last executing test programs: 1m49.812366848s ago: executing program 2 (id=2871): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r4, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x567edf1e112c951d}]}}}]}, 0x38}}, 0x4008844) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 1m47.497154255s ago: executing program 1 (id=2876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x9, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @port=0x4e23}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x17, @remote, @broadcast, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0x0}}}}, 0x380) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r2, &(0x7f0000000880)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x1, 0x7, 0x4, "abeb0640"}, {0x6, 0x3, 0x3, 0x3, 0x8, 0x752a}}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x100, 0x111, 0x4b4, 0x100, 0xd4feffff, 0x20c, 0x20a, 0x278, 0x20c, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0x0, 0xff0001fe], 0x4e21, 0x4e20, 0x4e24, 0x4e21, 0x2d90b2e5, 0x4, 0xfffffffc, 0x7, 0x1}}}, {{@ipv6={@loopback, @loopback, [], [0xffffffff, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0x850003d1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r9, &(0x7f0000000100)='10000', 0x5) 1m46.600301612s ago: executing program 2 (id=2877): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x478, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0x9c, 0xcc, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4d4) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 1m46.462814613s ago: executing program 3 (id=2879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0x3, 0x1, 0x26, 0x10000}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r9, 0x3e, r9}, 0x5) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r12, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) 1m46.344898573s ago: executing program 1 (id=2880): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r4, 0x3e, r4}, 0x5) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m46.02329816s ago: executing program 3 (id=2881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0x3, 0x1, 0x26, 0x10000}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x3e, r8}, 0x5) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r11, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) 1m45.90428608s ago: executing program 1 (id=2882): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, 0x0, 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 1m45.702575403s ago: executing program 3 (id=2883): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRESDEC=r0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080), 0x0) socket(0x10, 0x3, 0x0) 1m45.452118383s ago: executing program 2 (id=2884): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffeb9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1m44.895715512s ago: executing program 1 (id=2886): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x567edf1e112c951d}]}}}]}, 0x38}}, 0x4008844) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 1m43.051199234s ago: executing program 3 (id=2888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xd}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x192) read(r4, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000880)=""/263, &(0x7f0000000040)=0x107) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) 1m43.047460707s ago: executing program 2 (id=2896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0x3, 0x1, 0x26, 0x10000}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r9, 0x3e, r9}, 0x5) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r12, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) 1m42.806304479s ago: executing program 2 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x567edf1e112c951d}]}}}]}, 0x38}}, 0x4008844) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 1m42.396041591s ago: executing program 1 (id=2890): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r4, 0x3e, r4}, 0x5) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000020000008500000082000000bf91000000000000b70200000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m40.672636213s ago: executing program 3 (id=2892): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x478, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0x9c, 0xcc, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4d4) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 1m39.319465996s ago: executing program 3 (id=2893): setns(0xc9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = socket(0x1a, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x111b00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000002100)=""/4096, &(0x7f0000003100)=""/5, &(0x7f0000003140)=""/35, 0x41000}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='+', 0x1) io_destroy(r5) io_cancel(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0xabbb, r4, &(0x7f0000000500)="684d0c243cac2161c33e47a7f817c26d1b3cab76dc00eba8fc936fe7812982a8ef960206a0afd263081206f03d75da516013ab0b7696513b55fbe06ad0b09e0854787b294edd6f192597a85ea664499586b01e6f5d0bbc265da00123046171e0800f4aab648332e90031f6cb815614de3dc8b7d48267c4916bef8161bb1742cb1c43048632a30583519ec8ef01c25e46b94eed1a1083840f33634628653ae397febeef48403535d335da76", 0xab, 0x6, 0x0, 0x2, r1}, &(0x7f0000000600)) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000400)) 1m39.31291423s ago: executing program 1 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xd}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x192) read(r4, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000880)=""/263, &(0x7f0000000040)=0x107) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) 1m38.196407503s ago: executing program 2 (id=2895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x103000) r1 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r3}) syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r8, 0xc0386105, 0x0) 1m1.463726139s ago: executing program 32 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xd}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x192) read(r4, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000880)=""/263, &(0x7f0000000040)=0x107) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) 1m1.125090635s ago: executing program 33 (id=2895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x103000) r1 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r3}) syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r8, 0xc0386105, 0x0) 1m0.989580265s ago: executing program 34 (id=2893): setns(0xc9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = socket(0x1a, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x111b00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a20000000000a01080000000000000000070000000900010073797a3000000058d9ac612c4e68930400000000000000000700000008000a40000000000900020073797a319b1800000900010073797a3000000000080005400000001708000640ffffff000800034000000038480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c000380180000800c00054000000000000000080400028004000180140000001000010000000000000000000084000a51df192ce7580d59213873cf20cb23a9cba517aa77de85c867db50c663f5c106ccace8f0a607cf9de0ed8be468c452818c"], 0xdc}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000002100)=""/4096, &(0x7f0000003100)=""/5, &(0x7f0000003140)=""/35, 0x41000}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='+', 0x1) io_destroy(r5) io_cancel(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0xabbb, r4, &(0x7f0000000500)="684d0c243cac2161c33e47a7f817c26d1b3cab76dc00eba8fc936fe7812982a8ef960206a0afd263081206f03d75da516013ab0b7696513b55fbe06ad0b09e0854787b294edd6f192597a85ea664499586b01e6f5d0bbc265da00123046171e0800f4aab648332e90031f6cb815614de3dc8b7d48267c4916bef8161bb1742cb1c43048632a30583519ec8ef01c25e46b94eed1a1083840f33634628653ae397febeef48403535d335da76", 0xab, 0x6, 0x0, 0x2, r1}, &(0x7f0000000600)) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000400)) 11.88581634s ago: executing program 6 (id=2990): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRESDEC=r0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080), 0x0) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) socket(0x10, 0x3, 0x0) 10.858539539s ago: executing program 4 (id=2994): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 9.773984876s ago: executing program 5 (id=2999): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) write(r0, &(0x7f0000000400)='transport=loop,nqn=testsubsys,disable_sqflow', 0x2c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) connect$inet6(r3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c202b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r4, 0xc0606610, &(0x7f0000000040)=0x60) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/94, 0x5e) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001500)={0x2020}, 0xfffffe23) 9.052966962s ago: executing program 5 (id=3001): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000380)=@newchain={0x1500, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x1, 0x9}, {0xc, 0x2}}, [@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x700000, 0xd5ff, 0x7f}, {0x7fb, 0x7ff}, 0x84, 0x5, 0xb7}}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_SRC={0x8, 0x3, @empty}]}}, @f_rsvp6={{0xa}, {0xf2c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x10, 0x3d3c, 0x2, 0x401, 0x7, 0x0, 0xdcfe, 0x5d1f, 0x9, 0xd81, 0x0, 0xffff1557, 0xef72, 0x8, 0x372a, 0x2, 0xa, 0x323e, 0x5, 0x10, 0x9, 0x47, 0x3, 0x9, 0x5, 0x40fd17, 0x9, 0x3, 0xdcc7, 0x80, 0x1, 0xffff0001, 0x7, 0xa2cd, 0xfff, 0x7ff, 0xb4b, 0x1, 0x9, 0x5, 0x0, 0x7ff, 0x0, 0xe, 0x8, 0x9, 0x101, 0x3744, 0xffffffff, 0x5, 0xd3, 0x7, 0x5, 0x0, 0xe000000, 0x9, 0xb32c, 0x1, 0xffff, 0x9, 0x8, 0x401, 0x1, 0x80000001, 0xcb9, 0x3, 0xfffffff7, 0x3, 0x80000001, 0x8, 0x5, 0x2, 0x7ff, 0xfc0, 0x5, 0x5, 0x3, 0x7, 0x7ff, 0x8, 0xd, 0x20, 0x4, 0x6, 0x800, 0x7, 0x3ff, 0xfffffffb, 0x8, 0xfffffffa, 0x200, 0x3ff, 0xffffff81, 0x7, 0x3ff, 0x1, 0xffff61a9, 0x1000, 0x2, 0x3, 0x0, 0x1000, 0x808, 0x10001, 0x7fffffff, 0x0, 0x8, 0x7, 0x0, 0x6, 0x7, 0x0, 0x400, 0x4, 0x3, 0x5, 0x4, 0x0, 0x9, 0xa, 0x6, 0x8, 0x1000, 0x4, 0x0, 0xc058, 0x8001, 0xffff, 0x83, 0x3, 0x2, 0xffffff60, 0x6, 0x2, 0x0, 0x0, 0x10, 0x1, 0xffffffff, 0x2, 0x9, 0x224871c5, 0x7, 0x4, 0xfff, 0x67, 0x2, 0x3, 0x146, 0x2, 0x101, 0x4, 0x4a, 0x6, 0xd, 0x2, 0xfad8, 0x6, 0x1, 0xe09e, 0x7, 0x5, 0x61cf, 0x8, 0x4, 0x8, 0xfffffffe, 0x80000000, 0xa, 0x100, 0x1, 0x101, 0x7b18, 0x1, 0x10, 0x5, 0xffffff1f, 0x0, 0x9, 0x7fff, 0x8001, 0x0, 0x2, 0x800, 0xdc4, 0x9, 0x6b8, 0x7, 0x7, 0x2, 0x4, 0x0, 0x0, 0x88, 0x1, 0x7f, 0x3, 0x9, 0x2, 0x8ac, 0x3, 0xc8da7d2, 0x800, 0x6, 0x6, 0xffff, 0x5, 0x7, 0x1ffc00, 0xffffffff, 0xed6, 0xc, 0xaf, 0xc000, 0x4, 0x6a3973c8, 0x3, 0x9, 0x5, 0x7, 0x6, 0x2, 0x1, 0x7, 0x6, 0xfff, 0x0, 0xbc1d2524, 0xfffffffe, 0x400, 0x80, 0x40, 0x6, 0x5, 0x7, 0x1, 0x370, 0x2, 0x4, 0x3ff, 0x5, 0xd, 0xffffffff, 0xb425, 0xa80, 0xf9, 0xfffffff9, 0x7, 0x4008, 0x0, 0x7f, 0x6, 0xffffff81, 0x3929, 0x8001]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x4, 0x1}, {0x200, 0x37, 0x459}, 0x0, 0x1}}, @TCA_RSVP_POLICE={0x8b4, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x40, 0x4, 0xffffffff, 0x32f, 0x9, 0xbcb9, 0x2, 0x1, 0x9, 0x800, 0x7856, 0x2, 0x2e2, 0x2, 0x7, 0x1, 0xffff, 0x30f, 0x5, 0x1, 0x5, 0x9, 0x1, 0x3, 0x4523, 0x1, 0xa, 0x9, 0xa, 0x0, 0x4, 0x4, 0x1, 0x37, 0x7fffffff, 0x9, 0x6, 0x45, 0xda, 0x7900, 0x3, 0x9, 0x1, 0x401, 0x4, 0xf, 0x400, 0x8, 0x80, 0xb5f, 0x6, 0x8, 0xa87f, 0x1, 0x9, 0x8001, 0x10, 0x1f, 0x9, 0xffffffff, 0x3, 0x4, 0x10001, 0x7fff, 0x401, 0xd03c, 0x3, 0x80000001, 0xfffffffc, 0x3, 0x68c4, 0x326, 0xde6, 0xc, 0x80000001, 0x4, 0xd, 0x2, 0xeb4, 0x8, 0xe3, 0x40, 0x0, 0x9, 0x5, 0x7, 0x5, 0x81, 0xa56, 0x7, 0x6, 0x2, 0x8, 0x7, 0x5, 0x8c9, 0xfffffff2, 0xd, 0xe, 0x2, 0x8, 0x6, 0x2c, 0x0, 0x1000, 0x5d5, 0xfffff30f, 0x6, 0x8, 0x1, 0x3, 0x6, 0x8001, 0x7, 0x9, 0x7, 0x4, 0xa4, 0x80, 0x7, 0x2, 0x0, 0x6000000, 0x6, 0xfffff11c, 0xe63c, 0xb, 0x4, 0x1, 0x80000000, 0x8, 0x1, 0x24, 0x10000, 0xffffffc0, 0xf0, 0x1ffd, 0x3, 0x6, 0x4, 0x2, 0x1cb3, 0x8000, 0x1ff, 0xb8e, 0x5, 0xfffffffd, 0x1, 0x1333, 0x4, 0x80000001, 0x5008, 0x400, 0x0, 0x4, 0x3, 0xce98, 0x0, 0x3, 0xfff, 0x5, 0x3, 0x7, 0x6, 0x2, 0x200, 0xfffffff8, 0x0, 0x8, 0x9, 0x8, 0x400, 0x7ff, 0xb, 0x49, 0x8, 0x3, 0xfff, 0xd6d, 0xc92e, 0x7fff, 0x93, 0x10, 0x8, 0xfffffffd, 0x2, 0x7, 0x8, 0xe3, 0x4, 0x4, 0x5, 0x885c, 0x1, 0x7fffffff, 0x6, 0x325f, 0xffff8001, 0xe, 0x4, 0xe, 0x8, 0x3, 0x5, 0x6, 0x4, 0x80000001, 0x7, 0x2, 0x8001, 0x7, 0x3, 0xfffffff8, 0x33ef00, 0x7, 0x8, 0xe, 0x3, 0x80000000, 0xffff, 0x7, 0x2, 0x6, 0x6, 0x5, 0x9, 0x6, 0x1, 0x10000, 0x8000, 0xac4, 0xf, 0x2, 0xfffffffe, 0x8, 0x7, 0x1, 0x40, 0x8001, 0x7, 0x6, 0x200, 0x1, 0x401, 0x71, 0x2, 0x7, 0xb, 0x6, 0x0, 0x5e3d, 0x9, 0x3791, 0x0, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf9, 0xf, 0x6181, 0x80000000, 0xffffffff, 0x6, 0x0, 0x2, 0x1, 0x6, 0x1, 0xffff518d, 0x9, 0x0, 0x19, 0xfffffff9, 0xe365, 0x6, 0x7, 0x0, 0x0, 0xf9, 0xf, 0x9, 0x0, 0x8, 0x4, 0x8b, 0x1, 0x101, 0x80000001, 0x8, 0x0, 0x581b4d4d, 0x72, 0x6, 0x2, 0x8f2, 0x9, 0x1, 0xc, 0x4, 0x8001, 0x1ff, 0x40, 0x7, 0xfff, 0xe23e, 0x7, 0x7, 0x1, 0x6, 0x7, 0x1, 0xe86, 0x6, 0x8, 0xf, 0xc57, 0x8, 0x7000000, 0xf, 0x100, 0x5, 0x9, 0x7, 0xe2, 0x101, 0xfff, 0x5, 0x3, 0x7, 0x8, 0x1, 0xfff, 0xc8bd, 0x9, 0x0, 0x401, 0x7, 0x0, 0x9, 0x6, 0x81, 0xd, 0x2, 0xe, 0xfff, 0xb8aa, 0x3, 0xfffffffb, 0x4, 0x9, 0x8000, 0x4, 0x0, 0x2, 0x6, 0x5, 0x7ff, 0x6000, 0xffff, 0x3, 0x6, 0x4, 0x1, 0x40, 0xa3d, 0x80, 0x6, 0x10, 0x10000, 0x8000, 0x8, 0x7, 0xf, 0x6, 0x0, 0x1, 0xc, 0x1, 0x10001, 0xffffff81, 0x9, 0x6, 0x9, 0x9, 0x6, 0x81, 0xffff8000, 0x7900, 0x8001, 0xfffffffb, 0x5, 0x9, 0x8, 0x5, 0x401, 0x8000, 0xd, 0x3, 0x972, 0x6, 0x0, 0x6, 0x1, 0x397, 0x9, 0x8, 0x1, 0x2, 0x1, 0x0, 0x7, 0xfffffffc, 0x72, 0x10000, 0x5, 0x4, 0x4, 0x2, 0x2, 0x4, 0x4, 0x9b, 0x3, 0x5, 0x800, 0x763e, 0x6, 0x7, 0xfff, 0x4b, 0x100, 0x10000, 0x6, 0xca4, 0xfffffc00, 0x9, 0x0, 0x3, 0x4, 0xd, 0x4, 0xffff0000, 0x9, 0x7, 0x7, 0x0, 0xbe, 0x2, 0x1, 0x2, 0x5, 0x0, 0x0, 0x7, 0xeede, 0xfda, 0x4, 0x97, 0xfffffffe, 0x3a3fa87f, 0x8, 0x5, 0x1, 0x7426, 0x948, 0x0, 0x8, 0x800000, 0x5, 0x9, 0x9e8, 0x3, 0x94, 0x1, 0x1, 0x6be, 0x9, 0x8, 0x4, 0x4, 0x8a, 0x100, 0x3, 0x0, 0xe, 0x3, 0x8, 0x2, 0x5, 0x0, 0x10, 0x8001, 0x7, 0x5, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x3f6, 0x0, 0x3, 0x5, 0x1, 0x0, 0x8001, 0x1000, 0x1000, 0x8, 0x6, 0x1, 0x2, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000005, 0x5c8, 0x1, 0xe, {0x2, 0x0, 0x5f2, 0x6a56, 0x9, 0xec3}, {0x5, 0x2, 0x8, 0xac00, 0xffc0, 0x3}, 0x0, 0x7, 0xfff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x0, 0x5, {0x5, 0x0, 0xfffe, 0xfff, 0x4, 0x4}, {0xe, 0x2, 0xd, 0xfff, 0x2, 0x5}, 0x2, 0x5, 0x10001}}]}, @TCA_RSVP_ACT={0x210, 0x6, [@m_gact={0x108, 0x11, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd87, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x5, 0x4e5, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x28, 0x0, 0x4, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x400, 0xffffffffffffffff, 0xffff8000, 0x7611}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x6, 0x0, 0x4, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3ee, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x5, 0x9, 0x3}}]}, {0x49, 0x6, "a5cf17be334baedc1816c41fe8aa9c28e4b2af4f9a3e63ab201fb95c0af045b54ca968da879932902f7e978913a3629ea329b3bbc967e19c2543f464e348e6e8761441b846"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x5, 0x1, 0x8}, 0x4d}}]}, {0xb9, 0x6, "526c9cc953f5d88e7022726172b20ae90963a2414a8e3299027d14483f1efb55b25123baa500eff15a83a400fe82138a37475983ba13e4bbba5e1628c9536836d4788eea6b39e3e4e2d9d8a16bdb669a2278777061485a7437b340908e62557a62dc8d10081a6d4e621921f0a33d70f4d0da51590811d2112e8782185c92e8bd89e16ec09522eda270844a9573bc67346c21c76da70cf35db58584cd7c407b34410af2f6ad11551bc1a8c98eece49c57de037d2277"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0x9, 0x9}, {0xfffffc00, 0x1, 0x9}, 0x79, 0x31, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}]}}, @f_rsvp={{0x9}, {0x540, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_RSVP_ACT={0x124, 0x6, [@m_simple={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '*(74}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x4, 0x8, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xc5, 0x6, "f531b7c8c4fa1686caac90fd5431b8cefc1e77e85bc99f9c412472d93c00b86f012125f625b546f3362ecbe473cb7efe29b2382f038333c99a1e27373a156054129c1f3182593887cac1dd9d54978fb4bc6e01c2895281423c7d31a00f4ed2bf5a4d7be4316d8a788583ccfdaada73c09f73dfeb947aa5b11078c9de9971583c05918fb8b6868a323e400bdd85ecea9c175e8e93b4a9d0971e812279b391e5c13cadfce6103f61ca782eca4d207ed1a86f0960f5eea29dad333b27f60969a025fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbd, 0x4, 0x3, 0xd178, 0x80000001, 0x1, 0x5c0, 0x0, 0x5, 0x6, 0x7, 0x0, 0xfffffffa, 0x7, 0x3, 0x7, 0x9, 0x1, 0x7fff, 0x4, 0x8001, 0xfff, 0x5, 0xe, 0xd4, 0x903, 0x4, 0x6, 0x10, 0x6, 0x0, 0x151, 0x3, 0x5, 0xffffffcc, 0x689, 0x2, 0x1, 0x0, 0xfffffff9, 0x6, 0x8, 0x606, 0x80000000, 0x97, 0x2, 0xb6, 0x7660, 0x6, 0x4, 0x4, 0x9, 0x30, 0x80000001, 0xfd09, 0x6, 0x1, 0x5, 0x4, 0x6, 0x3ff, 0xd, 0x7, 0x100, 0x67, 0x6, 