665100][T24062] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 514.670528][T24062] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 514.678212][T24062] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 514.688733][T24062] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 514.713379][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 515.152490][T24076] netlink: 'syz.1.6956': attribute type 4 has an invalid length. [ 515.752904][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 516.443906][T24118] netlink: 'syz.7.6965': attribute type 1 has an invalid length. [ 516.471696][T24118] 8021q: adding VLAN 0 to HW filter on device bond10 [ 516.518653][T24118] bond10: (slave gretap2): making interface the new active one [ 516.524917][T24118] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 516.793789][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 517.324603][T24143] IPVS: length: 218 != 24 [ 517.329466][T24143] dvmrp0: left allmulticast mode [ 517.331300][T24143] bond10: left allmulticast mode [ 517.831847][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 518.431752][T24179] bridge9: entered allmulticast mode [ 518.871293][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 519.196806][T24192] netlink: 'syz.1.6982': attribute type 1 has an invalid length. [ 519.218540][T24192] bond1: entered promiscuous mode [ 519.222541][T24192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.244003][T24192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6982'. [ 519.247256][T24192] bond1: entered allmulticast mode [ 519.260540][T24192] bond1: (slave bridge2): making interface the new active one [ 519.263202][T24192] bridge2: entered promiscuous mode [ 519.264919][T24192] bridge2: entered allmulticast mode [ 519.267764][T24192] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 519.479597][T24197] syzkaller0: entered promiscuous mode [ 519.481508][T24197] syzkaller0: entered allmulticast mode [ 519.668207][T24205] syzkaller0: entered promiscuous mode [ 519.670781][T24205] syzkaller0: entered allmulticast mode [ 519.910765][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 520.299288][ T3557] libceph: connect (1)[c::]:6789 error -101 [ 520.301937][ T3557] libceph: mon0 (1)[c::]:6789 connect error [ 520.450067][T24215] ceph: No mds server is up or the cluster is laggy [ 520.950275][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 521.600090][ T5949] Bluetooth: hci3: Malformed LE Event: 0x0b [ 521.741710][ T5949] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 521.999811][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 522.082542][ T6142] IPVS: starting estimator thread 0... [ 522.170007][T24279] IPVS: using max 28 ests per chain, 67200 per kthread [ 522.485585][T24286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.509958][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7004'. [ 522.513670][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7004'. [ 522.530441][T24286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.533803][T24286] bond2: (slave bond0): making interface the new active one [ 522.537178][T24286] bond2: (slave bond0): Enslaving as an active interface with an up link [ 522.578398][T24289] pim6reg: entered allmulticast mode [ 522.583305][T24290] bond2: (slave bond0): Releasing active interface [ 522.589156][T24290] bridge_slave_1: left allmulticast mode [ 522.591737][T24290] bridge_slave_1: left promiscuous mode [ 522.594567][T24290] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.603214][T24290] bond0: (slave bond_slave_0): Releasing backup interface [ 522.609062][T24290] bond0: (slave bond_slave_1): Releasing backup interface [ 522.616931][T24290] team0: Port device team_slave_0 removed [ 522.621881][T24290] team0: Port device team_slave_1 removed [ 522.624883][T24290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.632499][T24290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.640731][T24290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.647592][T24291] team0: entered allmulticast mode [ 522.652379][T24289] team0: left allmulticast mode [ 522.654806][T24289] pim6reg: left allmulticast mode [ 523.029211][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 523.159998][T24297] input: syz0 as /devices/virtual/input/input68 [ 524.013303][T24310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7012'. [ 524.049447][T24312] netlink: 'syz.7.7011': attribute type 1 has an invalid length. [ 524.068709][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 524.087217][T24312] 8021q: adding VLAN 0 to HW filter on device bond11 [ 524.313249][T24324] veth1_to_bond: entered allmulticast mode [ 524.316001][T24324] veth1_to_bond: entered promiscuous mode [ 524.319499][T24324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7017'. [ 524.334501][T24324] veth1_to_bond (unregistering): left allmulticast mode [ 524.337486][T24324] veth1_to_bond (unregistering): left promiscuous mode [ 524.449829][T24327] comedi: valid board names for 8255 driver are: [ 524.451916][T24327] 8255 [ 524.452838][T24327] comedi: valid board names for vmk80xx driver are: [ 524.455115][T24327] vmk80xx [ 524.456238][T24327] comedi: valid board names for usbduxsigma driver are: [ 524.458866][T24327] usbduxsigma [ 524.460143][T24327] comedi: valid board names for usbduxfast driver are: [ 524.462425][T24327] usbduxfast [ 524.463747][T24327] comedi: valid board names for usbdux driver are: [ 524.466019][T24327] usbdux [ 524.467180][T24327] comedi: valid board names for ni6501 driver are: [ 524.469998][T24327] ni6501 [ 524.471127][T24327] comedi: valid board names for dt9812 driver are: [ 524.473191][T24327] dt9812 [ 524.474144][T24327] comedi: valid board names for ni_labpc_cs driver are: [ 524.476484][T24327] ni_labpc_cs [ 524.477599][T24327] comedi: valid board names for ni_daq_700 driver are: [ 524.481455][T24327] ni_daq_700 [ 524.482887][T24327] comedi: valid board names for labpc_pci driver are: [ 524.485541][T24327] labpc_pci [ 524.487091][T24327] comedi: valid board names for adl_pci9118 driver are: [ 524.490030][T24327] pci9118dg [ 524.491491][T24327] pci9118hg [ 524.493367][T24327] pci9118hr [ 524.494739][T24327] comedi: valid board names for 8255_pci driver are: [ 524.497089][T24327] 8255_pci [ 524.499065][T24327] comedi: valid board names for s526 driver are: [ 524.501636][T24327] s526 [ 524.502568][T24327] comedi: valid board names for multiq3 driver are: [ 524.504786][T24327] multiq3 [ 524.506118][T24327] comedi: valid board names for pcmuio driver are: [ 524.510595][T24327] pcmuio48 [ 524.511758][T24327] pcmuio96 [ 524.512959][T24327] comedi: valid board names for pcmmio driver are: [ 524.515321][T24327] pcmmio [ 524.516596][T24327] comedi: valid board names for pcmda12 driver are: [ 524.521569][T24327] pcmda12 [ 524.522929][T24327] comedi: valid board names for pcmad driver are: [ 524.525567][T24327] pcmad12 [ 524.526922][T24327] pcmad16 [ 524.528266][T24327] comedi: valid board names for ni_labpc driver are: [ 524.531851][T24327] lab-pc-1200 [ 524.533294][T24327] lab-pc-1200ai [ 524.534800][T24327] lab-pc+ [ 524.536149][T24327] comedi: valid board names for atmio16 driver are: [ 524.539158][T24327] atmio16 [ 524.540173][T24327] atmio16d [ 524.541204][T24327] comedi: valid board names for ni_at_ao driver are: [ 524.543386][T24327] at-ao-6 [ 524.544419][T24327] at-ao-10 [ 524.545478][T24327] comedi: valid board names for ni_at_a2150 driver are: [ 524.548206][T24327] ni_at_a2150 [ 524.550351][T24327] comedi: valid board names for adq12b driver are: [ 524.553802][T24327] adq12b [ 524.555132][T24327] comedi: valid board names for mpc624 driver are: [ 524.557824][T24327] mpc624 [ 524.559516][T24327] comedi: valid board names for c6xdigio driver are: [ 524.562325][T24327] c6xdigio [ 524.563839][T24327] comedi: valid board names for aio_iiro_16 driver are: [ 524.566688][T24327] aio_iiro_16 [ 524.567991][T24327] comedi: valid board names for aio_aio12_8 driver are: [ 524.570814][T24327] aio_aio12_8 [ 524.572012][T24327] aio_ai12_8 [ 524.573099][T24327] aio_ao12_4 [ 524.574619][T24327] comedi: valid board names for fl512 driver are: [ 524.576859][T24327] fl512 [ 524.577906][T24327] comedi: valid board names for dmm32at driver are: [ 524.581128][T24327] dmm32at [ 524.582487][T24327] comedi: valid board names for dt282x driver are: [ 524.585357][T24327] dt2821 [ 524.586650][T24327] dt2821-f [ 524.588037][T24327] dt2821-g [ 524.589779][T24327] dt2823 [ 524.590767][T24327] dt2824-pgh [ 524.592025][T24327] dt2824-pgl [ 524.593147][T24327] dt2825 [ 524.594148][T24327] dt2827 [ 524.595333][T24327] dt2828 [ 524.596702][T24327] dt2829 [ 524.597979][T24327] dt21-ez [ 524.599581][T24327] dt23-ez [ 524.600746][T24327] dt24-ez [ 524.601975][T24327] dt24-ez-pgl [ 524.603290][T24327] comedi: valid board names for dt2817 driver are: [ 524.605738][T24327] dt2817 [ 524.606922][T24327] comedi: valid board names for dt2815 driver are: [ 524.609290][T24327] dt2815 [ 524.610278][T24327] comedi: valid board names for dt2814 driver are: [ 524.612369][T24327] dt2814 [ 524.613323][T24327] comedi: valid board names for dt2811 driver are: [ 524.615404][T24327] dt2811-pgh [ 524.616587][T24327] dt2811-pgl [ 524.618127][T24327] comedi: valid board names for dt2801 driver are: [ 524.621163][T24327] dt2801 [ 524.622466][T24327] comedi: valid board names for das6402 driver are: [ 524.625175][T24327] das6402-12 [ 524.626612][T24327] das6402-16 [ 524.628803][T24327] comedi: valid board names for das1800 driver are: [ 524.631426][T24327] das-1701st [ 524.632843][T24327] das-1701st-da [ 524.634370][T24327] das-1702st [ 524.635589][T24327] das-1702st-da [ 524.637042][T24327] das-1702hr [ 524.639251][T24327] das-1702hr-da [ 524.640526][T24327] das-1701ao [ 524.641741][T24327] das-1702ao [ 524.643143][T24327] das-1801st [ 524.644479][T24327] das-1801st-da [ 524.645988][T24327] das-1802st [ 524.647153][T24327] das-1802st-da [ 524.649260][T24327] das-1802hr [ 524.650720][T24327] das-1802hr-da [ 524.652252][T24327] das-1801hc [ 524.653692][T24327] das-1802hc [ 524.655279][T24327] das-1801ao [ 524.656717][T24327] das-1802ao [ 524.658137][T24327] comedi: valid board names for das800 driver are: [ 524.661793][T24327] das-800 [ 524.663152][T24327] cio-das800 [ 524.664569][T24327] das-801 [ 524.666072][T24327] cio-das801 [ 524.667333][T24327] das-802 [ 524.669312][T24327] cio-das802 [ 524.670757][T24327] cio-das802/16 [ 524.672391][T24327] comedi: valid board names for isa-das08 driver are: [ 524.675223][T24327] isa-das08 [ 524.676554][T24327] das08-pgm [ 524.677919][T24327] das08-pgh [ 524.680008][T24327] das08-pgl [ 524.681344][T24327] das08-aoh [ 524.682856][T24327] das08-aol [ 524.684288][T24327] das08-aom [ 524.685736][T24327] das08/jr-ao [ 524.687146][T24327] das08jr-16-ao [ 524.692057][T24327] pc104-das08 [ 524.693611][T24327] das08jr/16 [ 524.695072][T24327] comedi: valid board names for das16m1 driver are: [ 524.698041][T24327] das16m1 [ 524.699892][T24327] comedi: valid board names for dac02 driver are: [ 524.702567][T24327] dac02 [ 524.703906][T24327] comedi: valid board names for rti802 driver are: [ 524.706477][T24327] rti802 [ 524.707611][T24327] comedi: valid board names for rti800 driver are: [ 524.710950][T24327] rti800 [ 524.712242][T24327] rti815 [ 524.713530][T24327] comedi: valid board names for pcm3724 driver are: [ 524.716428][T24327] pcm3724 [ 524.717767][T24327] comedi: valid board names for pcl818 driver are: [ 524.721140][T24327] pcl818l [ 524.722448][T24327] pcl818h [ 524.723714][T24327] pcl818hd [ 524.725050][T24327] pcl818hg [ 524.726345][T24327] pcl818 [ 524.727672][T24327] pcl718 [ 524.729518][T24327] pcm3718 [ 524.730818][T24327] comedi: valid board names for pcl816 driver are: [ 524.733444][T24327] pcl816 [ 524.734709][T24327] pcl814b [ 524.736071][T24327] comedi: valid board names for pcl812 driver are: [ 524.740045][T24327] pcl812 [ 524.741271][T24327] pcl812pg [ 524.742587][T24327] acl8112pg [ 524.743918][T24327] acl8112dg [ 524.745278][T24327] acl8112hg [ 524.746655][T24327] a821pgl [ 524.747985][T24327] a821pglnda [ 524.750123][T24327] a821pgh [ 524.751461][T24327] a822pgl [ 524.752772][T24327] a822pgh [ 524.754079][T24327] a823pgl [ 524.755452][T24327] a823pgh [ 524.756777][T24327] pcl813 [ 524.757969][T24327] pcl813b [ 524.759746][T24327] acl8113 [ 524.761066][T24327] iso813 [ 524.762304][T24327] acl8216 [ 524.763602][T24327] a826pg [ 524.764814][T24327] comedi: valid board names for pcl730 driver are: [ 524.767460][T24327] pcl730 [ 524.769623][T24327] iso730 [ 524.770991][T24327] acl7130 [ 524.772156][T24327] pcm3730 [ 524.773233][T24327] pcl725 [ 524.774519][T24327] p8r8dio [ 524.775869][T24327] acl7225b [ 524.777203][T24327] p16r16dio [ 524.779269][T24327] pcl733 [ 524.780491][T24327] pcl734 [ 524.781819][T24327] opmm-1616-xt [ 524.783351][T24327] pearl-mm-p [ 524.784762][T24327] ir104-pbf [ 524.786187][T24327] comedi: valid board names for pcl726 driver are: [ 524.789419][T24327] pcl726 [ 524.790690][T24327] pcl727 [ 524.792026][T24327] pcl728 [ 524.793236][T24327] acl6126 [ 524.794571][T24327] acl6128 [ 524.795854][T24327] comedi: valid board names for pcl724 driver are: [ 524.798978][T24327] pcl724 [ 524.800560][T24327] pcl722 [ 524.801841][T24327] pcl731 [ 524.803113][T24327] acl7122 [ 524.804419][T24327] acl7124 [ 524.805725][T24327] pet48dio [ 524.807072][T24327] pcmio48 [ 524.808768][T24327] onyx-mm-dio [ 524.809873][T24327] comedi: valid board names for pcl711 driver are: [ 524.812235][T24327] pcl711 [ 524.813224][T24327] pcl711b [ 524.814273][T24327] acl8112hg [ 524.815517][T24327] acl8112dg [ 524.816733][T24327] comedi: valid board names for amplc_pc263 driver are: [ 524.820496][T24327] pc263 [ 524.821681][T24327] comedi: valid board names for amplc_pc236 driver are: [ 524.824578][T24327] pc36at [ 524.825842][T24327] comedi: valid board names for amplc_dio200 driver are: [ 524.829434][T24327] pc212e [ 524.830731][T24327] pc214e [ 524.831997][T24327] pc215e [ 524.833232][T24327] pc218e [ 524.834483][T24327] pc272e [ 524.835741][T24327] comedi: valid board names for comedi_parport driver are: [ 524.839426][T24327] comedi_parport [ 524.840646][T24327] comedi: valid board names for comedi_test driver are: [ 524.843428][T24327] comedi_test [ 524.844910][T24327] comedi: valid board names for comedi_bond driver are: [ 524.847781][T24327] comedi_bond [ 525.118157][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 526.147689][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 527.076352][T24370] syzkaller0: entered promiscuous mode [ 527.087222][T24370] syzkaller0: entered allmulticast mode [ 527.187198][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 527.441976][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7035'. [ 527.445998][T24380] netlink: 452 bytes leftover after parsing attributes in process `syz.7.7035'. [ 527.450175][T24380] netlink: 452 bytes leftover after parsing attributes in process `syz.7.7035'. [ 528.236638][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 529.184450][T24442] netlink: 'syz.5.7049': attribute type 1 has an invalid length. [ 529.207750][T24442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.232510][T24442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.234910][T24442] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 529.239195][T24442] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 529.266107][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 529.316558][T24449] bond4: entered promiscuous mode [ 529.319014][T24449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.323876][T24449] bond3: (slave bond4): Enslaving as an active interface with a down link [ 529.384415][T24442] macvlan2: entered promiscuous mode [ 529.387008][T24442] macvlan2: entered allmulticast mode [ 529.389956][T24442] bond3: entered promiscuous mode [ 529.392665][T24442] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.399903][T24442] bond3: left promiscuous mode [ 529.544214][T24458] netlink: 'syz.5.7053': attribute type 16 has an invalid length. [ 529.548136][T24458] netlink: 'syz.5.7053': attribute type 17 has an invalid length. [ 529.551682][T24458] lo: entered promiscuous mode [ 529.553925][T24458] lo: entered allmulticast mode [ 529.560734][T24458] tunl0: entered promiscuous mode [ 529.563201][T24458] tunl0: entered allmulticast mode [ 529.567458][T24458] gre0: entered promiscuous mode [ 529.569679][T24458] gre0: entered allmulticast mode [ 529.575053][T24458] gretap0: entered promiscuous mode [ 529.577723][T24458] gretap0: entered allmulticast mode [ 529.581864][T24458] erspan0: entered promiscuous mode [ 529.584231][T24458] erspan0: entered allmulticast mode [ 529.595120][T24458] ip_vti0: entered promiscuous mode [ 529.601434][T24458] ip_vti0: entered allmulticast mode [ 529.610528][T24458] ip6_vti0: entered promiscuous mode [ 529.615038][T24458] ip6_vti0: entered allmulticast mode [ 529.623859][T24458] sit0: entered promiscuous mode [ 529.628903][T24458] sit0: entered allmulticast mode [ 529.638946][T24458] ip6tnl0: entered promiscuous mode [ 529.643033][T24458] ip6tnl0: entered allmulticast mode [ 529.648991][T24458] ip6gre0: entered promiscuous mode [ 529.652920][T24458] ip6gre0: entered allmulticast mode [ 529.659909][T24458] syz_tun: entered promiscuous mode [ 529.663598][T24458] syz_tun: entered allmulticast mode [ 529.670619][T24458] bridge0: entered promiscuous mode [ 529.674641][T24458] bridge0: entered allmulticast mode [ 529.680208][T24458] vcan0: entered promiscuous mode [ 529.684278][T24458] vcan0: entered allmulticast mode [ 529.689458][T24458] bond0: entered promiscuous mode [ 529.693293][T24458] bond0: entered allmulticast mode [ 529.698319][T24458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.703754][T24458] team0: entered promiscuous mode [ 529.708082][T24458] team0: entered allmulticast mode [ 529.712776][T24458] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.718445][T24458] dummy0: entered promiscuous mode [ 529.722650][T24458] dummy0: entered allmulticast mode [ 529.733187][T24458] nlmon0: entered promiscuous mode [ 529.737183][T24458] nlmon0: entered allmulticast mode [ 529.744223][T24458] caif0: entered promiscuous mode [ 529.746413][T24458] caif0: entered allmulticast mode [ 529.748257][T24458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.233566][T24496] tipc: Started in network mode [ 530.235561][T24496] tipc: Node identity 4, cluster identity 4711 [ 530.242914][T24496] tipc: Node number set to 4 [ 530.305578][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 530.550186][T24509] warn_alloc: 1 callbacks suppressed [ 530.550199][T24509] syz.1.7060: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 530.559529][T24509] CPU: 2 UID: 0 PID: 24509 Comm: syz.1.7060 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.559550][T24509] Tainted: [L]=SOFTLOCKUP [ 530.559555][T24509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 530.559563][T24509] Call Trace: [ 530.559568][T24509] [ 530.559573][T24509] dump_stack_lvl+0x100/0x190 [ 530.559593][T24509] warn_alloc.cold+0x95/0x1c1 [ 530.559611][T24509] ? __pfx_warn_alloc+0x10/0x10 [ 530.559624][T24509] ? __alloc_pages_direct_compact+0x3fe/0x550 [ 530.559644][T24509] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 530.559664][T24509] ? rcu_is_watching+0x12/0xc0 [ 530.559677][T24509] ? psi_memstall_leave+0x1e4/0x2e0 [ 530.559693][T24509] ? lockdep_hardirqs_on+0x78/0x100 [ 530.559712][T24509] __alloc_frozen_pages_noprof+0x1442/0x2410 [ 530.559731][T24509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 530.559748][T24509] ? aa_file_perm+0x268/0x1530 [ 530.559765][T24509] ? aa_file_perm+0x277/0x1530 [ 530.559778][T24509] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 530.559795][T24509] ? policy_nodemask+0xed/0x4f0 [ 530.559809][T24509] alloc_pages_mpol+0x1fb/0x550 [ 530.559823][T24509] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 530.559835][T24509] ? stack_trace_save+0x8e/0xc0 [ 530.559850][T24509] ? __pfx_stack_trace_save+0x10/0x10 [ 530.559880][T24509] ? stack_depot_save_flags+0x27/0x9d0 [ 530.559898][T24509] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 530.559913][T24509] ___kmalloc_large_node+0x104/0x150 [ 530.559936][T24509] __kmalloc_large_node_noprof+0x1c/0x70 [ 530.559954][T24509] ? common_file_perm+0x1ab/0x4f0 [ 530.559975][T24509] __kmalloc_noprof+0x5be/0x850 [ 530.559996][T24509] qrtr_tun_write_iter+0xc1/0x1b0 [ 530.560017][T24509] aio_write+0x3ba/0x920 [ 530.560041][T24509] ? __pfx_aio_write+0x10/0x10 [ 530.560057][T24509] ? __lock_acquire+0x4a5/0x2630 [ 530.560077][T24509] ? __might_fault+0xc5/0x140 [ 530.560090][T24509] ? io_submit_one+0x1142/0x1fb0 [ 530.560102][T24509] io_submit_one+0x1142/0x1fb0 [ 530.560116][T24509] ? __lock_acquire+0x4a5/0x2630 [ 530.560129][T24509] ? __pfx_io_submit_one+0x10/0x10 [ 530.560147][T24509] ? __might_fault+0xc5/0x140 [ 530.560160][T24509] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 530.560174][T24509] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 530.560190][T24509] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 530.560213][T24509] __do_fast_syscall_32+0xe3/0x8c0 [ 530.560232][T24509] do_fast_syscall_32+0x32/0x70 [ 530.560249][T24509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.560263][T24509] RIP: 0023:0xf7f85f6c [ 530.560272][T24509] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 530.560283][T24509] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 530.560295][T24509] RAX: ffffffffffffffda RBX: 00000000f7f7d000 RCX: 00000000000000e7 [ 530.560302][T24509] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.560308][T24509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.560315][T24509] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 530.560321][T24509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.560335][T24509] [ 530.560437][T24509] Mem-Info: [ 530.681250][T24509] active_anon:5539 inactive_anon:10030 isolated_anon:0 [ 530.681250][T24509] active_file:1054 inactive_file:3083 isolated_file:0 [ 530.681250][T24509] unevictable:1768 dirty:330 writeback:0 [ 530.681250][T24509] slab_reclaimable:8074 slab_unreclaimable:89781 [ 530.681250][T24509] mapped:25947 shmem:15381 pagetables:1634 [ 530.681250][T24509] sec_pagetables:333 bounce:0 [ 530.681250][T24509] kernel_misc_reclaimable:0 [ 530.681250][T24509] free:44229 free_pcp:1533 free_cma:0 [ 530.695655][T24509] Node 0 active_anon:3284kB inactive_anon:196kB active_file:316kB inactive_file:156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2924kB dirty:8kB writeback:0kB shmem:7644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9384kB pagetables:1660kB sec_pagetables:1180kB all_unreclaimable? yes Balloon:0kB [ 530.705814][T24509] Node 1 active_anon:18972kB inactive_anon:39924kB active_file:3900kB inactive_file:12176kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100964kB dirty:1312kB writeback:0kB shmem:53880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7504kB pagetables:4876kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB [ 530.745393][T24509] Node 0 DMA free:2096kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.755069][T24509] lowmem_reserve[]: 0 287 287 287 287 [ 530.756931][T24509] Node 0 DMA32 free:19004kB boost:2048kB min:15256kB low:18556kB high:21856kB reserved_highatomic:2048KB free_highatomic:896KB active_anon:3284kB inactive_anon:160kB active_file:316kB inactive_file:156kB unevictable:3536kB writepending:8kB zspages:2140kB present:1032196kB managed:294288kB mlocked:0kB bounce:0kB free_pcp:3460kB local_pcp:384kB free_cma:0kB [ 530.767365][T24509] lowmem_reserve[]: 0 0 0 0 0 [ 530.768935][T24509] Node 1 DMA32 free:155216kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:696KB active_anon:18972kB inactive_anon:39924kB active_file:3900kB inactive_file:12176kB unevictable:3536kB writepending:1312kB zspages:5712kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:4064kB local_pcp:940kB free_cma:0kB [ 530.779847][T24509] lowmem_reserve[]: 0 0 0 0 0 [ 530.781379][T24509] Node 0 DMA: 28*4kB (UM) 12*8kB (UM) 2*16kB (M) 2*32kB (U) 2*64kB (M) 3*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2096kB [ 530.787103][T24509] Node 0 DMA32: 561*4kB (UME) 327*8kB (UE) 84*16kB (UE) 108*32kB (UMEH) 30*64kB (UMEH) 18*128kB (UMEH) 6*256kB (UMH) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 19004kB [ 530.794634][T24509] Node 1 DMA32: 2622*4kB (UMEH) 5211*8kB (UMEH) 3975*16kB (UMEH) 522*32kB (UMEH) 124*64kB (UMEH) 43*128kB (UM) 3*256kB (U) 5*512kB (U) 5*1024kB (UM) 0*2048kB 0*4096kB = 154368kB [ 530.801427][T24509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.804450][T24509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 530.808256][T24509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.812063][T24509] Node 1 hugepages_total=6 hugepages_free=1 hugepages_surp=2 hugepages_size=2048kB [ 530.815024][T24509] 20379 total pagecache pages [ 530.816654][T24509] 826 pages in swap cache [ 530.818223][T24509] Free swap = 96164kB [ 530.819628][T24509] Total swap = 124996kB [ 530.820949][T24509] 524155 pages RAM [ 530.822169][T24509] 0 pages HighMem/MovableOnly [ 530.823702][T24509] 209690 pages reserved [ 530.824990][T24509] 0 pages cma reserved [ 531.345139][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 532.384689][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 532.836282][T24563] bond3: entered allmulticast mode [ 533.361376][T24591] tipc: Enabling of bearer rejected, failed to enable media [ 533.424729][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 534.134535][T24617] syzkaller0: entered promiscuous mode [ 534.136905][T24617] syzkaller0: entered allmulticast mode [ 534.151167][T24617] tipc: Enabled bearer , priority 0 [ 534.194508][T24616] tipc: Resetting bearer [ 534.260962][T24616] tipc: Disabling bearer [ 534.417364][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 534.417381][ T40] audit: type=1326 audit(1770900364.904:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24604 comm="syz.2.7083" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x0 [ 534.463511][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 535.502993][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 536.403315][T24656] syzkaller0: entered promiscuous mode [ 536.405250][T24656] syzkaller0: entered allmulticast mode [ 536.552498][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 537.446883][T24679] geneve2: entered promiscuous mode [ 537.448810][T24679] geneve2: entered allmulticast mode [ 537.454168][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.465499][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.469476][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.475412][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.581964][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 537.637869][T24683] 2: renamed from team_slave_1 [ 537.921923][T22629] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 538.150924][T22629] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 538.154758][T22629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.191733][T22629] usb 6-1: Product: syz [ 538.193555][T22629] usb 6-1: Manufacturer: syz [ 538.195749][T22629] usb 6-1: SerialNumber: syz [ 538.266542][T22629] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 538.318079][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 538.621503][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 538.632206][T24689] random: crng reseeded on system resumption [ 538.642530][ T6577] usb 6-1: USB disconnect, device number 34 [ 538.767163][T24719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7108'. [ 538.770102][T24719] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7108'. [ 538.913043][ T40] audit: type=1326 audit(1770900369.406:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 538.931383][ T40] audit: type=1326 audit(1770900369.406:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 538.942455][ T40] audit: type=1326 audit(1770900369.406:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 538.950627][ T40] audit: type=1326 audit(1770900369.406:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 538.959217][ T40] audit: type=1326 audit(1770900369.406:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 538.981395][ T40] audit: type=1326 audit(1770900369.406:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 538.989553][ T40] audit: type=1326 audit(1770900369.406:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 538.997846][ T40] audit: type=1326 audit(1770900369.406:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 539.005738][ T40] audit: type=1326 audit(1770900369.406:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24725 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 539.166280][T24733] fuse: Bad value for 'fd' [ 539.424276][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 539.434694][ T9] ath9k_htc: Failed to initialize the device [ 539.444106][ T6577] usb 6-1: ath9k_htc: USB layer deinitialized [ 539.660901][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 540.633150][T24779] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 540.636312][ T1252] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.639755][ T1252] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.651805][ T1252] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.660108][ T1252] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.700504][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 541.739858][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 542.779356][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 542.833453][T24825] netlink: 'syz.7.7136': attribute type 1 has an invalid length. [ 542.857008][T24825] 8021q: adding VLAN 0 to HW filter on device bond12 [ 542.898325][T24824] netlink: 'syz.1.7135': attribute type 1 has an invalid length. [ 542.958844][T24825] bond12: (slave veth25): Enslaving as an active interface with a down link [ 542.967789][T24827] bond12 (unregistering): (slave veth25): Releasing active interface [ 542.971308][T24827] bond12 (unregistering): Released all slaves [ 543.828826][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 544.785972][T24840] bond3: left allmulticast mode [ 544.858344][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 545.897792][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 546.901393][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7146'. [ 546.904361][T24864] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7146'. [ 546.920494][T24864] vlan3: entered allmulticast mode [ 546.922769][T24864] hsr0: entered allmulticast mode [ 546.925109][T24864] hsr_slave_0: entered allmulticast mode [ 546.928203][T24864] hsr_slave_1: entered allmulticast mode [ 546.937291][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 546.938818][T24870] bond1: option mode: unable to set because the bond device is up [ 546.949864][T24870] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 546.958623][T24870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.965744][T24870] bond1: (slave lo): making interface the new active one [ 546.969007][T24870] bond1: (slave lo): Enslaving as an active interface with an up link [ 