last executing test programs: 1m26.049338911s ago: executing program 0 (id=1426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 1m24.811184242s ago: executing program 0 (id=1430): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040), 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 1m23.186400642s ago: executing program 0 (id=1434): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x3, 0xff00, 0x0, '\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) 1m20.722028236s ago: executing program 0 (id=1436): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r0, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = accept4(r0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a80)={r4, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) 1m19.863874869s ago: executing program 0 (id=1442): gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000500)) 1m18.852319543s ago: executing program 0 (id=1446): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1m18.569979624s ago: executing program 32 (id=1446): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1m13.27073063s ago: executing program 4 (id=1447): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') 1m11.336551078s ago: executing program 4 (id=1466): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139434789e872e11a7ecc92e1426e277ff43c5c6c6eef75520000"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/216, 0xd8}], 0x1, &(0x7f00000016c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x7fffffff}, &(0x7f00000002c0)=0x2, &(0x7f0000000340)=0x10001, 0x0, 0x1, 0x81ed, 0x8, 0x1, 0x6}}], 0x58, 0x805}, 0x404c014) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) openat$zero(0xffffff9c, &(0x7f0000000300), 0x204400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 1m9.758343626s ago: executing program 4 (id=1470): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x40, &(0x7f0000000040)={0x9, 0x800, 0x2, 0x300, 0x0, 0x10000000, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0xf2, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x13f) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 1m8.368241082s ago: executing program 4 (id=1474): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r0, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = accept4(r0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a80)={r4, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) 1m7.841640744s ago: executing program 1 (id=1476): gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000500)) 1m7.512205558s ago: executing program 4 (id=1477): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x17b1, &(0x7f0000000100)={0x0, 0xe7b5, 0x80, 0x20011, 0x1}) r4 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xb, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x48}}, 0x800) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @multicast}) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) 1m6.958920247s ago: executing program 4 (id=1479): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x8840) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0xfffffff0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1m6.743853538s ago: executing program 33 (id=1479): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x8840) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0xfffffff0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1m6.660126652s ago: executing program 1 (id=1482): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1m6.145424387s ago: executing program 1 (id=1484): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x210, 0xc34, 0xf62, 0x94e]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x8, 0x2002, 0x145, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp={0x8, 0xe00}, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000014c0)={0xc, {"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", 0x1000}}, 0x1006) 1m5.135133368s ago: executing program 1 (id=1486): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r0, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = accept4(r0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a80)={r4, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) 1m4.476181477s ago: executing program 1 (id=1487): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000000100)='autofs\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000180000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="ec070000", @ANYRES16=r5, @ANYBLOB="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"/2022], 0x7ec}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 1m0.640112518s ago: executing program 1 (id=1491): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139434789e872e11a7ecc92e1426e277ff43c5c6c6eef75520000"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/216, 0xd8}], 0x1, &(0x7f00000016c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x7fffffff}, &(0x7f00000002c0)=0x2, &(0x7f0000000340)=0x10001, 0x0, 0x1, 0x81ed, 0x8, 0x1, 0x6}}], 0x58, 0x805}, 0x404c014) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) openat$zero(0xffffff9c, &(0x7f0000000300), 0x204400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 1m0.455703867s ago: executing program 34 (id=1491): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139434789e872e11a7ecc92e1426e277ff43c5c6c6eef75520000"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/216, 0xd8}], 0x1, &(0x7f00000016c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x7fffffff}, &(0x7f00000002c0)=0x2, &(0x7f0000000340)=0x10001, 0x0, 0x1, 0x81ed, 0x8, 0x1, 0x6}}], 0x58, 0x805}, 0x404c014) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) openat$zero(0xffffff9c, &(0x7f0000000300), 0x204400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 51.231294942s ago: executing program 5 (id=1510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}}, 0x0) io_uring_setup(0x1b7b, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_open_dev$video(0x0, 0x1d24, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0xd85, 0x1, 0x2, 0x0, 0x1}) mremap(&(0x7f000081e000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 49.748299285s ago: executing program 3 (id=1516): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 49.258598719s ago: executing program 3 (id=1518): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 48.192548405s ago: executing program 3 (id=1520): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/events/sched/sched_switch/enable\x00', 0x1, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, 0x0, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./my_tracefs/tracing_on\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000700)={0x0, 0xc350}, 0x10) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/16, 0x10}], 0x1}, 0xffffffff) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)='debugfs\x00', &(0x7f00000000c0)='./my_tracefs\x00', r0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000100)='debugfs\x00', 0x2008011, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000840)={@id={0x2, 