0x8000, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x3, 0x5, 0x9, 0x8, 0x6, 0x400, 0x0, 0xffff8001, 0x9, 0xbd92, 0x5468, 0x9, 0xffffffc4, 0x8, 0x33d, 0xfff, 0x6, 0x10001, 0x3, 0x6, 0x756, 0x80000001, 0x938, 0x1000, 0x76, 0x3, 0x4bc6, 0x5, 0x7fb, 0x100, 0x9, 0x8, 0x9, 0x9d2, 0xd, 0x7, 0x10, 0x258d, 0x81, 0x4, 0x7, 0x2f6a, 0x8, 0xe00, 0x0, 0x7, 0x7f, 0x3, 0x388e, 0x2, 0x80, 0xdf5, 0x3, 0xf, 0x0, 0x6, 0x1, 0x1, 0x75d7, 0x8, 0xa4c, 0x9, 0x36619a9e, 0x1, 0x6f61, 0x6, 0x80000000, 0x0, 0x5, 0x4, 0x2, 0x0, 0xd4b, 0x7fff, 0x9, 0xffff1395, 0xfffffffe, 0x3, 0x0, 0x9, 0x70a5000, 0x4, 0x4, 0x8b1, 0x3, 0x7, 0xb0f, 0x2, 0x0, 0x2, 0x5, 0x0, 0x1000, 0x6, 0x81, 0x7fff, 0x7ff, 0x7, 0x0, 0x2b4, 0x0, 0x3ff, 0x8, 0x5, 0x9, 0x7, 0x7, 0x8, 0x9, 0x0, 0x800, 0x9, 0x0, 0x9, 0x2, 0x8, 0x8, 0x8, 0x1, 0xc6, 0x5, 0x6, 0x7ee, 0x1, 0x8, 0x5, 0x9, 0x8001, 0x7, 0xf5, 0xb90, 0x5, 0x0, 0x3635, 0x1, 0x8, 0x5, 0x0, 0x80000001, 0xe, 0x8, 0x1, 0x2, 0x8001, 0x55, 0x3a48, 0x4, 0x7, 0x1, 0x2, 0x5, 0x5, 0x6, 0x5, 0x4, 0xfffffffc, 0x10, 0x1, 0xb, 0x4, 0xe0, 0x400, 0x616c, 0x3, 0x2d, 0x5, 0xfffffff8, 0x9, 0x80000000, 0x3e, 0x3, 0x0, 0x8, 0x9, 0x1, 0x3, 0xadf, 0x3, 0x6, 0xfc, 0x9]}]}]}}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000004) r0 = socket(0x10, 0x3, 0x0) r1 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x80000) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xe, 0xd}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r13, &(0x7f0000000100)='measure #', 0x9) r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, r5, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r14) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="cc1100001900010000000000000000001d0109005000108049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000681106"], 0x11cc}, 0x1, 0x0, 0x0, 0x5}, 0x0) 8.619084424s ago: executing program 5 (id=3003): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffeb9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 8.211891855s ago: executing program 6 (id=3004): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x58, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91705564e6f77c25"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, 0x0) write(r0, &(0x7f0000000cc0), 0x0) r4 = syz_io_uring_setup(0x1ef8, &(0x7f0000000300)={0x0, 0x72b, 0x0, 0x1, 0xfbffffff}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000000)) r5 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xe000200f}) 7.779797212s ago: executing program 0 (id=3005): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r3 = socket(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000380)=0x200000000000000c, 0x5, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 7.609144704s ago: executing program 4 (id=3006): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRESDEC=r0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080), 0x0) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) socket(0x10, 0x3, 0x0) 6.814058385s ago: executing program 6 (id=3007): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x567edf1e112c951d}]}}}]}, 0x38}}, 0x4008844) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 6.786484598s ago: executing program 5 (id=3008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x3) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000025, &(0x7f0000000300)={[], [{@flag='rw'}]}) chdir(&(0x7f0000000180)='./file0/../file0/file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 6.262462168s ago: executing program 0 (id=3009): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x478, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0x9c, 0xcc, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4d4) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 5.224823239s ago: executing program 0 (id=3010): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, 0x0, 0x0) close(0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 4.931031369s ago: executing program 5 (id=3011): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 4.160901363s ago: executing program 0 (id=3012): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRESDEC=r0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080), 0x0) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) socket(0x10, 0x3, 0x0) 2.979297516s ago: executing program 4 (id=3013): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 2.195056949s ago: executing program 6 (id=3014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0x3, 0x1, 0x26, 0x10000}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x3e, r8}, 0x5) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r11, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) 2.069688898s ago: executing program 4 (id=3015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@newsa={0xec, 0x10, 0x5c3b37380d70341, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x32}, @in=@remote, {}, {0x400000000}, {}, 0x4000, 0x0, 0xa}}, 0xec}, 0x1, 0x0, 0x0, 0x884}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x3) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000025, &(0x7f0000000300)={[], [{@flag='rw'}]}) chdir(&(0x7f0000000180)='./file0/../file0/file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 1.798480956s ago: executing program 0 (id=3016): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffeb9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1.524777976s ago: executing program 6 (id=3017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0x3, 0x1, 0x26, 0x10000}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r6, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r9, 0x3e, r9}, 0x5) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r12, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) 864.870295ms ago: executing program 4 (id=3018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0x3, 0x1, 0x26, 0x10000}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r9, 0x3e, r9}, 0x5) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r12, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) 195.613214ms ago: executing program 5 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0x3, 0x1, 0x26, 0x10000}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r9, 0x3e, r9}, 0x5) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r12, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00060000bfa200000000000007020000f8ffffffb703000008000200b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x4c831, 0xffffffffffffffff, 0x81000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) 155.546026ms ago: executing program 0 (id=3020): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 151.284895ms ago: executing program 4 (id=3021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000025000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='dummy_udc.0', 0xb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000100)=0x20b, 0x4) sendmmsg$inet6(r7, 0x0, 0x0, 0x4000001) dup(r7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=3022): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x567edf1e112c951d}]}}}]}, 0x38}}, 0x4008844) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) kernel console output (not intermixed with test programs): nd/card3/controlC3/../uevent} for writing: No such file or directory [ 531.113959][T12845] usb 6-1: USB disconnect, device number 9 [ 531.871675][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.032276][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 532.032358][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 532.136526][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 532.297896][T15288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 532.297928][T15288] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 532.298295][T15288] vhci_hcd vhci_hcd.0: Device attached [ 532.583867][T12845] usb 44-1: SetAddress Request (10) to port 0 [ 532.584010][T12845] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 532.726824][T15288] rdma_rxe: rxe_newlink: failed to add wg2 [ 532.922166][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.296907][T15303] jffs2: notice: (15303) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 533.951647][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.001669][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.901400][T15320] pim6reg: entered allmulticast mode [ 536.030503][T15317] tunl0: entered promiscuous mode [ 536.031367][T15317] netlink: 'syz.3.2380': attribute type 4 has an invalid length. [ 536.031432][T15317] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2380'. [ 536.031847][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.283942][T15313] pim6reg: left allmulticast mode [ 536.452593][T15325] overlayfs: conflicting options: nfs_export=on,index=off [ 536.634913][T15313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2381'. [ 537.071739][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.506456][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'. [ 537.607769][T15289] vhci_hcd: connection reset by peer [ 537.610333][ T5606] vhci_hcd vhci_hcd.3: stop threads [ 537.610388][ T5606] vhci_hcd vhci_hcd.3: release socket [ 537.610458][ T5606] vhci_hcd vhci_hcd.3: disconnect device [ 537.641794][T12845] usb 44-1: device descriptor read/8, error -110 [ 537.786376][T15350] overlayfs: conflicting options: nfs_export=on,index=off [ 538.034304][T12845] usb usb44-port1: attempt power cycle [ 538.111668][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.565409][T15360] SET target dimension over the limit! [ 538.622540][T12845] usb usb44-port1: unable to enumerate USB device [ 539.015623][T15370] Console: switching to colour dummy device 80x25 [ 539.151741][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.226231][ T43] audit: type=1804 audit(1788619627.072:539): pid=15373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2401" name="bus" dev="ramfs" ino=50276 res=1 errno=0 [ 539.246437][ T43] audit: type=1804 audit(1788619627.092:540): pid=15373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2401" name="bus" dev="ramfs" ino=50276 res=1 errno=0 [ 540.191742][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.105949][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2396'. [ 541.231715][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.520011][T15372] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 541.527891][T15372] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 541.528230][T15372] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 541.529264][T15372] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 541.534142][T15372] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 541.618241][T15372] pci 0000:00:01.0: Adding to iommu group 1 [ 541.652072][T15372] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 541.652099][T15372] pci 0000:00:01.0: vgaarb: bridge control possible [ 541.652109][T15372] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 541.665918][T15372] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 541.666275][T15372] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 541.676193][T15372] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 541.722369][T15372] [drm] Found bochs VGA, ID 0xb0c5. [ 541.722512][T15372] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 541.868493][T15372] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 541.985470][T15372] Console: switching to colour frame buffer device 160x50 [ 542.027430][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 542.031220][T15372] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 542.281825][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.703361][T15417] overlayfs: conflicting options: nfs_export=on,index=off [ 542.884344][T15420] overlayfs: conflicting options: nfs_export=on,index=off [ 543.092068][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'. [ 543.321874][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.330038][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 543.957367][T15447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2406'. [ 544.232367][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 544.258686][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2406'. [ 544.361793][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.229185][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'. [ 545.391732][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.607139][T15493] overlayfs: conflicting options: nfs_export=on,index=off [ 545.947206][T15505] binder: 15499:15505 ioctl c0046209 0 returned -22 [ 545.957969][T15505] fuse: Unknown parameter './cgroup.cpu/memory.limit_in_bytes' [ 546.441738][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.487064][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 547.333271][T15536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2427'. [ 547.471704][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.591380][T15547] overlayfs: conflicting options: nfs_export=on,index=off [ 547.616746][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 547.625641][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2427'. [ 548.511691][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.819463][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'. [ 549.551753][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.571960][ T43] audit: type=1400 audit(1788619637.422:541): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15576 comm="syz.2.2437" [ 550.182996][T15591] Console: switching to colour dummy device 80x25 [ 550.601704][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.774993][T15594] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 550.782682][T15594] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 550.782822][T15594] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 550.783000][T15594] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 550.783548][T15594] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 550.787831][T15594] pci 0000:00:01.0: Adding to iommu group 1 [ 550.790548][T15594] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 550.790566][T15594] pci 0000:00:01.0: vgaarb: bridge control possible [ 550.790581][T15594] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 550.795516][T15594] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 550.795631][T15594] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 550.797097][T15594] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 550.802828][T15594] [drm] Found bochs VGA, ID 0xb0c5. [ 550.802837][T15594] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 550.806812][T15594] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 550.885216][T15594] Console: switching to colour frame buffer device 160x50 [ 550.943360][T15594] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 551.018479][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 551.641672][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.507981][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'. [ 552.671777][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.076564][ T43] audit: type=1804 audit(1788619640.922:542): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2447" name="bus" dev="ramfs" ino=51428 res=1 errno=0 [ 553.081227][ T43] audit: type=1804 audit(1788619640.922:543): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2447" name="bus" dev="ramfs" ino=51428 res=1 errno=0 [ 553.638709][T15643] x_tables: duplicate underflow at hook 1 [ 553.669133][T15643] hub 8-0:1.0: USB hub found [ 553.675931][T15643] hub 8-0:1.0: 1 port detected [ 553.711697][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.962607][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2451'. [ 554.103126][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 554.296116][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 554.575609][T15668] jffs2: notice: (15668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 554.751687][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.770741][T15670] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 554.770741][T15670] Ä5¾' [ 554.803148][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 555.393341][T15687] jffs2: notice: (15687) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 555.420196][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 555.776422][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 555.801845][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.925187][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 555.937310][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 556.831675][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.836489][ T5736] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 556.837967][T14474] Bluetooth: hci4: command 0x1003 tx timeout [ 557.099183][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 557.871667][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.911706][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.320433][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'. [ 559.469350][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'. [ 