546.973487][T24870] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 546.991217][T24866] ptrace attach of "/syz-executor exec"[24871] was attempted by "/syz-executor exec"[24866] [ 547.976787][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 548.189985][T24895] overlayfs: missing 'lowerdir' [ 549.016283][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 549.107150][T24899] netlink: 'syz.7.7159': attribute type 1 has an invalid length. [ 549.119557][T24899] 8021q: adding VLAN 0 to HW filter on device bond12 [ 549.159408][T24899] 8021q: adding VLAN 0 to HW filter on device bond12 [ 549.162372][T24899] bond12: (slave vxcan7): The slave device specified does not support setting the MAC address [ 549.167171][T24899] bond12: (slave vxcan7): Error -95 calling set_mac_address [ 549.211632][T24907] gretap3: entered promiscuous mode [ 549.215473][T24907] bond12: (slave gretap3): making interface the new active one [ 549.236537][T24907] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 549.288639][T24899] macvlan2: entered promiscuous mode [ 549.293625][T24899] macvlan2: entered allmulticast mode [ 549.297004][T24899] bond12: entered promiscuous mode [ 549.301926][T24899] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.315625][T24899] bond12: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 549.321328][T24899] bond12: left promiscuous mode [ 550.065689][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 551.105175][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 552.134650][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 553.184144][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 553.950728][T24993] netlink: 'syz.5.7184': attribute type 1 has an invalid length. [ 553.975578][T24993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 553.985961][T24993] vlan2: entered promiscuous mode [ 553.987619][T24993] bond5: entered promiscuous mode [ 553.989456][T24993] vlan2: entered allmulticast mode [ 553.991077][T24993] bond5: entered allmulticast mode [ 554.066397][T24993] bond5: (slave bridge1): making interface the new active one [ 554.069480][T24993] bridge1: entered promiscuous mode [ 554.072467][T24993] bridge1: entered allmulticast mode [ 554.076629][T24993] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 554.160940][T24998] netlink: 'syz.5.7185': attribute type 1 has an invalid length. [ 554.181353][T24998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 554.203313][T24998] vlan3: entered allmulticast mode [ 554.205262][T24998] veth0_to_bond: entered allmulticast mode [ 554.207883][T24998] bond6: (slave vlan3): Opening slave failed [ 554.213639][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 554.707202][T25007] syzkaller0: entered promiscuous mode [ 554.709926][T25007] syzkaller0: entered allmulticast mode [ 555.253119][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 556.302583][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 557.015072][T25032] bond4: left promiscuous mode [ 557.018812][T25032] gretap1: left promiscuous mode [ 557.036528][T25032] gretap3: left promiscuous mode [ 557.332564][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 558.381559][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 559.195402][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 559.195420][ T40] audit: type=1326 audit(1770900389.696:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25076 comm="syz.7.7204" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f14f6c code=0x0 [ 559.411002][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 560.450488][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 561.489982][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 562.442238][T25095] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 562.447319][T25095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.512646][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7208'. [ 562.529519][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 562.537934][T25098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.564918][T25098] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 562.793148][T25111] netlink: 'syz.1.7212': attribute type 1 has an invalid length. [ 562.816727][T25111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.877408][T25111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.881151][T25111] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 562.886750][T25111] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 562.925792][T25120] gretap1: entered promiscuous mode [ 562.929388][T25120] bond4: (slave gretap1): making interface the new active one [ 562.932844][T25120] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 562.952970][T25120] macvlan2: entered promiscuous mode [ 562.954838][T25120] macvlan2: entered allmulticast mode [ 562.957363][T25120] bond4: entered promiscuous mode [ 562.960409][T25120] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 562.964545][T25120] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 562.971543][T25120] bond4: left promiscuous mode [ 563.568939][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 564.608427][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 565.647970][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 566.286425][T25169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7231'. [ 566.308562][T25169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7231'. [ 566.687396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 566.822985][T25181] netlink: 'syz.2.7225': attribute type 1 has an invalid length. [ 566.871856][T25181] 8021q: adding VLAN 0 to HW filter on device bond14 [ 566.879500][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7235'. [ 566.889107][T25184] 8021q: adding VLAN 0 to HW filter on device bond14 [ 566.898298][T25184] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 566.902474][T25184] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 566.933494][T25179] bond3: (slave dummy0): Releasing backup interface [ 566.967511][T25181] gretap2: entered promiscuous mode [ 566.975448][T25181] bond14: (slave gretap2): making interface the new active one [ 566.981072][T25181] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 567.043009][T25181] macvlan8: entered promiscuous mode [ 567.045518][T25181] macvlan8: entered allmulticast mode [ 567.048696][T25181] bond14: entered promiscuous mode [ 567.051453][T25181] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 567.115820][T25181] bond14: (slave macvlan8): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 567.123709][T25181] bond14: left promiscuous mode [ 567.216978][T25189] syzkaller0: entered promiscuous mode [ 567.219746][T25189] syzkaller0: entered allmulticast mode [ 567.569659][ T40] audit: type=1326 audit(1770900398.070:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25205 comm="syz.1.7234" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x0 [ 567.736843][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 567.866579][T25220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7239'. [ 568.499089][T25245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.520359][T25245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.685064][ T40] audit: type=1326 audit(1770900399.181:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25240 comm="syz.1.7244" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f85f6c code=0x0 [ 568.776399][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 569.805882][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 570.845300][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 571.884765][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 571.925405][T25291] netlink: 'syz.5.7255': attribute type 3 has an invalid length. [ 572.687557][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.690185][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.934269][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 573.044506][T25303] netlink: 'syz.5.7257': attribute type 1 has an invalid length. [ 573.058103][T25303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.228388][T25303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.230811][T25303] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 573.250257][T25303] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 573.309378][T25308] gretap1: entered promiscuous mode [ 573.313310][T25308] bond7: (slave gretap1): making interface the new active one [ 573.324406][T25308] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 573.377543][T25314] macvlan2: entered promiscuous mode [ 573.379788][T25314] macvlan2: entered allmulticast mode [ 573.382766][T25314] bond7: entered promiscuous mode [ 573.385701][T25314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 573.395376][T25314] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 573.401305][T25314] bond7: left promiscuous mode [ 573.963884][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 574.158107][T25338] tipc: Enabled bearer , priority 0 [ 574.162592][T25338] syzkaller0: entered promiscuous mode [ 574.164935][T25338] syzkaller0: entered allmulticast mode [ 574.184933][T25338] tipc: Resetting bearer [ 574.194282][T25337] tipc: Resetting bearer [ 574.214285][T25337] tipc: Disabling bearer [ 575.003245][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 575.149177][ T40] audit: type=1326 audit(1770900405.654:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.5.7273" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 575.711406][T25367] syzkaller0: entered promiscuous mode [ 575.713683][T25367] syzkaller0: entered allmulticast mode [ 575.719347][T25367] 0: reclassify loop, rule prio 0, protocol 800 [ 576.042739][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 576.268483][ T3557] IPVS: starting estimator thread 0... [ 576.365972][T25386] IPVS: using max 23 ests per chain, 55200 per kthread [ 577.082164][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 578.131686][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 578.726599][T25427] netlink: 'syz.1.7289': attribute type 1 has an invalid length. [ 579.000880][T25445] netlink: 'syz.2.7291': attribute type 1 has an invalid length. [ 579.178902][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 579.483612][T23310] bond5 (unregistering): (slave vti0): Releasing backup interface [ 579.541820][T23310] bond7 (unregistering): (slave gretap1): Releasing active interface [ 