0x0, @d}, 0x40, 0x0, '\x00', @a}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x3000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe4) r5 = openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x141280, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@filename='./cgroup\x00', r4, &(0x7f0000000540)={0x286, 0x8000000000000000, 0xff, 0x80000001, 0x4, 0x661fcb3e, 0xff, 0xfffffffffffffff0, 0x9f}) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) 48.049310339s ago: executing program 3 (id=1521): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r0, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = accept4(r0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a80)={r4, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) 46.760888215s ago: executing program 3 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xe0, 0x5, 0x5, 0x1, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x5, 0xfffffffd, 0x8000, 0x4, 0x0, 0x0, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000080)={0x0, 0xc46, 0x2}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000540)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x800448d2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x400000008, {0x5, 0x5, 0xfffffffffffffffd, 0x4000000000004, 0x1187, 0x81, {0x2, 0x6, 0x8, 0x9, 0x7, 0xbefd, 0x8, 0x1000006, 0x2008, 0x6000, 0xe44, 0x0, 0x0, 0x7, 0x61}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 46.422222805s ago: executing program 5 (id=1525): gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() msgsnd(0x0, 0x0, 0x0, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) 45.826850128s ago: executing program 5 (id=1526): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 45.626395248s ago: executing program 3 (id=1528): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffc"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 45.490850393s ago: executing program 35 (id=1528): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffc"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 45.194606556s ago: executing program 5 (id=1531): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r0, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = accept4(r0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a80)={r4, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) 44.066942991s ago: executing program 5 (id=1532): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = msgget$private(0x0, 0x6c2) msgsnd(r1, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000500)) 43.471320225s ago: executing program 5 (id=1534): creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 43.390853321s ago: executing program 36 (id=1534): creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 37.768535481s ago: executing program 7 (id=1535): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 37.117810027s ago: executing program 7 (id=1547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = eventfd2(0xffffffff, 0x1) write$eventfd(r1, &(0x7f0000000080)=0xffffffff00000000, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) write$dsp(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) r7 = socket$kcm(0x10, 0x100000000002, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x15, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x6c, 0x0, @multicast2, @private=0xa010100, {[@timestamp={0x44, 0x10, 0x2f, 0x0, 0x3, [0xe3d, 0x5, 0x9]}, @rr={0x7, 0x17, 0xb7, [@dev={0xac, 0x14, 0x14, 0x32}, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x4, 0x40, 0x3, 0x4}, @timestamp={0x44, 0x10, 0x85, 0x0, 0x0, [0x9, 0x3, 0x0]}, @timestamp={0x44, 0x4, 0x14, 0x0, 0xc}]}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getrandom(&(0x7f00000000c0)=""/260, 0xfe35, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000009c0), 0x5b0, r6}, 0x38) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 34.040745178s ago: executing program 7 (id=1550): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r0, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = accept4(r0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a80)={r4, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) 32.24613528s ago: executing program 7 (id=1555): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r2 = syz_open_dev$evdev(0x0, 0x3214, 0x0) syz_usb_disconnect(r2) ioctl$EVIOCRMFF(r2, 0x40045506, 0x0) openat$mice(0xffffff9c, &(0x7f00000000c0), 0x4a4400) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 31.690639125s ago: executing program 7 (id=1562): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 31.465554319s ago: executing program 37 (id=1562): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 11.91756681s ago: executing program 9 (id=1614): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_open_procfs(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@appraise}, {@smackfsfloor}, {@measure}, {@permit_directio}, {@permit_directio}, {@fsname={'fsname', 0x3d, '9p\x00'}}]}}) 10.832911063s ago: executing program 9 (id=1616): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb73e}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 9.250817063s ago: executing program 9 (id=1622): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0xe000200c}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) setresuid(0x0, 0x0, 0xee00) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x800080, &(0x7f0000003ec0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x30}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x37, 0x35, 0x31, 0x38, 0x54, 0x35, 0x63], 0x2d, [0x62, 0x30, 0x63, 0x61], 0x2d, [0x61, 0x63, 0x39, 0x30], 0x2d, [0x66, 0x31, 0x64, 0x3e3e2754cfc43f6a], 0x2d, [0x30, 0x35, 0x30, 0x64, 0x56, 0x33, 0x36, 0x33]}}}]}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}}) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) 9.219034729s ago: executing program 2 (id=1623): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb73e}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 8.710950547s ago: executing program 2 (id=1624): gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() msgsnd(0x0, 0x0, 0x0, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0}, 0x58) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) 7.820841053s ago: executing program 8 (id=1626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_open_procfs(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@appraise}, {@smackfsfloor}, {@measure}, {@permit_directio}, {@permit_directio}, {@fsname={'fsname', 0x3d, '9p\x00'}}]}}) 7.820111485s ago: executing program 9 (id=1628): gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000500)) 7.631008184s ago: executing program 2 (id=1629): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') 7.370846951s ago: executing program 6 (id=1630): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) close(0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000180)={0x6, 'pimreg1\x00', {0x1ff}, 0x3}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}], 