559.961802][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.991675][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.032177][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.085834][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2477'. [ 562.494395][T15788] overlayfs: conflicting options: nfs_export=on,index=off [ 562.525868][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.525968][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.622262][T15786] tunl0: entered promiscuous mode [ 562.622372][T15786] netlink: 'syz.2.2478': attribute type 4 has an invalid length. [ 562.622413][T15786] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2478'. [ 563.073872][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.170464][T15806] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 563.192547][T15806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.210009][T15806] 9pnet_virtio: no channels available for device syz [ 563.327817][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2484'. [ 563.802875][T15825] overlayfs: conflicting options: nfs_export=on,index=off [ 564.111736][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.162310][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.284433][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 565.615371][T15850] overlayfs: conflicting options: nfs_export=on,index=off [ 566.191830][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.350412][T15853] tunl0: entered promiscuous mode [ 566.350529][T15853] netlink: 'syz.1.2492': attribute type 4 has an invalid length. [ 566.350540][T15853] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2492'. [ 566.360442][T15851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2488'. [ 566.599474][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 566.706510][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'. [ 567.011160][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2495'. [ 567.231713][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.852112][T15892] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 567.852145][T15892] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 567.859412][T15892] vhci_hcd vhci_hcd.0: Device attached [ 568.099013][ T43] audit: type=1326 audit(1788619655.942:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 568.103324][ T43] audit: type=1326 audit(1788619655.942:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 568.103354][ T43] audit: type=1326 audit(1788619655.942:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 568.106846][ T43] audit: type=1326 audit(1788619655.942:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 568.210709][ T5822] usb 42-1: SetAddress Request (14) to port 0 [ 568.211070][ T5822] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 568.281914][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.342131][T15903] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 568.437301][T15908] overlayfs: conflicting options: nfs_export=on,index=off [ 568.550938][ T43] audit: type=1326 audit(1788619656.392:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 568.551094][ T43] audit: type=1326 audit(1788619656.392:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 568.730809][ T43] audit: type=1326 audit(1788619656.572:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 568.848217][ T43] audit: type=1326 audit(1788619656.692:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 568.848597][ T43] audit: type=1326 audit(1788619656.692:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.0.2500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 569.144079][T15893] vhci_hcd: connection reset by peer [ 569.149806][ T5606] vhci_hcd vhci_hcd.2: stop threads [ 569.150078][ T5606] vhci_hcd vhci_hcd.2: release socket [ 569.150552][ T5606] vhci_hcd vhci_hcd.2: disconnect device [ 569.289255][T15914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2502'. [ 569.311873][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.855273][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2503'. [ 570.351726][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.732181][T15923] tunl0: entered promiscuous mode [ 570.732319][T15923] netlink: 'syz.0.2504': attribute type 4 has an invalid length. [ 570.732329][T15923] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2504'. [ 570.999799][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 571.219431][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 571.362412][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 571.391734][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.441741][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.981496][T16003] jffs2: notice: (16003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 573.231991][ T5822] usb 42-1: device descriptor read/8, error -110 [ 573.481756][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.862339][ T5822] usb usb42-port1: attempt power cycle [ 573.936885][T16006] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 573.936915][T16006] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 573.937642][T16006] vhci_hcd vhci_hcd.0: Device attached [ 574.222265][ T2324] usb 44-1: SetAddress Request (14) to port 0 [ 574.224908][ T2324] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 574.400436][T16008] vhci_hcd: connection reset by peer [ 574.403090][ T5606] vhci_hcd vhci_hcd.3: stop threads [ 574.403167][ T5606] vhci_hcd vhci_hcd.3: release socket [ 574.403270][ T5606] vhci_hcd vhci_hcd.3: disconnect device [ 574.511683][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.526196][ T5822] usb usb42-port1: unable to enumerate USB device [ 574.725495][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 574.856372][T16032] SET target dimension over the limit! [ 575.013004][T16042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2518'. [ 575.019029][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 575.551683][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.846649][T16047] CacheFiles: Failed to register: -95 [ 575.848367][T16047] AppArmor: change_hat: Invalid input 'š—files' [ 576.307325][T16061] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 576.307381][T16061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 576.307961][T16061] vhci_hcd vhci_hcd.0: Device attached [ 576.581084][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2525'. [ 576.601813][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.786420][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 577.031934][ T5822] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 577.631775][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.741732][T16062] vhci_hcd: connection reset by peer [ 577.742080][ T5606] vhci_hcd vhci_hcd.0: stop threads [ 577.742173][ T5606] vhci_hcd vhci_hcd.0: release socket [ 577.742443][ T5606] vhci_hcd vhci_hcd.0: disconnect device [ 578.519507][T16092] jffs2: notice: (16092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 578.671853][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.237892][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 579.321888][ T2324] usb 44-1: device descriptor read/8, error -110 [ 579.711755][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.976149][ T2324] usb usb44-port1: attempt power cycle [ 580.364341][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'. [ 580.552937][T16113] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 580.552966][T16113] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 580.553306][T16113] vhci_hcd vhci_hcd.0: Device attached [ 580.683223][T16125] Console: switching to colour dummy device 80x25 [ 580.686725][T16128] program syz.0.2536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.712083][ T2324] usb usb44-port1: unable to enumerate USB device [ 580.761753][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.916434][T12845] usb 40-1: SetAddress Request (10) to port 0 [ 580.916630][T12845] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 581.045512][T16130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2535'. [ 581.270003][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 581.801708][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 581.921342][T16126] vhci_hcd: connection reset by peer [ 581.923279][T12784] vhci_hcd vhci_hcd.1: stop threads [ 581.923296][T12784] vhci_hcd vhci_hcd.1: release socket [ 581.923361][T12784] vhci_hcd vhci_hcd.1: disconnect device [ 582.181760][ T5822] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 582.831724][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 583.229379][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 583.473580][T16128] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 583.494518][T16128] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 583.497959][T16128] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 583.501188][T16128] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 583.504568][T16128] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 583.512440][T16128] pci 0000:00:01.0: Adding to iommu group 1 [ 583.517527][T16128] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 583.517551][T16128] pci 0000:00:01.0: vgaarb: bridge control possible [ 583.517561][T16128] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 583.532484][T16128] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 583.532640][T16128] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 583.534140][T16128] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 583.547973][T16128] [drm] Found bochs VGA, ID 0xb0c5. [ 583.548081][T16128] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 583.554369][T16128] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 583.686059][T16159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 583.881761][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.238965][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'. [ 584.911717][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.251431][T16187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2546'. [ 585.656592][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2546'. [ 585.845330][T16193] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 585.845372][T16193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.854145][T16193] vhci_hcd vhci_hcd.0: Device attached [ 585.951770][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.961681][T12845] usb 40-1: device descriptor read/8, error -110 [ 586.162038][ T35] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 586.372900][T12845] usb usb40-port1: attempt power cycle [ 586.680380][T16203] syzkaller0: entered promiscuous mode [ 586.680442][T16203] syzkaller0: entered allmulticast mode [ 586.991694][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 587.008143][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2550'. [ 587.131825][T12845] usb usb40-port1: unable to enumerate USB device [ 587.160108][T16194] vhci_hcd: connection reset by peer [ 587.163925][T12784] vhci_hcd vhci_hcd.2: stop threads [ 587.166932][T12784] vhci_hcd vhci_hcd.2: release socket [ 587.169803][T12784] vhci_hcd vhci_hcd.2: disconnect device [ 587.432925][T16220] overlayfs: failed to resolve './file1': -2 [ 587.731256][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'. [ 588.031725][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 588.537365][T16250] /dev/nullb0: Can't open blockdev [ 588.563536][ T43] audit: type=1326 audit(1788619676.412:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.3.2558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 588.564051][ T43] audit: type=1326 audit(1788619676.412:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.3.2558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 588.564670][ T43] audit: type=1326 audit(1788619676.412:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.3.2558" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 588.565318][ T43] audit: type=1326 audit(1788619676.412:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.3.2558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 588.566487][ T43] audit: type=1326 audit(1788619676.412:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.3.2558" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 588.796288][T16255] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 588.878474][ T43] audit: type=1326 audit(1788619676.722:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.3.2558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 588.878748][ T43] audit: type=1326 audit(1788619676.722:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.3.2558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 588.903558][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2560'. [ 588.925789][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2560'. [ 589.071735][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.799262][T16271] netlink: 'syz.2.2562': attribute type 10 has an invalid length. [ 590.003665][T16271] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 590.112500][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.151777][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.292942][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'. [ 591.303536][ T43] audit: type=1326 audit(1788619679.152:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16294 comm="syz.0.2574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 591.303653][ T43] audit: type=1326 audit(1788619679.152:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16294 comm="syz.0.2574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 591.323469][ T35] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 592.191662][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.682451][T16297] x_tables: duplicate underflow at hook 1 [ 593.196940][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 593.231819][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 593.358067][T16332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 593.573503][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 594.271726][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 594.635857][T16358] netlink: 'syz.2.2580': attribute type 4 has an invalid length. [ 594.635923][T16358] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2580'. [ 594.777850][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'. [ 594.831007][T16373] overlayfs: conflicting options: nfs_export=on,index=off [ 595.004269][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2584'. [ 595.311739][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.707363][T16392] cgroup: fork rejected by pids controller in /syz3 [ 596.351642][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 596.663771][T16425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2587'. [ 597.332980][T16453] overlayfs: missing 'lowerdir' [ 597.391769][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 597.455278][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 597.600791][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'. [ 598.141094][T16480] overlayfs: conflicting options: nfs_export=on,index=off [ 598.431740][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.958708][T16494] x_tables: duplicate underflow at hook 1 [ 599.471655][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 599.786608][T16502] batadv_slave_1: entered promiscuous mode [ 599.889016][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2602'. [ 599.920011][T16503] ptrace attach of ""[16505] was attempted by "/syz-executor exec"[16503] [ 599.985057][T16507] batadv_slave_1: left promiscuous mode [ 600.234636][ T43] audit: type=1800 audit(1788619688.082:562): pid=16503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 600.511720][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.424994][T16526] overlayfs: missing 'lowerdir' [ 601.551745][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.857241][T16531] cgroup: fork rejected by pids controller in /syz2 [ 602.255355][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 602.511438][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'. [ 602.591685][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.694382][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 602.806654][T16589] syz.2.2614 (16589): drop_caches: 2 [ 603.631829][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.671756][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.477756][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2616'. [ 605.483290][ T43] audit: type=1326 audit(1788619693.332:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.1.2616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 605.483381][ T43] audit: type=1326 audit(1788619693.332:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.1.2616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 605.721681][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.931442][T16598] x_tables: duplicate underflow at hook 1 [ 605.981191][T16618] overlayfs: missing 'lowerdir' [ 605.999962][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2619'. [ 606.281467][T16626] netlink: 'syz.3.2620': attribute type 1 has an invalid