579.629922][T23310] bond1 (unregistering): (slave geneve2): Releasing active interface [ 579.748663][T23310] bond6 (unregistering): (slave bridge1): Releasing active interface [ 579.806749][T25465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7294'. [ 579.880974][ T5291] Bluetooth: hci3: command 0x0406 tx timeout [ 580.200668][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 580.450071][T23310] batman_adv: batadv0: Removing interface: macvlan2 [ 580.458603][T23310] bond0 (unregistering): Released all slaves [ 580.468020][T23310] bond1 (unregistering): Released all slaves [ 580.479535][T23310] bond2 (unregistering): Released all slaves [ 580.488433][T23310] bond3 (unregistering): Released all slaves [ 580.496940][T23310] bond4 (unregistering): Released all slaves [ 580.506640][T23310] bond5 (unregistering): Released all slaves [ 580.516185][T23310] bond6 (unregistering): Released all slaves [ 580.526324][T23310] bond7 (unregistering): Released all slaves [ 580.538556][T23310] bond8 (unregistering): Released all slaves [ 580.557573][T23310] bond9 (unregistering): Released all slaves [ 580.587940][T25445] 8021q: adding VLAN 0 to HW filter on device bond15 [ 580.604800][T25447] 8021q: adding VLAN 0 to HW filter on device bond15 [ 580.608272][T25447] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 580.614040][T25447] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 580.646291][T25451] tipc: Enabled bearer , priority 0 [ 580.674828][T25454] macvlan8: entered promiscuous mode [ 580.677193][T25454] macvlan8: entered allmulticast mode [ 580.679709][T25454] bond15: entered promiscuous mode [ 580.687490][T25454] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 580.725744][T25454] bond15: left promiscuous mode [ 580.804785][T23310] tipc: Left network mode [ 581.240219][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 581.285842][T23310] hsr_slave_0: left promiscuous mode [ 581.288841][T23310] hsr_slave_1: left promiscuous mode [ 581.902040][ T40] audit: type=1804 audit(1770900412.417:1983): pid=25512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7301" name="bus" dev="ramfs" ino=108618 res=1 errno=0 [ 581.919819][ T40] audit: type=1804 audit(1770900412.417:1984): pid=25512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.7301" name="bus" dev="ramfs" ino=108618 res=1 errno=0 [ 582.289587][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 583.319089][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 584.358574][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 584.368830][T25545] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 585.015846][T25557] netlink: 'syz.7.7313': attribute type 13 has an invalid length. [ 585.070118][T25560] syzkaller0: Caught tx_queue_len zero misconfig [ 585.398065][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 585.703962][T25582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7320'. [ 586.437523][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 587.479499][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 588.526649][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 589.556122][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 590.030097][T25618] tipc: Enabled bearer , priority 0 [ 590.033267][T25618] syzkaller0: entered promiscuous mode [ 590.035238][T25618] syzkaller0: entered allmulticast mode [ 590.064170][T25618] tipc: Resetting bearer [ 590.068010][T25617] tipc: Resetting bearer [ 590.078175][T25617] tipc: Disabling bearer [ 590.231504][T25621] netlink: 107460 bytes leftover after parsing attributes in process `syz.1.7330'. [ 590.605481][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 590.629642][T25634] lo: Caught tx_queue_len zero misconfig [ 591.033176][T25649] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 591.041793][T25649] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 591.045715][T25649] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 591.635028][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 591.746841][T25666] netlink: 'syz.7.7340': attribute type 2 has an invalid length. [ 592.069754][T25672] netlink: 'syz.2.7342': attribute type 13 has an invalid length. [ 592.674547][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.713883][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 594.753339][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 595.248353][ T5291] Bluetooth: hci2: command 0x0406 tx timeout [ 595.792824][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 596.175967][T25725] netlink: 107460 bytes leftover after parsing attributes in process `syz.5.7348'. [ 596.310374][ T40] audit: type=1326 audit(1770900426.825:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.332663][ T40] audit: type=1326 audit(1770900426.825:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.340878][ T40] audit: type=1326 audit(1770900426.825:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.383472][ T40] audit: type=1326 audit(1770900426.825:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.397390][ T40] audit: type=1326 audit(1770900426.825:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.407301][ T40] audit: type=1326 audit(1770900426.835:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf718572b code=0x7ffc0000 [ 596.432771][ T40] audit: type=1326 audit(1770900426.835:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.440218][ T40] audit: type=1326 audit(1770900426.835:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.450417][ T40] audit: type=1326 audit(1770900426.835:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.457732][ T40] audit: type=1326 audit(1770900426.835:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.1.7356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 596.832345][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 597.871978][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 598.055159][T25754] veth1_vlan: left promiscuous mode [ 598.669366][ T1140] bridge_slave_1: left allmulticast mode [ 598.672449][ T1140] bridge_slave_1: left promiscuous mode [ 598.674512][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.683460][ T1140] bridge_slave_0: left allmulticast mode [ 598.685953][ T1140] bridge_slave_0: left promiscuous mode [ 598.688467][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.921281][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 598.992102][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7360'. [ 599.404320][T25772] netlink: 'syz.5.7362': attribute type 1 has an invalid length. [ 599.803775][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.813099][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.825017][ T1140] bond0 (unregistering): Released all slaves [ 599.904320][T25772] 8021q: adding VLAN 0 to HW filter on device bond8 [ 599.921186][T25773] dummy0: left promiscuous mode [ 599.923787][T25773] dummy0: left allmulticast mode [ 599.932471][T25773] bond8: (slave dummy0): making interface the new active one [ 599.936781][T25773] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 599.949892][ T1140] tipc: Left network mode [ 599.951928][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 600.114857][T25787] netlink: 'syz.5.7364': attribute type 2 has an invalid length. [ 600.131676][T25787] #{6c: entered promiscuous mode [ 600.139880][T25787] netlink: 'syz.5.7364': attribute type 2 has an invalid length. [ 600.143471][T25787] #{6c: left promiscuous mode [ 600.926460][ T1140] hsr_slave_0: left promiscuous mode [ 600.929406][ T1140] hsr_slave_1: left promiscuous mode [ 600.932542][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.990234][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 601.011144][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.107550][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 601.144701][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 602.001692][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7371'. [ 602.029703][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 602.811390][ T5949] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 603.015688][T25858] netlink: 'syz.1.7377': attribute type 2 has an invalid length. [ 603.052696][T25858] #{6c: entered promiscuous mode [ 603.069205][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 603.087474][T25858] netlink: 'syz.1.7377': attribute type 2 has an invalid length. [ 603.091628][T25858] #{6c: left promiscuous mode [ 603.556521][T23310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.691244][T23310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.804591][T23310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.870345][T23310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.093323][T23310] bridge_slave_1: left allmulticast mode [ 604.095835][T23310] bridge_slave_1: left promiscuous mode [ 604.098665][T23310] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.108683][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 604.336569][T23310] bridge_slave_0: left allmulticast mode [ 604.361635][T23310] bridge_slave_0: left promiscuous mode [ 604.364311][T23310] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.158167][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 606.187659][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 606.314605][T23310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.324972][T23310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.330615][T23310] bond0 (unregistering): Released all slaves [ 606.336329][T23310] bond1 (unregistering): Released all slaves [ 607.227204][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 607.357116][T23310] hsr_slave_0: left promiscuous mode [ 607.367163][T23310] hsr_slave_1: left promiscuous mode [ 607.371786][T23310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.374912][T23310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.410503][T25926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7384'. [ 607.418824][T23310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.421187][T23310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.438250][T23310] veth1_macvtap: left promiscuous mode [ 607.440541][T23310] veth0_macvtap: left promiscuous mode [ 607.444432][T23310] veth1_vlan: left promiscuous mode [ 607.446456][T23310] veth0_vlan: left promiscuous mode [ 607.881126][T23310] team0 (unregistering): Port device team_slave_1 removed [ 607.917311][T23310] team0 (unregistering): Port