0x1, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000100), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000d0}, 0x24004804) 6.839827724s ago: executing program 6 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) socket$unix(0x1, 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="05000000810d000003000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300006001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x3f, &(0x7f0000000080)=0x1, 0x4) 6.602449729s ago: executing program 8 (id=1632): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb73e}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 6.365514618s ago: executing program 9 (id=1633): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) 6.161210073s ago: executing program 2 (id=1634): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000"], &(0x7f0000001540)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x2}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x1, 0x1ff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) poll(&(0x7f0000000140), 0x0, 0xe6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r6, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) socket(0x200000000000011, 0x2, 0x0) 5.843543806s ago: executing program 6 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x2ed1, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000000240)="c7", 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9d, 0x7}, 0xc) sendfile(r4, r3, 0x0, 0x3ffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x4c}}, 0x88d1) sendfile(r4, r3, 0x0, 0x7ffff000) 4.290622837s ago: executing program 9 (id=1636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r12, 0x560a, &(0x7f0000000180)={0x7, 0xa5, 0x4, 0x2, 0x7, 0x2}) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r13, r11, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r5}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x20, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r13, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x2, 0xb55, 0x0, 0x0}}, &(0x7f0000001fc0)) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000000080)={0x2c, r14, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}}, 0x40) 3.991206923s ago: executing program 8 (id=1637): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400010000000900020073797a32000000000500050002000005050001000600000013000300686173683a6e65742c696661636500"], 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000030601020000180000000000020000060900020073797a32000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4845}, 0x200408f0) fcntl$lock(r5, 0x26, &(0x7f0000000200)={0x2, 0x4, 0x0, 0x100000000000000}) r6 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x980, 0xa0) getpgrp(0x0) fcntl$lock(r1, 0x25, 0x0) fcntl$setpipe(r6, 0x407, 0xffffffff) poll(&(0x7f0000000140)=[{r4, 0x2cfc08c20dafc34e}, {r2, 0xf102}], 0x2, 0x8000007) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0), 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x2044801) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x68e7, 0x89, 0x7fffffff, 0x0, 0x14, "1b10b9ad000000aacd86279300"}) 3.897141193s ago: executing program 6 (id=1638): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb73e}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 3.792942952s ago: executing program 2 (id=1639): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0xe) 2.866924581s ago: executing program 8 (id=1640): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1ac, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x7b}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3dc) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.866372798s ago: executing program 6 (id=1641): gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000500)) 1.857611606s ago: executing program 8 (id=1642): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000540)="27031d0016001400020090a9569ab554af26c84b55a17960da4b751c72209d8d92101fbe8819695f39867806cea726aa21896d87f0ccac96985ba0dbaa84b2bc8dfab0a727c61391a353", 0x4a}], 0x1}, 0x400c0c8) syz_open_procfs(r0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f000001cd00)=""/102400, 0x19000) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e24, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000010ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x17d, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000080)=0x8) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) 567.796891ms ago: executing program 8 (id=1643): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) 423.040515ms ago: executing program 2 (id=1644): openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x20, r7, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x840) r8 = open(&(0x7f0000000040)='./file0\x00', 0x200a00, 0x24) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r9, 0xc00, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004054}, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 6 (id=1645): syz_extract_tcp_res(&(0x7f0000000040), 0x1d2a09bf, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb73e}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @remote, @loopback, 0x235, 0xfffb, 0x4594, 0x100, 0x4, 0x8606009e, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000000)) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) kernel console output (not intermixed with test programs): cuous mode [ 486.464122][T11824] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.580984][T11824] bond0: (slave bond_slave_0): Releasing backup interface [ 486.595817][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 486.609399][T11824] bond0: (slave bond_slave_1): Releasing backup interface [ 486.629974][T11824] team0: Port device team_slave_0 removed [ 486.634155][T11780] vhci_hcd: connection reset by peer [ 486.641639][ T13] vhci_hcd vhci_hcd.1: stop threads [ 486.643918][ T13] vhci_hcd vhci_hcd.1: release socket [ 486.646678][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 486.657019][T11824] team0: Port device team_slave_1 removed [ 486.668260][T11824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.695714][T11824] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.864558][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 487.086587][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 487.145614][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 487.338328][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 488.166494][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 488.739744][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 488.949237][ T42] audit: type=1326 audit(1785634795.353:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.1.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 488.965335][ T42] audit: type=1326 audit(1785634795.363:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.1.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 488.979322][ T42] audit: type=1326 audit(1785634795.363:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.1.