length. [ 606.304375][T16626] bond1: entered promiscuous mode [ 606.309082][T16626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 606.468587][T16626] bond1: (slave bridge0): making interface the new active one [ 606.468643][T16626] bridge0: entered promiscuous mode [ 606.474934][T16626] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 606.619266][T16633] CacheFiles: No cache directory specified [ 606.679452][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 606.751810][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.449279][T16647] 9p: Bad value for 'rfdno' [ 607.597841][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2628'. [ 607.791715][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.973039][ T43] audit: type=1804 audit(1788619695.812:565): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2627" name="/newroot/635/cgroup.controllers" dev="tmpfs" ino=3737 res=1 errno=0 [ 607.982880][ T43] audit: type=1800 audit(1788619695.832:566): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2627" name="cgroup.controllers" dev="tmpfs" ino=3737 res=0 errno=0 [ 608.103125][ T43] audit: type=1326 audit(1788619695.952:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.1.2629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 608.115906][ T43] audit: type=1326 audit(1788619695.962:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.1.2629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 608.128579][ T43] audit: type=1326 audit(1788619695.972:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.1.2629" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 608.136572][ T43] audit: type=1326 audit(1788619695.982:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.1.2629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 608.144121][ T43] audit: type=1326 audit(1788619695.992:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.1.2629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 608.147746][ T43] audit: type=1326 audit(1788619695.992:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.1.2629" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 608.412188][T16658] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 608.831932][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 609.871802][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 610.033392][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'. [ 610.044758][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'. [ 610.044819][T16671] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 610.350203][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 610.396680][T16681] overlayfs: missing 'lowerdir' [ 610.696746][T16683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 610.921800][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 611.160378][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 611.283693][T16702] bond0: invalid ARP target specified [ 611.951814][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.991830][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 613.280601][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 613.280683][ T43] audit: type=1326 audit(1788619701.122:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 613.286950][ T43] audit: type=1326 audit(1788619701.132:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 613.294310][ T43] audit: type=1326 audit(1788619701.142:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 613.294341][ T43] audit: type=1326 audit(1788619701.142:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 613.294362][ T43] audit: type=1326 audit(1788619701.142:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 613.294382][ T43] audit: type=1326 audit(1788619701.142:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 613.541285][T16719] x_tables: duplicate underflow at hook 1 [ 613.566563][T16727] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 614.031739][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 614.093279][T16726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2642'. [ 614.368440][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 614.684700][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2645'. [ 614.745783][ T43] audit: type=1326 audit(1788619702.592:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 614.745861][ T43] audit: type=1326 audit(1788619702.592:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 615.071662][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.728012][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.731622][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.994183][T16752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 615.994212][T16752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 615.994362][T16752] vhci_hcd vhci_hcd.0: Device attached [ 616.064792][T16753] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 616.122195][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 616.341841][T12845] usb 40-1: SetAddress Request (14) to port 0 [ 616.341977][T12845] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 616.703850][T16755] vhci_hcd: connection reset by peer [ 616.707389][ T5606] vhci_hcd vhci_hcd.1: stop threads [ 616.707474][ T5606] vhci_hcd vhci_hcd.1: release socket [ 616.707619][ T5606] vhci_hcd vhci_hcd.1: disconnect device [ 616.960431][T16772] 9pnet_fd: Insufficient options for proto=fd [ 617.104424][T16774] overlayfs: missing 'lowerdir' [ 617.151835][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 617.282519][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 617.716588][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 617.769076][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 617.769209][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 617.769341][T16790] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2654'. [ 617.963601][T16795] syzkaller0: entered promiscuous mode [ 617.963651][T16795] syzkaller0: entered allmulticast mode [ 618.112527][ T35] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 618.123813][T16802] batadv_slave_1: entered promiscuous mode [ 618.191722][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.233584][T16804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2660'. [ 618.252651][T16804] batadv_slave_1: left promiscuous mode [ 618.522520][ T35] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 618.523806][ T35] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 618.523828][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.523845][ T35] usb 8-1: config 0 has no interface number 0 [ 618.523877][ T35] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.526099][ T35] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 618.526120][ T35] usb 8-1: Product: syz [ 618.526132][ T35] usb 8-1: SerialNumber: syz [ 618.532649][ T35] usb 8-1: config 0 descriptor?? [ 618.538040][ T35] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 618.758554][T16796] LUN: removable file: (no medium) [ 618.787472][ T35] usb 8-1: USB disconnect, device number 6 [ 619.241643][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.309363][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 619.541884][T16823] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2665'. [ 619.624743][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2666'. [ 619.720621][T16832] overlayfs: missing 'lowerdir' [ 619.779350][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'. [ 620.271981][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.762253][ T43] audit: type=1326 audit(1788619708.602:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 620.775896][ T43] audit: type=1326 audit(1788619708.622:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 620.776373][ T43] audit: type=1326 audit(1788619708.622:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 620.795940][ T43] audit: type=1326 audit(1788619708.642:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 620.806905][ T43] audit: type=1326 audit(1788619708.652:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 620.822304][ T43] audit: type=1326 audit(1788619708.672:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 620.984954][T16865] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 621.095541][ T43] audit: type=1326 audit(1788619708.942:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 621.107496][ T43] audit: type=1326 audit(1788619708.952:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 621.146224][ T43] audit: type=1326 audit(1788619708.992:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 621.285887][ T43] audit: type=1326 audit(1788619709.132:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.3.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 621.311745][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 621.391692][T12845] usb 40-1: device descriptor read/8, error -110 [ 621.796009][T12845] usb usb40-port1: attempt power cycle [ 622.304388][T16900] overlayfs: missing 'lowerdir' [ 622.352713][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 622.432996][T16908] __nla_validate_parse: 5 callbacks suppressed [ 622.435909][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 622.503130][T12845] usb usb40-port1: unable to enumerate USB device [ 622.792473][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 623.050345][T16934] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 623.401764][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 623.871907][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 623.963399][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.963551][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.034139][ T35] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 624.035240][ T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 624.035715][ T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 624.035948][ T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 624.036188][ T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 624.036531][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.041646][T16938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.042312][T16938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.043133][T16938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.044051][T16938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.082492][T16944] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 624.082538][T16944] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 624.431767][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.963238][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2692'. [ 625.471741][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.191178][T16975] overlayfs: missing 'lowerdir' [ 626.405699][ T35] usb 6-1: USB disconnect, device number 10 [ 626.511707][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.934732][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'. [ 627.375620][T16998] overlayfs: missing 'lowerdir' [ 627.551791][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 628.450851][T17013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2703'. [ 628.512266][T17020] Invalid ELF header magic: != ELF [ 628.591790][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 628.899734][T17025] overlayfs: missing 'lowerdir' [ 629.089601][T17029] overlayfs: missing 'lowerdir' [ 629.631771][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.763300][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2711'. [ 630.163176][T17055] overlayfs: missing 'lowerdir' [ 630.652707][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 630.652944][ T43] audit: type=1326 audit(1788619718.502:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.652996][ T43] audit: type=1326 audit(1788619718.502:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.658915][ T43] audit: type=1326 audit(1788619718.502:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.679868][ T43] audit: type=1326 audit(1788619718.522:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.679938][ T43] audit: type=1326 audit(1788619718.522:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.687071][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 630.687367][ T43] audit: type=1326 audit(1788619718.532:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.687407][ T43] audit: type=1326 audit(1788619718.532:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.687571][ T43] audit: type=1326 audit(1788619718.532:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.696778][ T43] audit: type=1326 audit(1788619718.542:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 630.697018][ T43] audit: type=1326 audit(1788619718.542:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.3.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 631.711688][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.068643][T17086] overlayfs: missing 'lowerdir' [ 632.732335][T17091] program syz.3.2719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.743668][T17091] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 632.751854][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.769929][T17091] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 632.770125][T17091] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 632.770405][T17091] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 632.771083][T17091] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 632.789528][T17091] pci 0000:00:01.0: Adding to iommu group 1 [ 632.792063][T17091] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 632.792076][T17091] pci 0000:00:01.0: vgaarb: bridge control possible [ 632.792085][T17091] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 632.807224][T17091] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 632.807374][T17091] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 632.815234][T17091] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 632.848598][T17091] [drm] Found bochs VGA, ID 0xb0c5. [ 632.848676][T17091] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 632.863052][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2721'. [ 632.883520][T17091] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 633.337966][T17091] Console: switching to colour frame buffer device 160x50 [ 633.413990][T17091] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 633.668633][T17096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2720'. [ 633.791790][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 634.427248][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 634.486429][T17123] overlayfs: missing 'lowerdir' [ 634.831977][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 635.871831][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 636.020137][T17138] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 636.129566][T12784] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 636.285051][T17138] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 636.329880][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2731'. [ 636.794444][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 636.911730][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 637.135348][ T5892] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 637.302583][ T5892] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 637.303693][ T5892] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 637.303715][ T5892] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 637.303734][ T5892] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 637.303752][ T5892] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 637.303779][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.304899][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 637.325113][T17157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 637.325267][T17157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 637.325347][T17157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 637.325489][T17157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 637.366692][ T5892] cxacru_cm: 7 callbacks suppressed [ 637.366836][ T5892] cxacru 8-1:1.0: send of cm 0x90 failed (-71) [ 637.806053][T17180] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2737'. [ 637.961662][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 638.056004][T17189] xt_connbytes: Forcing CT accounting to be enabled [ 638.056709][T17189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 638.268945][T17189] ceph: No mds server is up or the cluster is laggy [ 638.396962][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 638.452509][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 638.737181][T17194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2739'. [ 638.992243][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 639.089897][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 639.298512][ T43] audit: type=1326 audit(1788619727.142:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.2.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 639.298609][ T43] audit: type=1326 audit(1788619727.142:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.2.