device team_slave_0 removed [ 608.266613][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 609.306133][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 609.498999][T26010] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7392'. [ 609.511908][T26010] bond8: (slave dummy0): Releasing active interface [ 609.882032][T26020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7393'. [ 609.974219][T26020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7393'. [ 610.345611][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 610.780701][T26033] netlink: 'syz.7.7398': attribute type 1 has an invalid length. [ 610.838933][T26033] netlink: 'syz.7.7398': attribute type 3 has an invalid length. [ 611.385073][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 612.434473][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 612.854698][T26059] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 612.859046][T26059] Error validating options; rc = [-22] [ 613.473967][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 614.202431][T26101] tipc: Enabling of bearer rejected, failed to enable media [ 614.246171][T26104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7407'. [ 614.503474][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 615.163331][T26129] binder: 26128:26129 ioctl c018620c 0 returned -14 [ 615.187841][T26129] netlink: 'syz.1.7416': attribute type 1 has an invalid length. [ 615.206383][T26129] binder: BINDER_SET_CONTEXT_MGR already set [ 615.209118][T26129] binder: 26128:26129 ioctl 40046207 0 returned -16 [ 615.552928][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 616.582419][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 617.631892][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 618.138788][T26153] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 618.260956][T26153] bond1: (slave lo): Releasing active interface [ 618.273809][T26153] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 618.293631][T26153] bond14: (slave gretap2): Releasing active interface [ 618.320841][T26153] netlink: 'syz.2.7422': attribute type 10 has an invalid length. [ 618.671520][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 619.529891][T26182] tipc: Enabled bearer , priority 0 [ 619.534288][T26182] syzkaller0: entered promiscuous mode [ 619.536504][T26182] syzkaller0: entered allmulticast mode [ 619.564889][T26182] tipc: Resetting bearer [ 619.569596][T26181] tipc: Resetting bearer [ 619.583265][T26181] tipc: Disabling bearer [ 619.710858][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 620.750344][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 621.779831][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 622.819364][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 623.858810][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 624.898283][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 625.654199][ T5949] Bluetooth: hci3: unexpected event 0x10 length: 11 > 1 [ 625.658265][ T5291] Bluetooth: hci3: hardware error 0xff [ 625.937850][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 626.418014][T26308] syzkaller0: entered promiscuous mode [ 626.420796][T26308] syzkaller0: entered allmulticast mode [ 626.931298][T26317] netlink: zone id is out of range [ 626.977387][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 627.170098][T26317] netlink: set zone limit has 4 unknown bytes [ 627.727182][ T5291] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 628.026748][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 628.177069][T26322] netlink: 'syz.7.7454': attribute type 2 has an invalid length. [ 628.182714][T26322] #{6c: entered promiscuous mode [ 628.218278][T26322] netlink: 'syz.7.7454': attribute type 2 has an invalid length. [ 628.221160][T26322] #{6c: left promiscuous mode [ 629.056238][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 630.095663][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 630.678496][T26344] 9p: Could not find request transport: fFq6d [ 631.135151][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 632.174628][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 632.588775][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.591885][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.595329][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.596698][ T5291] Bluetooth: hci1: unexpected event 0x10 length: 11 > 1 [ 632.598674][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.601416][ T5949] Bluetooth: hci1: hardware error 0xff [ 633.224175][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 633.857976][T26387] netlink: 'syz.2.7468': attribute type 2 has an invalid length. [ 633.867793][T26387] #{6c: entered promiscuous mode [ 633.877231][T26387] netlink: 'syz.2.7468': attribute type 2 has an invalid length. [ 633.880118][T26387] #{6c: left promiscuous mode [ 634.096273][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.096472][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.253602][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 634.653624][ T5949] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 635.293134][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 636.211718][T26412] netlink: zone id is out of range [ 636.332612][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 636.383170][T26412] netlink: set zone limit has 4 unknown bytes [ 637.372286][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 638.316247][T26424] veth0_vlan: left promiscuous mode [ 638.319275][T26424] veth0_vlan: entered promiscuous mode [ 638.411584][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 638.803623][T26433] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 638.820235][T26433] bridge_slave_0: left allmulticast mode [ 638.825434][T26433] bridge_slave_0: left promiscuous mode [ 638.827915][T26433] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.833157][T26433] bridge_slave_1: left allmulticast mode [ 638.835454][T26433] bridge_slave_1: left promiscuous mode [ 638.837954][T26433] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.846235][T26433] bond0: (slave bond_slave_0): Releasing backup interface [ 638.850886][T26433] bond0: (slave bond_slave_1): Releasing backup interface [ 638.856085][T26433] team0: Port device team_slave_0 removed [ 638.859854][T26433] team0: Port device 12 removed [ 638.862691][T26433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.866334][T26433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.869855][T26433] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.877254][T26434] netlink: 'syz.1.7484': attribute type 10 has an invalid length. [ 638.880369][T26434] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 639.451002][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 640.275421][T26453] netlink: 'syz.7.7489': attribute type 4 has an invalid length. [ 640.490471][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 641.529976][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 642.569434][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 643.618902][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 643.878592][T26514] tipc: Enabling of bearer rejected, already enabled [ 644.628611][T26530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7503'. [ 644.648383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 645.629761][T26529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7503'. [ 645.687895][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 646.727474][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 647.007638][T26013] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 647.169191][T26013] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 647.174546][T26013] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 647.185388][T26013] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 647.196464][T26013] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 647.208730][T26013] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 647.220826][T26013] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 647.226985][T26013] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 647.231874][T26013] usb 6-1: Product: syz [ 647.234158][T26013] usb 6-1: Manufacturer: syz [ 647.249999][T26013] cdc_wdm 6-1:1.0: skipping garbage [ 647.256433][T26013] cdc_wdm 6-1:1.0: skipping garbage [ 647.263076][T26013] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 647.265600][T26013] cdc_wdm 6-1:1.0: Unknown control protocol [ 647.659447][T26556] netlink: 'syz.2.7511': attribute type 4 has an invalid length. [ 647.766892][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 647.974829][T26561] lo: Caught tx_queue_len zero misconfig [ 648.570830][T26577] netlink: 'syz.5.7517': attribute type 2 has an invalid length. [ 648.580003][T26577] #{6c: entered promiscuous mode [ 648.593157][T26577] netlink: 'syz.5.7517': attribute type 2 has an invalid length. [ 648.596820][T26577] #{6c: left promiscuous mode [ 648.806451][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 648.870754][T26013] usb 6-1: USB disconnect, device number 35 [ 649.845899][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 650.885308][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 651.409448][T26595] netlink: 'syz.5.7521': attribute type 4 has an invalid length. [ 651.924745][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 652.699397][T26624] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 652.702744][T26624] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 652.974269][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 653.568332][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7526'. [ 654.003828][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 655.043214][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 656.005351][T26649] netlink: 'syz.5.7532': attribute type 2 has an invalid length. [ 656.023736][T26649] #{6c: entered promiscuous mode [ 656.033071][T26649] netlink: 'syz.5.7532': attribute type 2 has an invalid length. [ 656.036520][T26649] #{6c: left promiscuous mode [ 656.082709][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 656.808190][T26670] bridge0: port 1(syz_tun) entered blocking state [ 656.811246][T26670] bridge0: port 1(syz_tun) entered disabled state [ 656.831085][T26670] syz_tun: entered allmulticast mode [ 656.834775][T26670] syz_tun: entered promiscuous mode [ 