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 639.312946][ T43] audit: type=1326 audit(1788619727.162:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.2.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 639.313353][ T43] audit: type=1326 audit(1788619727.162:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.2.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 639.317353][ T43] audit: type=1326 audit(1788619727.162:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.2.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 639.318129][ T43] audit: type=1326 audit(1788619727.162:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.2.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 639.673016][ T5892] usb 8-1: USB disconnect, device number 7 [ 640.031723][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 640.041005][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2746'. [ 640.402992][T17233] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 640.658911][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2747'. [ 641.071785][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 641.221873][T17252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2750'. [ 641.611474][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 642.111749][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.524475][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 643.163803][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 643.641135][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2760'. [ 644.191845][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.668508][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 645.182589][T17310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2763'. [ 645.231913][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.231204][T17324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2765'. [ 646.271959][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.702190][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 647.010471][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 647.010688][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 647.010765][T17347] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2768'. [ 647.311704][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 647.965155][T17353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2771'. [ 647.995236][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 648.164639][T17363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2772'. [ 648.351803][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.391798][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.705838][T17394] __nla_validate_parse: 1 callbacks suppressed [ 649.705928][T17394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2780'. [ 650.340748][T17397] bond0: invalid ARP target specified [ 650.418323][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2784'. [ 650.441964][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 650.738927][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 650.739070][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 650.739186][T17412] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2782'. [ 650.915442][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2783'. [ 651.481800][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 651.641938][T17434] overlayfs: missing 'lowerdir' [ 651.760697][T17437] overlayfs: missing 'lowerdir' [ 652.381480][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 652.511808][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.557423][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 652.951744][T17467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2795'. [ 653.008823][T17469] bond0: invalid ARP target specified [ 653.232886][T17477] overlayfs: missing 'lowerdir' [ 653.561679][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 654.086394][T17493] overlayfs: conflicting options: nfs_export=on,index=off [ 654.157592][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2804'. [ 654.591831][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 655.300030][T17522] overlayfs: missing 'lowerdir' [ 655.479187][T17525] __nla_validate_parse: 2 callbacks suppressed [ 655.481719][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2810'. [ 655.631840][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 656.050016][ T43] audit: type=1326 audit(1788619743.892:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.060846][ T43] audit: type=1326 audit(1788619743.902:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.071901][ T43] audit: type=1326 audit(1788619743.912:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.071970][ T43] audit: type=1326 audit(1788619743.912:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.072045][ T43] audit: type=1326 audit(1788619743.912:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.072728][ T43] audit: type=1326 audit(1788619743.922:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.072763][ T43] audit: type=1326 audit(1788619743.922:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.072796][ T43] audit: type=1326 audit(1788619743.922:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.103574][ T43] audit: type=1326 audit(1788619743.952:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.104034][ T43] audit: type=1326 audit(1788619743.952:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.0.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 656.125703][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 656.507764][T17541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2812'. [ 656.682420][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 657.721825][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 658.327413][T17558] overlayfs: conflicting options: nfs_export=on,index=off [ 658.336126][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2819'. [ 658.463079][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2815'. [ 658.463265][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2815'. [ 658.463324][T17561] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2815'. [ 658.751874][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 658.983048][T17569] overlayfs: missing 'lowerdir' [ 659.791784][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 659.991405][T17591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2825'. [ 660.831949][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 661.275869][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2834'. [ 661.874076][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 662.071992][T17614] 9p: Bad value for 'rfdno' [ 662.622208][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 662.622294][ T43] audit: type=1804 audit(1788619750.472:640): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2828" name="/newroot/738/cgroup.controllers" dev="tmpfs" ino=4214 res=1 errno=0 [ 662.622345][ T43] audit: type=1800 audit(1788619750.472:641): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2828" name="cgroup.controllers" dev="tmpfs" ino=4214 res=0 errno=0 [ 662.921657][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 663.659956][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2835'. [ 663.742218][T17641] overlayfs: missing 'lowerdir' [ 663.951901][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 664.809439][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'. [ 664.991711][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 665.938264][T17646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2837'. [ 666.031904][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.202892][T17669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2839'. [ 667.071875][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 668.111934][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 668.846866][T17689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2845'. [ 669.086290][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 669.086453][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 669.086598][T17695] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2844'. [ 669.151686][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 669.432638][T17702] overlayfs: missing 'lowerdir' [ 669.581185][T17699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'. [ 670.191740][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 670.811206][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 671.241778][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 671.786659][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2852'. [ 672.271745][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 672.305717][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 672.428312][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'. [ 672.872227][T17763] overlayfs: conflicting options: nfs_export=on,index=off [ 673.321734][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 673.828485][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'. [ 674.117982][T17778] overlayfs: conflicting options: nfs_export=on,index=off [ 674.351747][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 675.391753][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 676.441929][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 677.471763][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 677.854670][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 678.320365][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 678.511702][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 678.657795][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 678.739442][T17829] Invalid ELF header magic: != ELF [ 679.551816][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 679.715326][T17846] overlayfs: conflicting options: nfs_export=on,index=off [ 680.554494][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 680.591735][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 680.660354][T17860] vlan2: entered allmulticast mode [ 680.660422][T17860] dummy0: entered allmulticast mode [ 681.631838][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 681.711905][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 681.939957][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 682.093200][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2881'. [ 682.671462][T17891] overlayfs: conflicting options: nfs_export=on,index=off [ 682.671732][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 682.878066][T17901] overlayfs: conflicting options: nfs_export=on,index=off [ 683.304805][T17896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2883'. [ 683.712518][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 683.778479][T17905] xt_connbytes: Forcing CT accounting to be enabled [ 683.778566][T17905] xt_TPROXY: Can be used only with -p tcp or -p udp [ 683.801622][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 683.801760][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 683.837215][T17905] ceph: No mds server is up or the cluster is laggy [ 684.751772][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 684.952514][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 685.500982][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.501108][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.792003][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 686.288869][T17174] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 686.831741][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 687.188481][T16944] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 687.341894][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 687.365583][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'. [ 687.871865][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 688.911677][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 689.263680][T17962] overlayfs: conflicting options: nfs_export=on,index=off [ 689.951760][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 690.991795][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 692.031769][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 693.071764][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 694.111711][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 695.151675][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 696.191724][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 697.231646][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 698.271719][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 699.311663][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 700.361758][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 701.391729][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 702.431780][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 703.471719][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 704.511716][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 705.551670][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 706.591723][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 707.641718][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 708.681677][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 709.711665][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 710.751725][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 711.801668][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 712.841672][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 713.881718][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 714.911706][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 715.961679][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 716.991676][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 718.031664][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 719.082018][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 720.111874][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 721.151735][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 722.201675][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 723.231783][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 724.283111][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 725.311735][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 726.351738][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 726.968140][T17755] syz_tun (unregistering): left allmulticast mode [ 727.324524][T14474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 727.338424][T14474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 727.356349][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 727.358248][T17992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.362719][T17992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.365980][T17992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.373328][T17992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 727.376224][T17992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.377819][T17993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 727.377889][T17993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.401759][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 727.784549][T17993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 727.792839][T17993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 727.793710][T17993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 727.796702][T17993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 727.797371][T17993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 727.907060][T17852] syz_tun (unregistering): left allmulticast mode [ 728.018310][ T5606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.199597][ T5606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.259494][T17990] wlan0 speed is unknown, defaulting to 1000 [ 728.264837][T17990] wg2 speed is unknown, defaulting to 1000 [ 728.431774][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 728.450026][ T5606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.483434][T17987] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 728.631911][T17988] wlan0 speed is unknown, defaulting to 1000 [ 728.732685][ T5606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.743189][T17988] wg2 speed is unknown, defaulting to 1000 [ 728.824163][T18002] wlan0 speed is unknown, defaulting to 1000 [ 729.116468][T18002] wg2 speed is unknown, defaulting to 1000 [ 729.401975][T14474] Bluetooth: hci2: command tx timeout [ 729.471744][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 729.561877][T14474] Bluetooth: hci1: command tx timeout [ 729.597175][ T5606] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.871915][ T5736] Bluetooth: hci0: command tx timeout [ 730.009851][T17990] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.009962][T17990] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.010068][T17990] bridge_slave_0: entered allmulticast mode [ 730.011307][T17990] bridge_slave_0: entered promiscuous mode [ 730.145125][T17990] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.147896][T17990] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.150708][T17990] bridge_slave_1: entered allmulticast mode [ 730.155567][T17990] bridge_slave_1: entered promiscuous mode [ 730.271701][ T5736] Bluetooth: hci3: command 0x0c1a tx timeout [ 730.276145][T17993] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 730.430903][ T5606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.511725][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 730.519692][ T5606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.528167][ T5606] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 730.532678][ T5606] bond0 (unregistering): Released all slaves [ 730.541282][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 730.654922][T17990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.662668][T17990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.695308][T17990] team0: Port device team_slave_0 added [ 730.701003][T17990] team0: Port device team_slave_1 added [ 730.797267][T17990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.797344][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.797367][T17990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.799192][T17990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.799204][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.799225][T17990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.879066][T17990] hsr_slave_0: entered promiscuous mode [ 730.879862][T17990] hsr_slave_1: entered promiscuous mode [ 730.880497][T17990] debugfs: 'hsr0' already exists in 'hsr' [ 730.880514][T17990] Cannot create hsr debugfs directory [ 731.035076][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 731.204108][ T5606] tipc: Disabling bearer [ 731.204498][ T5606] tipc: Left network mode [ 731.377519][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 731.472198][T17993] Bluetooth: hci2: command tx timeout [ 731.551720][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 731.632427][T17993] Bluetooth: hci1: command tx timeout [ 731.715173][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 731.748001][T18002] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.748159][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.748239][T18002] bridge_slave_0: entered allmulticast mode [ 731.749448][T18002] bridge_slave_0: entered promiscuous mode [ 731.766230][T18070] syzkaller0: entered promiscuous mode [ 731.766288][T18070] syzkaller0: entered allmulticast mode [ 731.777503][T18070] tipc: Enabled bearer , priority 0 [ 731.780343][T18002] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.780425][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.780557][T18002] bridge_slave_1: entered allmulticast mode [ 731.781435][T18002] bridge_slave_1: entered promiscuous mode [ 731.874428][T17988] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.874519][T17988] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.874612][T17988] bridge_slave_0: entered allmulticast mode [ 731.875768][T17988] bridge_slave_0: entered promiscuous mode [ 731.879784][T17988] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.879915][T17988] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.880023][T17988] bridge_slave_1: entered allmulticast mode [ 731.884597][T17988] bridge_slave_1: entered promiscuous mode [ 731.888552][T18070] tipc: Resetting bearer [ 731.896041][T18002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.929439][T18002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.933819][T18069] tipc: Resetting bearer [ 731.951769][T17993] Bluetooth: hci0: command tx timeout [ 731.955466][T18069] tipc: Disabling bearer [ 732.023613][T17988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.034781][T17988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.049354][T18002] team0: Port device team_slave_0 added [ 732.053078][T18002] team0: Port device team_slave_1 added [ 732.064581][T18082] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 732.083246][T18002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.083334][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.083737][T18002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.153439][T17988] team0: Port device team_slave_0 added [ 732.156287][T18002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.156347][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.156398][T18002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.160281][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 732.208839][T17988] team0: Port device team_slave_1 added [ 732.270710][T17988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.271766][T17988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.271789][T17988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.273622][T17988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.273635][T17988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.273654][T17988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.312900][ T5606] hsr_slave_0: left promiscuous mode [ 732.313497][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.313544][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.316064][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.316080][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.320904][ T5606] veth1_macvtap: left promiscuous mode [ 732.320997][ T5606] veth0_macvtap: left promiscuous mode [ 732.321276][ T5606] veth1_vlan: left promiscuous mode [ 732.321354][ T5606] veth0_vlan: left promiscuous mode [ 732.352283][T17993] Bluetooth: hci3: command 0x0c1a tx timeout [ 732.451449][ T5606] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 732.591699][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 732.617120][T17988] hsr_slave_0: entered promiscuous mode [ 732.617834][T17988] hsr_slave_1: entered promiscuous mode [ 732.618412][T17988] debugfs: 'hsr0' already exists in 'hsr' [ 732.618428][T17988] Cannot create hsr debugfs directory [ 732.627796][T18002] hsr_slave_0: entered promiscuous mode [ 732.628459][T18002] hsr_slave_1: entered promiscuous mode [ 732.629050][T18002] debugfs: 'hsr0' already exists in 'hsr' [ 732.629065][T18002] Cannot create hsr debugfs directory [ 732.645821][T17990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 732.653672][T17990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.657207][T17990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 732.663691][T17990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.682715][T17990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 732.691111][T17990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.693723][T17990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 732.699817][T17990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.832597][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 733.033898][T18002] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 733.088713][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 733.106212][T18002] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 733.117230][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 733.125960][T18002] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 733.132904][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.134056][T18002] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 733.141191][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.156172][T17990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.168176][ T5606] IPVS: stop unused estimator thread 0... [ 733.179293][T17990] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.267253][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.267345][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.276484][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.276599][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.342412][T17988] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 733.350622][T17988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 733.360667][T17988] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 733.366550][T17988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 733.373120][T17988] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 733.382965][T17988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.394654][T17988] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 733.400414][T17988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.433354][T18002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.439831][T18002] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.455682][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.455819][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.476526][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.476631][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.551985][T17993] Bluetooth: hci2: command tx timeout [ 733.625760][T17988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.631720][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 733.645327][T17988] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.651322][T16020] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.651455][T16020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.657104][T16020] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.657183][T16020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.721783][T17993] Bluetooth: hci1: command tx timeout [ 733.863532][T17990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.949526][T18002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.031829][T17993] Bluetooth: hci0: command tx timeout [ 734.175106][T17988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.427571][T17990] veth0_vlan: entered promiscuous mode [ 734.465716][T17990] veth1_vlan: entered promiscuous mode [ 734.515598][T18181] overlayfs: conflicting options: nfs_export=on,index=off [ 734.550018][T18002] veth0_vlan: entered promiscuous mode [ 734.603839][T18002] veth1_vlan: entered promiscuous mode [ 734.609123][T17990] veth0_macvtap: entered promiscuous mode [ 734.620941][T17990] veth1_macvtap: entered promiscuous mode [ 734.662368][T17990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.671795][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 734.690061][T18002] veth0_macvtap: entered promiscuous mode [ 734.829528][T18002] veth1_macvtap: entered promiscuous mode [ 734.883199][T17990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.916151][T18002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.924491][T18002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.154718][T17988] veth0_vlan: entered promiscuous mode [ 735.192275][T14793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.227544][T17988] veth1_vlan: entered promiscuous mode [ 735.265742][T16429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.265802][T16429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.317353][T18002] warn_alloc: 1 callbacks suppressed [ 735.317517][T18002] syz-executor: page allocation failure: order:4, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 735.317615][T18002] CPU: 1 UID: 0 PID: 18002 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 735.317640][T18002] Tainted: [L]=SOFTLOCKUP [ 735.317647][T18002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 735.317658][T18002] Call Trace: [ 735.317664][T18002] [ 735.317671][T18002] dump_stack_lvl+0x100/0x190 [ 735.317702][T18002] warn_alloc.cold+0x9e/0xb2 [ 735.317723][T18002] ? __pfx_warn_alloc+0x10/0x10 [ 735.317751][T18002] ? find_held_lock+0x2b/0x80 [ 735.317770][T18002] ? psi_memstall_leave+0x19c/0x360 [ 735.317799][T18002] ? psi_memstall_leave+0x1eb/0x360 [ 735.317820][T18002] ? lockdep_hardirqs_on+0x7d/0x110 [ 735.317849][T18002] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 735.317893][T18002] ? __lock_acquire+0x460/0x1ec0 [ 735.317918][T18002] ? unwind_get_return_address+0x59/0xa0 [ 735.317943][T18002] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 735.317981][T18002] ? __lock_acquire+0x4c5/0x1ec0 [ 735.318010][T18002] ? __lock_acquire+0x4c5/0x1ec0 [ 735.318037][T18002] ? lock_acquire+0x1d1/0x380 [ 735.318066][T18002] ? lock_acquire+0x1d1/0x380 [ 735.318089][T18002] ? is_bpf_text_address+0x25/0x1a0 [ 735.318115][T18002] ? find_held_lock+0x2b/0x80 [ 735.318133][T18002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 735.318158][T18002] ? policy_nodemask+0xed/0x4f0 [ 735.318184][T18002] alloc_pages_mpol+0x201/0x550 [ 735.318209][T18002] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 735.318234][T18002] ? arch_stack_walk+0xa6/0xf0 [ 735.318257][T18002] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 735.318283][T18002] ___kmalloc_large_node+0xe8/0x130 [ 735.318309][T18002] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 735.318336][T18002] __kmalloc_large_node_noprof+0x1c/0x70 [ 735.318362][T18002] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 735.318385][T18002] __kmalloc_noprof+0x5a8/0x840 [ 735.318405][T18002] ? wiphy_new_nm+0x701/0x21a0 [ 735.318436][T18002] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 735.318461][T18002] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 735.318486][T18002] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 735.318508][T18002] wiphy_new_nm+0x701/0x21a0 [ 735.318535][T18002] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 735.318559][T18002] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 735.318582][T18002] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 735.318604][T18002] ieee80211_alloc_hw_nm+0x1b2e/0x2310 [ 735.318629][T18002] ? __local_bh_enable_ip+0xa5/0x120 [ 735.318658][T18002] mac80211_hwsim_new_radio+0x1de/0x6510 [ 735.318693][T18002] ? nla_get_range_unsigned+0x37a/0x480 [ 735.318723][T18002] ? __nla_validate_parse+0x1e7/0x28b0 [ 735.318751][T18002] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 735.318785][T18002] hwsim_new_radio_nl+0xc6b/0x13f0 [ 735.318810][T18002] ? trace_kmalloc+0xeb/0x110 [ 735.318832][T18002] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 735.318865][T18002] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 735.318895][T18002] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 735.318924][T18002] genl_family_rcv_msg_doit+0x214/0x300 [ 735.318950][T18002] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 735.318972][T18002] ? genl_get_cmd+0x3e7/0x760 [ 735.318998][T18002] ? bpf_lsm_capable+0x9/0x10 [ 735.319024][T18002] ? security_capable+0x80/0x260 [ 735.319045][T18002] ? ns_capable+0xd2/0xf0 [ 735.319073][T18002] genl_rcv_msg+0x560/0x800 [ 735.319098][T18002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.319120][T18002] ? __lock_acquire+0x4c5/0x1ec0 [ 735.319143][T18002] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 735.319181][T18002] netlink_rcv_skb+0x159/0x420 [ 735.319200][T18002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.319224][T18002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.319254][T18002] ? netlink_deliver_tap+0x1ae/0xcc0 [ 735.319287][T18002] genl_rcv+0x28/0x40 [ 735.319306][T18002] netlink_unicast+0x585/0x850 [ 735.319328][T18002] ? __pfx_netlink_unicast+0x10/0x10 [ 735.319345][T18002] ? aa_sk_perm+0x389/0xab0 [ 735.319376][T18002] netlink_sendmsg+0x8b0/0xda0 [ 735.319399][T18002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.319421][T18002] ? apparmor_socket_sendmsg+0x165/0x280 [ 735.319445][T18002] __sys_sendto+0x48b/0x4e0 [ 735.319460][T18002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.319475][T18002] ? __pfx___sys_sendto+0x10/0x10 [ 735.319501][T18002] ? lock_acquire+0x1d1/0x380 [ 735.319542][T18002] __ia32_compat_sys_socketcall+0x59a/0x770 [ 735.319574][T18002] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 735.319607][T18002] ? xfd_validate_state+0x129/0x190 [ 735.319645][T18002] do_int80_emulation+0x166/0x650 [ 735.319674][T18002] asm_int80_emulation+0x1a/0x20 [ 735.319693][T18002] RIP: 0023:0xf71f75ab [ 735.319709][T18002] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 735.319726][T18002] RSP: 002b:00000000ff96d5ac EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 735.319743][T18002] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff96d654 [ 735.319755][T18002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.319765][T18002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 735.319776][T18002] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 735.319787][T18002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 735.319811][T18002] [ 735.319819][T18002] Mem-Info: [ 735.319826][T18002] active_anon:5639 inactive_anon:2320 isolated_anon:0 [ 735.319826][T18002] active_file:1858 inactive_file:6988 isolated_file:0 [ 735.319826][T18002] unevictable:1023 dirty:7 writeback:0 [ 735.319826][T18002] slab_reclaimable:6641 slab_unreclaimable:62987 [ 735.319826][T18002] mapped:27339 shmem:6539 pagetables:1113 [ 735.319826][T18002] sec_pagetables:374 bounce:0 [ 735.319826][T18002] kernel_misc_reclaimable:0 [ 735.319826][T18002] free:26061 free_pcp:488 free_cma:0 [ 735.319869][T18002] Node 0 active_anon:32kB inactive_anon:4208kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8544kB pagetables:1440kB sec_pagetables:1220kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 735.319917][T18002] Node 1 active_anon:22524kB inactive_anon:5072kB active_file:7432kB inactive_file:27952kB unevictable:4092kB isolated(anon):0kB isolated(file):0kB mapped:109328kB dirty:28kB writeback:0kB shmem:21956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6092kB pagetables:3012kB sec_pagetables:276kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 735.319963][T18002] Node 0 DMA free:2056kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:24kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.320010][T18002] lowmem_reserve[]: 0 277 277 277 277 [ 735.320042][T18002] Node 0 DMA32 free:26440kB boost:31044kB min:44844kB low:48292kB high:51740kB reserved_highatomic:2048kB free_highatomic:140kB active_anon:32kB inactive_anon:4208kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:592kB present:1032196kB managed:284624kB mlocked:0kB bounce:0kB free_pcp:712kB local_pcp:12kB free_cma:0kB [ 735.320093][T18002] lowmem_reserve[]: 0 0 0 0 0 [ 735.320124][T18002] Node 1 DMA32 free:75748kB boost:28672kB min:74656kB low:86152kB high:97648kB reserved_highatomic:2048kB free_highatomic:1296kB active_anon:22524kB inactive_anon:5072kB active_file:7432kB inactive_file:27952kB unevictable:4092kB writepending:28kB zspages:5520kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:1304kB local_pcp:148kB free_cma:0kB [ 735.320176][T18002] lowmem_reserve[]: 0 0 0 0 0 [ 735.320207][T18002] Node 0 DMA: 28*4kB (U) 7*8kB (U) 4*16kB (UM) 3*32kB (U) 1*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2056kB [ 735.320336][T18002] Node 0 DMA32: 415*4kB (UMEH) 106*8kB (UMEH) 50*16kB (UMEH) 176*32kB (UMEH) 66*64kB (UME) 12*128kB (UME) 12*256kB (ME) 9*512kB (UME) 4*1024kB (M) 0*2048kB 0*4096kB = 26476kB [ 735.320467][T18002] Node 1 DMA32: 910*4kB (UMEH) 996*8kB (UMEH) 1365*16kB (UMEH) 421*32kB (MEH) 88*64kB (ME) 36*128kB (ME) 12*256kB (UMH) 2*512kB (MH) 0*1024kB 1*2048kB (U) 3*4096kB (U) = 75592kB [ 735.320614][T18002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.320629][T18002] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.320645][T18002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.320660][T18002] Node 1 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 735.320674][T18002] 16154 total pagecache pages [ 735.320681][T18002] 758 pages in swap cache [ 735.320687][T18002] Free swap = 97364kB [ 735.320694][T18002] Total swap = 124996kB [ 735.320702][T18002] 524155 pages RAM [ 735.320708][T18002] 0 pages HighMem/MovableOnly [ 735.320714][T18002] 212107 pages reserved [ 735.320721][T18002] 0 pages cma reserved [ 735.589085][T16429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.589102][T16429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.592337][T14793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.592545][T14793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.592725][T14793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.593169][T14793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.593527][T14793] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.598687][T14793] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.599734][T17988] veth0_macvtap: entered promiscuous mode [ 735.638197][T17993] Bluetooth: hci2: command tx timeout [ 735.711692][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 735.766435][T17988] veth1_macvtap: entered promiscuous mode [ 735.791817][T17993] Bluetooth: hci1: command tx timeout [ 735.910413][T17988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.917129][T16429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.917209][T16429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.925890][T17988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.982970][T14793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.983158][T14793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.983319][T14793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.983461][T14793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.003127][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.122663][T16429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.122738][T16429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.256677][T16020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.256744][T16020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.582783][T14793] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.730051][T18198] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 736.751713][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.763149][T18198] IPv6: addrconf: prefix option has invalid lifetime [ 736.862871][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2898'. [ 737.100453][T14793] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.791671][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 738.159039][T14793] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.388920][T14793] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.520529][T16020] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:74dea17d-ca4c-443f-897a-a52b54586863 for subsystem testsubsys not allowed [ 738.525875][T18212] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:74dea17d-ca4c-443f-897a-a52b54586863 [ 738.841663][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 738.878459][T18218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2911'. [ 739.316715][T14793] bridge_slave_1: left allmulticast mode [ 739.323094][T14793] bridge_slave_1: left promiscuous mode [ 739.327323][T14793] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.402041][T14793] bridge_slave_0: left allmulticast mode [ 739.402442][T14793] bridge_slave_0: left promiscuous mode [ 739.402563][T14793] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.691761][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 739.714516][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 739.722187][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 739.725188][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 739.726150][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.871701][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 739.900816][T14793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.916636][T14793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.925509][T14793] bond0 (unregistering): Released all slaves [ 740.298523][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2914'. [ 740.519817][T14793] hsr_slave_0: left promiscuous mode [ 740.526709][T14793] hsr_slave_1: left promiscuous mode [ 740.527801][T14793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.527820][T14793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.535321][T14793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.535378][T14793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.542973][T18229] devpts: Invalid uid '0x00000000ffffffff' [ 740.606468][T14793] veth1_macvtap: left promiscuous mode [ 740.611175][T14793] veth0_macvtap: left promiscuous mode [ 740.627298][T14793] veth1_vlan: left promiscuous mode [ 740.630118][T14793] veth0_vlan: left promiscuous mode [ 740.697067][T18229] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 740.911759][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 741.212249][T14793] team0 (unregistering): Port device team_slave_1 removed [ 741.217318][T14793] team0 (unregistering): Port device team_slave_0 removed [ 741.267605][T18252] overlayfs: conflicting options: nfs_export=on,index=off [ 741.306958][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 741.515318][T18222] wlan0 speed is unknown, defaulting to 1000 [ 741.516425][T18222] wg2 speed is unknown, defaulting to 1000 [ 741.865882][T18267] netlink: 'syz.4.2917': attribute type 21 has an invalid length. [ 741.874812][T18267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2917'. [ 741.910758][T18267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 741.953288][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 741.953599][T17993] Bluetooth: hci0: command tx timeout [ 741.972094][ T43] audit: type=1800 audit(1788619829.812:642): pid=18267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2917" name="file0" dev="overlay" ino=65 res=0 errno=0 [ 742.038407][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 742.177481][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2919'. [ 742.248157][T18222] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.254097][T18222] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.257848][T18222] bridge_slave_0: entered allmulticast mode [ 742.265926][T18222] bridge_slave_0: entered promiscuous mode [ 742.267341][T18222] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.267832][T18222] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.269686][T18222] bridge_slave_1: entered allmulticast mode [ 742.271164][T18222] bridge_slave_1: entered promiscuous mode [ 742.318495][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 742.370284][T18222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.383608][T18222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.406713][T18222] team0: Port device team_slave_0 added [ 742.409235][T18222] team0: Port device team_slave_1 added [ 742.424388][T18222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.424447][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.424708][T18222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.426585][T18222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.426597][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.426616][T18222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.462771][T18222] hsr_slave_0: entered promiscuous mode [ 742.463655][T18222] hsr_slave_1: entered promiscuous mode [ 742.464282][T18222] debugfs: 'hsr0' already exists in 'hsr' [ 742.464299][T18222] Cannot create hsr debugfs directory [ 743.001541][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 743.377942][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2921'. [ 743.468614][T18305] hsr_slave_1 (unregistering): left promiscuous mode [ 744.031544][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 744.106356][T17993] Bluetooth: hci0: command tx timeout [ 744.770861][T18222] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 744.778715][T18222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.779233][T18222] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 744.787296][T18222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.788219][T18222] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 744.820275][T18222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.821724][T18222] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 744.864208][T18222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.979263][T18222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.995142][T18222] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.007938][T16429] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.008014][T16429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.009034][T16429] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.009091][T16429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.071429][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 745.381669][T18222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.613928][T18370] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 746.111492][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 746.118183][T18366] loop0: detected capacity change from 0 to 4095 [ 746.137651][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 746.205214][T17993] Bluetooth: hci0: command tx timeout [ 746.838582][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.838686][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.025862][T18222] veth0_vlan: entered promiscuous mode [ 747.046522][T18222] veth1_vlan: entered promiscuous mode [ 747.078925][T18222] veth0_macvtap: entered promiscuous mode [ 747.082798][T18222] veth1_macvtap: entered promiscuous mode [ 747.091059][T18222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.102656][T18222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.105498][T18379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2924'. [ 747.151476][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 747.467185][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.467509][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.467569][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.467603][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.897361][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.897455][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.010309][T16429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.010380][T16429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.191309][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 748.271375][T17993] Bluetooth: hci0: command tx timeout [ 748.453986][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2900'. [ 748.510681][T18421] hsr_slave_1 (unregistering): left promiscuous mode [ 748.674892][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2928'. [ 748.989933][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2931'. [ 749.231322][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 749.591610][ T25] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 749.751485][ T25] usb 11-1: Using ep0 maxpacket: 8 [ 749.761788][ T25] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 749.763840][ T25] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 749.764170][ T25] usb 11-1: config 0 has no interface number 0 [ 749.764428][ T25] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 749.764644][ T25] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 749.764686][ T25] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.764756][ T25] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.764821][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.794217][ T25] usb 11-1: config 0 descriptor?? [ 749.810674][ T25] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 750.034958][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2935'. [ 750.271151][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 751.321192][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 752.361004][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 752.772344][T12845] usb 11-1: USB disconnect, device number 2 [ 752.775889][T12845] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 753.391112][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 753.839773][T18475] batadv_slave_1: entered promiscuous mode [ 754.441219][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 755.342125][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2936'. [ 755.470952][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 756.027594][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2940'. [ 756.510868][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 757.031413][T18475] batadv_slave_1: left promiscuous mode [ 757.259004][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2943'. [ 757.341777][T18508] hsr_slave_1 (unregistering): left promiscuous mode [ 757.560842][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 757.713325][T18511] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2941'. [ 758.590857][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 758.830833][T18521] fuse: Unknown parameter 'fd‚' [ 758.976663][T18522] syzkaller0: entered promiscuous mode [ 758.976751][T18522] syzkaller0: entered allmulticast mode [ 759.632342][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 760.680592][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 760.921955][ T5736] Bluetooth: hci0: command 0x0405 tx timeout [ 761.715388][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 762.755105][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 763.688619][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 763.790428][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 764.042376][T18563] netlink: 'syz.5.2954': attribute type 1 has an invalid length. [ 764.140521][T18564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2954'. [ 764.140600][T18564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2954'. [ 764.696591][T18563] bond1: entered promiscuous mode [ 764.696910][T18563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.734814][T18565] bond1: (slave bridge1): making interface the new active one [ 764.734868][T18565] bridge1: entered promiscuous mode [ 764.746093][T18565] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 764.840403][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 765.121643][T18579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2955'. [ 765.870558][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 766.920296][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 766.993361][T18598] netlink: 'syz.0.2962': attribute type 21 has an invalid length. [ 766.993532][T18598] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2962'. [ 767.028003][T18598] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 767.042130][ T43] audit: type=1800 audit(1788619854.894:643): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2962" name="file0" dev="overlay" ino=4396 res=0 errno=0 [ 767.053861][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2961'. [ 