657.122199][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 658.171639][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 659.211084][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 659.804595][T26709] netlink: 'syz.2.7543': attribute type 2 has an invalid length. [ 659.846267][T26709] #{6c: entered promiscuous mode [ 659.861712][T26709] netlink: 'syz.2.7543': attribute type 2 has an invalid length. [ 659.864896][T26709] #{6c: left promiscuous mode [ 660.053075][T26711] 9p: Could not find request transport: fFq6d [ 660.240606][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 661.280154][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 662.329578][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 663.359155][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 664.137007][ T60] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.140983][ T60] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.144727][ T60] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.157138][ T60] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.408508][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 665.157987][T26760] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 665.163150][T26760] Error validating options; rc = [-22] [ 665.437973][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 666.477544][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 667.225657][T26778] netlink: 'syz.2.7562': attribute type 1 has an invalid length. [ 667.265495][T26778] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address [ 667.269918][T26778] bond16: (slave vxcan1): Error -95 calling set_mac_address [ 667.332369][T26781] bond16: (slave gretap3): making interface the new active one [ 667.336601][T26781] bond16: (slave gretap3): Enslaving as an active interface with an up link [ 667.354787][T26781] macvlan8: entered promiscuous mode [ 667.358389][T26781] macvlan8: entered allmulticast mode [ 667.362132][T26781] bond16: entered promiscuous mode [ 667.364387][T26781] gretap3: entered promiscuous mode [ 667.367534][T26781] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 667.374669][T26781] bond16: (slave macvlan8): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 667.380773][T26781] bond16: left promiscuous mode [ 667.382632][T26781] gretap3: left promiscuous mode [ 667.517018][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 668.566478][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 668.902462][T26811] SQUASHFS error: Failed to read block 0x0: -5 [ 669.595936][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 670.645384][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 671.080809][T26854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7580'. [ 671.684992][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 672.287469][T26874] ptrace attach of ""[26878] was attempted by "/syz-executor exec"[26874] [ 672.724347][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 672.996106][T26882] tipc: Enabling of bearer rejected, failed to enable media [ 673.753909][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 674.803422][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 675.842832][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 676.410283][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7594'. [ 676.872276][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 676.916878][T26922] netlink: 'syz.7.7599': attribute type 1 has an invalid length. [ 677.009580][T26922] bond13: (slave vxcan7): The slave device specified does not support setting the MAC address [ 677.021668][T26922] bond13: (slave vxcan7): Error -95 calling set_mac_address [ 677.191966][T26928] macvlan2: entered promiscuous mode [ 677.209135][T26928] macvlan2: entered allmulticast mode [ 677.211348][T26928] bond13: entered promiscuous mode [ 677.219113][T26928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 677.240383][T26928] bond13: left promiscuous mode [ 677.911863][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 678.951296][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 679.990761][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 681.040206][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 681.557160][T26989] netlink: 'syz.1.7609': attribute type 1 has an invalid length. [ 681.561323][T26990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7607'. [ 681.655703][T26989] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 681.659626][T26989] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 681.799486][T26996] bond5: (slave gretap2): making interface the new active one [ 681.810728][T26996] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 681.974182][T26989] macvlan2: entered promiscuous mode [ 681.976286][T26989] macvlan2: entered allmulticast mode [ 681.978985][T26989] bond5: entered promiscuous mode [ 682.002578][T26989] gretap2: entered promiscuous mode [ 682.005450][T26989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 682.020258][T26989] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 682.031996][T26989] bond5: left promiscuous mode [ 682.036360][T26989] gretap2: left promiscuous mode [ 682.069694][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 683.109154][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 684.148663][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 685.188148][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 686.227605][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 686.275255][T27023] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 686.280951][T27023] Error validating options; rc = [-22] [ 687.267094][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 687.735069][T27076] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 687.742980][T27076] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 688.306605][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 688.644341][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 688.644352][ T40] audit: type=1804 audit(2000000010.785:1996): pid=27101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7632" name="/newroot/261/file1" dev="fuse" ino=1 res=1 errno=0 [ 688.983474][T27115] netlink: 'syz.5.7635': attribute type 4 has an invalid length. [ 689.356056][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 690.385561][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 691.435024][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 692.464518][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 692.657760][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.660950][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.504078][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 694.542879][T27190] syz.1.7650 (27190): drop_caches: 2 [ 694.545250][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 695.507507][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.511202][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.582971][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 695.865567][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.868972][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.632390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 697.661911][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 698.701388][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 699.740887][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 700.102383][T27256] netlink: 'syz.5.7668': attribute type 10 has an invalid length. [ 700.152692][T27256] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 700.155689][T27262] netlink: 'syz.5.7668': attribute type 10 has an invalid length. [ 700.155750][T27256] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 700.178056][T27256] team0: Port device netdevsim0 added [ 700.180238][T27262] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 700.182855][T27262] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 700.198997][T27262] team0: Port device netdevsim0 removed [ 700.204271][T27262] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 700.206729][T27262] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 700.209543][T27262] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 700.387153][T27268] mac80211_hwsim hwsim20 : renamed from wlan1 [ 700.780529][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 701.819808][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 702.663183][T27277] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 702.667320][T27277] Error validating options; rc = [-22] [ 702.859278][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 703.898782][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 704.948257][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 704.996453][T27319] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7683'. [ 705.977750][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 706.917844][T10923] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 707.017558][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 707.232766][T27351] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7692'. [ 707.750058][ T1153] bridge_slave_1: left allmulticast mode [ 707.756395][ T1153] bridge_slave_1: left promiscuous mode [ 707.763545][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.772139][ T1153] bridge_slave_0: left allmulticast mode [ 707.775714][ T1153] bridge_slave_0: left promiscuous mode [ 707.781698][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.056867][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 708.081877][ T1153] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 709.033999][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.045892][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.088995][T27381] ptrace attach of ""[27382] was attempted by "/syz-executor exec"[27381] [ 709.096263][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 709.105114][T27383] tipc: Can't bind to reserved service type 0 [ 709.108877][ T1153] bond0 (unregistering): Released all slaves [ 709.323020][ T1153] bond1 (unregistering): Released all slaves [ 709.523312][ T1153] bond2 (unregistering): Released all slaves [ 709.851080][ T1153] tipc: Disabling bearer [ 709.866182][ T1153] tipc: Left network mode [ 710.453170][T27406] ptrace attach of "/syz-executor exec"[22475] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 711.311523][ T1153] hsr_slave_0: left promiscuous mode [ 711.375119][ T1153] hsr_slave_1: left promiscuous mode [ 711.378006][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.392030][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.580782][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 711.593850][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 713.836881][ T1153] IPVS: stop unused estimator thread 0... [ 714.857815][T27489] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 714.860894][T27489] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 717.782780][T27514] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7725'. [ 718.287549][T27522] netlink: 'syz.7.7727': attribute type 10 has an invalid length. [ 718.292004][T27522] netlink: 'syz.7.7727': attribute type 10 has an invalid length. [ 721.022969][T27541] ptrace attach of ""[27542] was attempted by "/syz-executor exec"[27541] [ 721.237976][T27561] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 721.240543][T27561] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 721.282735][T27561] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 724.747982][T27605] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7745'. [ 731.618110][T27683] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 731.620222][T27683] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 731.625033][T27683] vhci_hcd vhci_hcd.0: Device attached [ 731.752897][T27696] vhci_hcd: connection closed [ 731.754112][T25463] vhci_hcd vhci_hcd.1: stop threads [ 731.759050][T25463] vhci_hcd vhci_hcd.1: release socket [ 731.761385][T25463] vhci_hcd vhci_hcd.1: disconnect device [ 737.399330][T27770] orangefs_mount: mount request failed with -4 [ 738.948484][ T1252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.951090][ T1252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.740392][ T40] audit: type=1804 audit(2000000062.881:1997): pid=27820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7792" name="bus" dev="tmpfs" ino=1752 res=1 errno=0 [ 755.511506][T27990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7829'. [ 755.523428][T27990] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 755.756597][T28000] ptrace attach of "/syz-executor exec"[28001] was attempted by "/syz-executor exec"[28000] [ 756.925857][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.928530][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.992324][ T40] audit: type=1800 audit(2000000079.159:1998): pid=28020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7839" name="bus" dev="ramfs" ino=118851 res=0 errno=0 [ 757.706724][T28030] vxlan0: entered promiscuous mode [ 757.708521][T28030] vxlan0: entered allmulticast mode [ 757.710668][T28030] team0: Port device vxlan0 added [ 757.712699][ T1252] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.715857][ T1252] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.719161][ T1252] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.731844][ T1252] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.873426][T28041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7842'. [ 760.069531][T28085] fuse: Bad value for 'fd' [ 760.085556][T28085] ipip0: entered promiscuous mode [ 760.087729][T28085] ipip0: entered allmulticast mode [ 760.525656][T28092] ptrace attach of "/syz-executor exec"[28093] was attempted by "/syz-executor exec"[28092] [ 760.756102][ T40] audit: type=1804 audit(2000000082.931:1999): pid=28099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7859" name="bus" dev="tmpfs" ino=11411 res=1 errno=0 [ 761.085036][T28106] tipc: Enabling of bearer rejected, already enabled [ 762.517833][T28126] netem: incorrect gi model size [ 762.520664][T28126] netem: change failed [ 763.888157][T28135] tipc: Enabled bearer , priority 0 [ 763.895896][T28135] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7870'. [ 763.903017][T28135] tipc: Resetting bearer [ 765.095612][ T40] audit: type=1804 audit(2000000087.273:2000): pid=28158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7875" name="/newroot/324/bus/bus" dev="tmpfs" ino=1695 res=1 errno=0 [ 768.339193][T28187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7884'. [ 768.344552][T28187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7884'. [ 782.811915][T28290] overlayfs: failed to clone upperpath [ 783.979030][ T94] ------------[ cut here ]------------ [ 783.981198][ T94] time_after(jiffies, timeout) [ 783.981207][ T94] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x42d/0xcdb, CPU#2: kworker/u32:4/94 [ 783.985934][ T94] Modules linked in: [ 783.988102][ T94] CPU: 2 UID: 0 PID: 94 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.991910][ T94] Tainted: [L]=SOFTLOCKUP [ 783.993369][ T94] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 783.996553][ T94] Workqueue: iou_exit io_ring_exit_work [ 783.998338][ T94] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 784.000249][ T94] Code: 8e e8 e7 a3 3b 01 48 8b 05 e0 f6 eb 0c 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 2e 4c d1 00 4d 85 ed 79 12 e8 44 51 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 32 51 d1 00 48 8b 74 24 38 [ 784.006343][ T94] RSP: 0000:ffffc90000bf7ab0 EFLAGS: 00010293 [ 784.008298][ T94] RAX: 0000000000000000 RBX: ffff88802787c778 RCX: ffffffff81351bb2 [ 784.010891][ T94] RDX: ffff888022152480 RSI: ffffffff81351bbc RDI: ffff888022152480 [ 784.013611][ T94] RBP: ffffc90000bf7c40 R08: 0000000000000007 R09: 0000000000000000 [ 784.016165][ T94] R10: ffffffffffffff9c R11: 0000000000000000 R12: ffff88802787c000 [ 784.018713][ T94] R13: ffffffffffffff9c R14: dffffc0000000000 R15: 0000000000000000 [ 784.021820][ T94] FS: 0000000000000000(0000) GS:ffff8880975a5000(0000) knlGS:0000000000000000 [ 784.025326][ T94] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 784.027418][ T94] CR2: 0000000080ceb018 CR3: 00000000792fa000 CR4: 0000000000352ef0 [ 784.030169][ T94] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 784.032776][ T94] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 784.035270][ T94] Call Trace: [ 784.036366][ T94] [ 784.037324][ T94] ? __pfx_io_ring_exit_work+0x10/0x10 [ 784.039102][ T94] ? try_to_wake_up+0x160/0x1a80 [ 784.040698][ T94] ? debug_object_deactivate+0x2e4/0x3b0 [ 784.042590][ T94] ? process_one_work+0x80b/0x1840 [ 784.044576][ T94] ? rcu_is_watching+0x12/0xc0 [ 784.046164][ T94] process_one_work+0x9c2/0x1840 [ 784.047770][ T94] ? __pfx_process_one_work+0x10/0x10 [ 784.049610][ T94] ? __pfx_io_ring_exit_work+0x10/0x10 [ 784.051371][ T94] worker_thread+0x5da/0xe40 [ 784.053015][ T94] ? __pfx_worker_thread+0x10/0x10 [ 784.054672][ T94] ? kthread+0x13a/0x450 [ 784.056089][ T94] ? __pfx_worker_thread+0x10/0x10 [ 784.057727][ T94] kthread+0x370/0x450 [ 784.059155][ T94] ? __pfx_kthread+0x10/0x10 [ 784.060746][ T94] ret_from_fork+0x754/0xd80 [ 784.062267][ T94] ? __pfx_ret_from_fork+0x10/0x10 [ 784.064006][ T94] ? __switch_to+0x7b4/0x10c0 [ 784.065549][ T94] ? __pfx_kthread+0x10/0x10 [ 784.067051][ T94] ret_from_fork_asm+0x1a/0x30 [ 784.068765][ T94] [ 784.069799][ T94] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 784.072134][ T94] CPU: 2 UID: 0 PID: 94 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.076691][ T94] Tainted: [L]=SOFTLOCKUP [ 784.078547][ T94] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 784.082746][ T94] Workqueue: iou_exit io_ring_exit_work [ 784.084870][ T94] Call Trace: [ 784.085950][ T94] [ 784.086870][ T94] dump_stack_lvl+0x100/0x190 [ 784.088609][ T94] vpanic+0x20d/0x630 [ 784.090376][ T94] panic+0xd1/0xd1 [ 784.091673][ T94] ? __pfx_panic+0x10/0x10 [ 784.093447][ T94] ? check_panic_on_warn+0x1f/0x90 [ 784.095639][ T94] check_panic_on_warn.cold+0x19/0x34 [ 784.097958][ T94] ? io_ring_exit_work+0x42d/0xcdb [ 784.100196][ T94] __warn.cold+0x191/0x2f8 [ 784.102118][ T94] __report_bug+0x296/0x3d0 [ 784.104090][ T94] ? io_ring_exit_work+0x42d/0xcdb [ 784.106271][ T94] ? __pfx___report_bug+0x10/0x10 [ 784.108438][ T94] ? rcu_is_watching+0x12/0xc0 [ 784.110201][ T94] ? trace_contention_end+0xd6/0x110 [ 784.111884][ T94] ? __mutex_lock+0x26a/0x1b90 [ 784.113765][ T94] ? find_held_lock+0x2b/0x80 [ 784.115333][ T94] ? io_req_caches_free+0x49/0x60 [ 784.116982][ T94] ? io_req_caches_free+0x49/0x60 [ 784.118595][ T94] ? io_ring_exit_work+0x42d/0xcdb [ 784.120245][ T94] report_bug+0xb2/0x220 [ 784.121619][ T94] ? io_ring_exit_work+0x42d/0xcdb [ 784.123334][ T94] handle_bug+0x166/0x2a0 [ 784.124746][ T94] exc_invalid_op+0x17/0x50 [ 784.126218][ T94] asm_exc_invalid_op+0x1a/0x20 [ 784.127769][ T94] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 784.129575][ T94] Code: 8e e8 e7 a3 3b 01 48 8b 05 e0 f6 eb 0c 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 2e 4c d1 00 4d 85 ed 79 12 e8 44 51 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 32 51 d1 00 48 8b 74 24 38 [ 784.135776][ T94] RSP: 0000:ffffc90000bf7ab0 EFLAGS: 00010293 [ 784.137698][ T94] RAX: 0000000000000000 RBX: ffff88802787c778 RCX: ffffffff81351bb2 [ 784.140182][ T94] RDX: ffff888022152480 RSI: ffffffff81351bbc RDI: ffff888022152480 [ 784.142801][ T94] RBP: ffffc90000bf7c40 R08: 0000000000000007 R09: 0000000000000000 [ 784.146089][ T94] R10: ffffffffffffff9c R11: 0000000000000000 R12: ffff88802787c000 [ 784.149524][ T94] R13: ffffffffffffff9c R14: dffffc0000000000 R15: 0000000000000000 [ 784.152443][ T94] ? io_ring_exit_work+0x422/0xcdb [ 784.154205][ T94] ? io_ring_exit_work+0x42c/0xcdb [ 784.155883][ T94] ? __pfx_io_ring_exit_work+0x10/0x10 [ 784.157703][ T94] ? try_to_wake_up+0x160/0x1a80 [ 784.159296][ T94] ? debug_object_deactivate+0x2e4/0x3b0 [ 784.161173][ T94] ? process_one_work+0x80b/0x1840 [ 784.163235][ T94] ? rcu_is_watching+0x12/0xc0 [ 784.164852][ T94] process_one_work+0x9c2/0x1840 [ 784.166478][ T94] ? __pfx_process_one_work+0x10/0x10 [ 784.168333][ T94] ? __pfx_io_ring_exit_work+0x10/0x10 [ 784.170233][ T94] worker_thread+0x5da/0xe40 [ 784.172068][ T94] ? __pfx_worker_thread+0x10/0x10 [ 784.173850][ T94] ? kthread+0x13a/0x450 [ 784.175207][ T94] ? __pfx_worker_thread+0x10/0x10 [ 784.176885][ T94] kthread+0x370/0x450 [ 784.178198][ T94] ? __pfx_kthread+0x10/0x10 [ 784.179674][ T94] ret_from_fork+0x754/0xd80 [ 784.181171][ T94] ? __pfx_ret_from_fork+0x10/0x10 [ 784.183021][ T94] ? __switch_to+0x7b4/0x10c0 [ 784.184595][ T94] ? __pfx_kthread+0x10/0x10 [ 784.186087][ T94] ret_from_fork_asm+0x1a/0x30 [ 784.187654][ T94] [ 784.189363][ T94] Kernel Offset: disabled [ 784.190751][ T94] Rebooting in 86400 seconds..