767.386311][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'. [ 767.851426][T18621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2965'. [ 767.908059][T18622] gfs2: error -5 reading superblock [ 767.923276][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 767.960203][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 768.990115][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 769.730737][T18641] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 769.955699][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2972'. [ 770.030201][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 770.414868][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2975'. [ 771.072393][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 771.121555][T18682] devpts: Invalid uid '0x00000000ffffffff' [ 771.126556][T18682] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 771.127600][T18682] i2c i2c-0: delete_device: Can't find device in list [ 771.788380][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2979'. [ 772.109979][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 773.101200][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2982'. [ 773.149969][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.189901][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.748975][T16024] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:74dea17d-ca4c-443f-897a-a52b54586863 for subsystem testsubsys not allowed [ 774.773757][T18712] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:74dea17d-ca4c-443f-897a-a52b54586863 [ 774.926463][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2985'. [ 775.229862][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 775.460460][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 776.270181][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 776.767893][T18759] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 776.788054][T18759] retu-mfd 0-0002: could not read Tahvo revision: -6 [ 776.791389][T18759] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 777.309775][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 777.950343][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2996'. [ 778.208213][ T1161] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:74dea17d-ca4c-443f-897a-a52b54586863 for subsystem testsubsys not allowed [ 778.208380][T18785] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:74dea17d-ca4c-443f-897a-a52b54586863 [ 778.359626][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 778.942414][ T43] audit: type=1807 audit(1788619866.785:644): action=measure res=1 [ 779.057528][T18801] ima: policy update completed [ 779.057765][ T43] audit: type=1802 audit(1788619866.905:645): pid=18801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.5.3001" res=1 errno=0 [ 779.221286][ T43] audit: type=1800 audit(1788619867.065:646): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 779.257560][ T43] audit: type=1800 audit(1788619867.105:647): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 779.264294][ T43] audit: type=1800 audit(1788619867.115:648): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 779.358923][ T43] audit: type=1800 audit(1788619867.205:649): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 779.389656][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 779.850098][ T43] audit: type=1800 audit(1788619867.705:650): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 779.983506][ T43] audit: type=1800 audit(1788619867.835:651): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 780.229074][T18810] overlayfs: conflicting options: nfs_export=on,index=off [ 780.310834][ T43] audit: type=1800 audit(1788619868.165:652): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 780.439588][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 780.721143][ T43] audit: type=1800 audit(1788619868.195:653): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 781.069027][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'. [ 781.469422][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 782.509529][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 783.549343][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 784.440094][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'. [ 784.589271][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 784.904652][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 784.904784][ T43] audit: type=1800 audit(1788619872.755:662): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 785.629227][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 785.731983][ T43] audit: type=1800 audit(1788619873.585:663): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 785.791818][ T43] audit: type=1800 audit(1788619873.645:664): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20356 res=0 errno=0 [ 785.815031][ T43] audit: type=1800 audit(1788619873.665:665): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20356 res=0 errno=0 [ 785.906123][ T43] audit: type=1800 audit(1788619873.755:666): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 785.979081][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3014'. [ 786.149675][ T43] audit: type=1800 audit(1788619874.005:667): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 786.428821][ T43] audit: type=1800 audit(1788619874.275:668): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 786.524819][ T43] audit: type=1800 audit(1788619874.375:669): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20356 res=0 errno=0 [ 786.669743][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 786.786614][T18883] overlayfs: conflicting options: nfs_export=on,index=off [ 787.093760][ T43] audit: type=1800 audit(1788619874.945:670): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 787.226233][ T43] audit: type=1800 audit(1788619875.075:671): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20082 res=0 errno=0 [ 787.335383][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3018'. [ 787.709152][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 787.921450][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3019'. [ 788.156863][T18896] [ 788.157849][T18896] ====================================================== [ 788.160522][T18896] WARNING: possible circular locking dependency detected [ 788.163425][T18896] syzkaller #0 Tainted: G L [ 788.166103][T18896] ------------------------------------------------------ [ 788.168947][T18896] syz.4.3021/18896 is trying to acquire lock: [ 788.171462][T18896] ffff8880529d8480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 788.175350][T18896] [ 788.175350][T18896] but task is already holding lock: [ 788.178653][T18896] ffff88805fc4d3f8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 788.182788][T18896] [ 788.182788][T18896] which lock already depends on the new lock. [ 788.182788][T18896] [ 788.187359][T18896] [ 788.187359][T18896] the existing dependency chain (in reverse order) is: [ 788.190713][T18896] [ 788.190713][T18896] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 788.193647][T18896] lock_acquire+0x1d1/0x380 [ 788.195290][T18896] __mutex_lock+0x1a4/0x1bd0 [ 788.197460][T18896] process_measurement+0x5ab/0x2350 [ 788.200754][T18896] ima_file_check+0xcc/0x120 [ 788.203294][T18896] security_file_post_open+0xc4/0x210 [ 788.206140][T18896] path_openat+0x5cd/0x2440 [ 788.208163][T18896] do_file_open+0x20e/0x430 [ 788.209945][T18896] do_sys_openat2+0x10f/0x1e0 [ 788.211512][T18896] __x64_sys_openat+0x12d/0x210 [ 788.213272][T18896] do_syscall_64+0x121/0x770 [ 788.215207][T18896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.217864][T18896] [ 788.217864][T18896] -> #3 (sb_writers#5){.+.+}-{0:0}: [ 788.220939][T18896] lock_acquire+0x1d1/0x380 [ 788.223109][T18896] mnt_want_write+0x6f/0x420 [ 788.225387][T18896] lookup_open+0x150/0x1990 [ 788.227760][T18896] path_openat+0xa2c/0x2440 [ 788.230190][T18896] do_file_open+0x20e/0x430 [ 788.232640][T18896] file_open_name+0x1c3/0x3e0 [ 788.234803][T18896] filp_open+0x2e/0x50 [ 788.236778][T18896] nvmet_file_ns_enable+0x95/0x420 [ 788.239070][T18896] nvmet_ns_enable+0x35f/0x5d0 [ 788.241264][T18896] nvmet_ns_enable_store+0x11e/0x160 [ 788.243699][T18896] configfs_write_iter+0x302/0x4e0 [ 788.246104][T18896] vfs_write+0x6af/0x1050 [ 788.248394][T18896] ksys_write+0x12a/0x250 [ 788.250781][T18896] __do_fast_syscall_32+0x13a/0x8b0 [ 788.253290][T18896] do_fast_syscall_32+0x32/0x70 [ 788.255537][T18896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.258349][T18896] [ 788.258349][T18896] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 788.261436][T18896] lock_acquire+0x1d1/0x380 [ 788.263841][T18896] __mutex_lock+0x1a4/0x1bd0 [ 788.266599][T18896] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 788.269265][T18896] configfs_write_iter+0x302/0x4e0 [ 788.271580][T18896] vfs_write+0x6af/0x1050 [ 788.273607][T18896] ksys_write+0x12a/0x250 [ 788.275636][T18896] __do_fast_syscall_32+0x13a/0x8b0 [ 788.278026][T18896] do_fast_syscall_32+0x32/0x70 [ 788.280255][T18896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.283210][T18896] [ 788.283210][T18896] -> #1 (&p->frag_sem){++++}-{4:4}: [ 788.286695][T18896] lock_acquire+0x1d1/0x380 [ 788.289083][T18896] down_read+0x99/0x4c0 [ 788.291055][T18896] configfs_write_iter+0x218/0x4e0 [ 788.293378][T18896] vfs_write+0x6af/0x1050 [ 788.295399][T18896] ksys_write+0x12a/0x250 [ 788.297400][T18896] __do_fast_syscall_32+0x13a/0x8b0 [ 788.299920][T18896] do_fast_syscall_32+0x32/0x70 [ 788.302319][T18896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.305330][T18896] [ 788.305330][T18896] -> #0 (&buffer->mutex){+.+.}-{4:4}: [ 788.308504][T18896] check_prev_add+0xeb/0xe60 [ 788.310734][T18896] __lock_acquire+0x1492/0x1ec0 [ 788.313050][T18896] lock_acquire+0x1d1/0x380 [ 788.315346][T18896] __mutex_lock+0x1a4/0x1bd0 [ 788.317548][T18896] configfs_read_iter+0x79/0x6f0 [ 788.319781][T18896] __kernel_read+0x397/0xad0 [ 788.321934][T18896] integrity_kernel_read+0x7e/0xb0 [ 788.324321][T18896] ima_calc_file_hash_tfm+0x25e/0x350 [ 788.327085][T18896] ima_calc_file_hash+0x1e3/0x380 [ 788.329853][T18896] ima_collect_measurement+0x94f/0xb30 [ 788.332594][T18896] process_measurement+0xdfe/0x2350 [ 788.334964][T18896] ima_file_check+0xcc/0x120 [ 788.337102][T18896] security_file_post_open+0xc4/0x210 [ 788.339544][T18896] path_openat+0x5cd/0x2440 [ 788.341672][T18896] do_file_open+0x20e/0x430 [ 788.343872][T18896] do_sys_openat2+0x10f/0x1e0 [ 788.346505][T18896] __ia32_compat_sys_openat+0x12d/0x210 [ 788.349417][T18896] __do_fast_syscall_32+0x13a/0x8b0 [ 788.351846][T18896] do_fast_syscall_32+0x32/0x70 [ 788.353993][T18896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.356257][T18896] [ 788.356257][T18896] other info that might help us debug this: [ 788.356257][T18896] [ 788.359310][T18896] Chain exists of: [ 788.359310][T18896] &buffer->mutex --> sb_writers#5 --> &ima_iint_mutex_key[depth] [ 788.359310][T18896] [ 788.364304][T18896] Possible unsafe locking scenario: [ 788.364304][T18896] [ 788.367312][T18896] CPU0 CPU1 [ 788.369082][T18896] ---- ---- [ 788.371030][T18896] lock(&ima_iint_mutex_key[depth]); [ 788.373084][T18896] lock(sb_writers#5); [ 788.375177][T18896] lock(&ima_iint_mutex_key[depth]); [ 788.377713][T18896] lock(&buffer->mutex); [ 788.379414][T18896] [ 788.379414][T18896] *** DEADLOCK *** [ 788.379414][T18896] [ 788.382373][T18896] locks held by syz.4.3021/18896: 1, last CPU#3: [ 788.384923][T18896] #0: ffff88805fc4d3f8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 788.389673][T18896] [ 788.389673][T18896] stack backtrace: [ 788.392013][T18896] CPU: 3 UID: 0 PID: 18896 Comm: syz.4.3021 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.395842][T18896] Tainted: [L]=SOFTLOCKUP [ 788.397164][T18896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 788.400504][T18896] Call Trace: [ 788.401931][T18896] [ 788.402917][T18896] dump_stack_lvl+0x100/0x190 [ 788.404385][T18896] print_circular_bug.cold+0x178/0x1be [ 788.406051][T18896] check_noncircular+0x146/0x160 [ 788.407587][T18896] check_prev_add+0xeb/0xe60 [ 788.409621][T18896] __lock_acquire+0x1492/0x1ec0 [ 788.411944][T18896] ? is_bpf_text_address+0x8a/0x1a0 [ 788.413943][T18896] lock_acquire+0x1d1/0x380 [ 788.415601][T18896] ? configfs_read_iter+0x79/0x6f0 [ 788.417331][T18896] ? __pfx___might_resched+0x10/0x10 [ 788.419270][T18896] ? arch_stack_walk+0xa6/0xf0 [ 788.421058][T18896] __mutex_lock+0x1a4/0x1bd0 [ 788.422716][T18896] ? configfs_read_iter+0x79/0x6f0 [ 788.424680][T18896] ? configfs_read_iter+0x79/0x6f0 [ 788.426456][T18896] ? stack_trace_save+0x8e/0xc0 [ 788.428293][T18896] ? __pfx___mutex_lock+0x10/0x10 [ 788.429850][T18896] ? stack_depot_save_flags+0x27/0x9f0 [ 788.431553][T18896] ? lock_acquire+0x1d1/0x380 [ 788.433450][T18896] ? __kasan_kmalloc+0xaa/0xb0 [ 788.435506][T18896] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 788.437999][T18896] ? ima_calc_file_hash_tfm+0x236/0x350 [ 788.439938][T18896] ? ima_calc_file_hash+0x1e3/0x380 [ 788.441953][T18896] ? ima_collect_measurement+0x94f/0xb30 [ 788.444341][T18896] ? process_measurement+0xdfe/0x2350 [ 788.446372][T18896] ? ima_file_check+0xcc/0x120 [ 788.448231][T18896] ? security_file_post_open+0xc4/0x210 [ 788.450478][T18896] ? configfs_read_iter+0x79/0x6f0 [ 788.452675][T18896] configfs_read_iter+0x79/0x6f0 [ 788.454968][T18896] __kernel_read+0x397/0xad0 [ 788.457343][T18896] ? __pfx___kernel_read+0x10/0x10 [ 788.459472][T18896] integrity_kernel_read+0x7e/0xb0 [ 788.461818][T18896] ? __pfx_integrity_kernel_read+0x10/0x10 [ 788.464126][T18896] ? ima_calc_file_hash_tfm+0x236/0x350 [ 788.466460][T18896] ima_calc_file_hash_tfm+0x25e/0x350 [ 788.468745][T18896] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 788.471261][T18896] ? __pfx_filter_irq_stacks+0x10/0x10 [ 788.473207][T18896] ? look_up_lock_class+0x64/0x120 [ 788.475037][T18896] ? ima_alloc_tfm+0x21a/0x2e0 [ 788.477181][T18896] ima_calc_file_hash+0x1e3/0x380 [ 788.479432][T18896] ima_collect_measurement+0x94f/0xb30 [ 788.481851][T18896] ? __pfx_ima_collect_measurement+0x10/0x10 [ 788.484393][T18896] ? process_measurement+0x5ab/0x2350 [ 788.486651][T18896] ? is_bad_inode+0xd/0x40 [ 788.488657][T18896] ? xattr_resolve_name+0x27d/0x3f0 [ 788.491146][T18896] ? vfs_getxattr_alloc+0xec/0x350 [ 788.493543][T18896] ? ima_get_hash_algo+0x241/0x400 [ 788.495711][T18896] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 788.497982][T18896] ? process_measurement+0xdfe/0x2350 [ 788.500198][T18896] process_measurement+0xdfe/0x2350 [ 788.502362][T18896] ? __pfx_process_measurement+0x10/0x10 [ 788.504852][T18896] ? lock_acquire+0x1d1/0x380 [ 788.507159][T18896] ? __configfs_open_file+0x6ca/0x9c0 [ 788.509793][T18896] ima_file_check+0xcc/0x120 [ 788.511828][T18896] ? __pfx_ima_file_check+0x10/0x10 [ 788.514041][T18896] security_file_post_open+0xc4/0x210 [ 788.516307][T18896] path_openat+0x5cd/0x2440 [ 788.518276][T18896] ? __pfx_path_openat+0x10/0x10 [ 788.520611][T18896] do_file_open+0x20e/0x430 [ 788.522659][T18896] ? __pfx_do_file_open+0x10/0x10 [ 788.524848][T18896] ? _raw_spin_unlock+0x28/0x50 [ 788.527062][T18896] ? alloc_fd+0x471/0x7a0 [ 788.528865][T18896] do_sys_openat2+0x10f/0x1e0 [ 788.530855][T18896] ? __pfx_do_sys_openat2+0x10/0x10 [ 788.533039][T18896] __ia32_compat_sys_openat+0x12d/0x210 [ 788.535372][T18896] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 788.537861][T18896] __do_fast_syscall_32+0x13a/0x8b0 [ 788.539977][T18896] do_fast_syscall_32+0x32/0x70 [ 788.542215][T18896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.545228][T18896] RIP: 0023:0xf70cefec [ 788.547197][T18896] Code: Unable to access opcode bytes at 0xf70cefc2. [ 788.550294][T18896] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 788.553618][T18896] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500 [ 788.556876][T18896] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.560561][T18896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.564289][T18896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 788.567508][T18896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.570810][T18896] [ 788.748988][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 789.789014][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.829003][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 791.860473][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 791.860587][ T43] audit: type=1800 audit(1788619879.715:684): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 791.867288][ T43] audit: type=1800 audit(1788619879.715:685): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 791.871550][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 792.909041][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 793.948755][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 794.998695][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 796.028711][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 797.068639][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 798.108844][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available