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704efec code=0x7ffc0000 [ 488.991327][ T42] audit: type=1326 audit(1785634795.363:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.1.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 489.004595][ T42] audit: type=1326 audit(1785634795.403:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.1.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704efec code=0x7ffc0000 [ 489.243016][T10899] usb 40-1: device descriptor read/8, error -110 [ 489.711515][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1184'. [ 489.784561][T10899] usb usb40-port1: attempt power cycle [ 490.260762][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 490.422790][T10899] usb usb40-port1: unable to enumerate USB device [ 490.494073][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'. [ 490.969771][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 491.297035][T11970] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 491.299804][T11970] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 491.307442][T11970] vhci_hcd vhci_hcd.0: Device attached [ 491.558897][T11980] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 491.571604][T10899] usb 44-1: SetAddress Request (10) to port 0 [ 491.575333][T10899] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 491.579481][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 491.729770][T11970] geneve3: entered allmulticast mode [ 492.098447][T11971] vhci_hcd: connection reset by peer [ 492.100977][ T13] vhci_hcd vhci_hcd.3: stop threads [ 492.102740][ T13] vhci_hcd vhci_hcd.3: release socket [ 492.106028][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 492.137867][T11911] Set syz1 is full, maxelem 65536 reached [ 492.334001][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 492.558325][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 492.616038][T12004] netlink: 'syz.1.1195': attribute type 8 has an invalid length. [ 492.879247][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 493.509544][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 493.700160][T12034] bond2: (slave .`): Releasing backup interface [ 493.823439][T12034] bridge_slave_0: left allmulticast mode [ 493.833130][T12034] bridge_slave_0: left promiscuous mode [ 493.837769][T12034] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.913340][T12034] bridge_slave_1: left allmulticast mode [ 493.916929][T12034] bridge_slave_1: left promiscuous mode [ 493.919717][T12034] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.933503][T12033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 493.936301][T12033] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.943813][T12033] vhci_hcd vhci_hcd.0: Device attached [ 494.002576][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 494.077162][T12034] .`: (slave bond_slave_0): Releasing backup interface [ 494.125914][T12034] .`: (slave bond_slave_1): Releasing backup interface [ 494.211516][T10715] usb 38-1: SetAddress Request (15) to port 0 [ 494.213530][T10715] usb 38-1: new SuperSpeed USB device number 15 using vhci_hcd [ 494.228419][T12034] team0: Port device team_slave_0 removed [ 494.245018][T12034] team0: Port device team_slave_1 removed [ 494.251703][T12034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.273059][T12034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 495.004540][T12075] __nla_validate_parse: 1 callbacks suppressed [ 495.004558][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 495.008472][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 495.631701][T12044] vhci_hcd: connection reset by peer [ 495.633715][ T13] vhci_hcd vhci_hcd.0: stop threads [ 495.635406][ T13] vhci_hcd vhci_hcd.0: release socket [ 495.637369][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 496.365802][T12101] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 496.367901][T12101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 496.425827][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 496.463881][T12101] vhci_hcd vhci_hcd.0: Device attached [ 496.681667][T10899] usb 44-1: device descriptor read/8, error -110 [ 496.735478][T12101] geneve3: entered allmulticast mode [ 496.761474][ T1045] usb 40-1: SetAddress Request (14) to port 0 [ 496.763500][ T1045] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 497.098928][T10899] usb usb44-port1: attempt power cycle [ 497.420430][T12102] vhci_hcd: connection reset by peer [ 497.426450][ T13] vhci_hcd vhci_hcd.1: stop threads [ 497.428831][ T13] vhci_hcd vhci_hcd.1: release socket [ 497.431194][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 497.658187][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 497.673763][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 497.702580][T10899] usb usb44-port1: unable to enumerate USB device [ 498.081060][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 498.831785][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 499.321526][T10715] usb 38-1: device descriptor read/8, error -110 [ 500.261423][T10715] usb usb38-port1: attempt power cycle [ 500.478375][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 500.824518][T10715] usb usb38-port1: unable to enumerate USB device [ 500.951525][ T50] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 500.978725][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 501.004152][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.006900][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.101494][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 501.105469][ T50] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 501.109162][ T50] usb 8-1: config 179 has no interface number 0 [ 501.111727][ T50] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 501.116071][ T50] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 501.119738][ T50] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 501.123315][ T50] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 501.127816][ T50] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 501.133138][ T50] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 501.136778][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.144147][T12185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 501.220226][T12198] bridge_slave_0: left allmulticast mode [ 501.224570][T12198] bridge_slave_0: left promiscuous mode [ 501.229201][T12198] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.244848][T12198] bridge_slave_1: left allmulticast mode [ 501.246829][T12198] bridge_slave_1: left promiscuous mode [ 501.249700][T12198] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.264057][T12198] bond0: (slave bond_slave_0): Releasing backup interface [ 501.279504][T12198] bond0: (slave bond_slave_1): Releasing backup interface [ 501.344577][T12198] team0: Port device team_slave_0 removed [ 501.359258][T12198] team0: Port device team_slave_1 removed [ 501.363818][T12198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.373521][T12198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.485025][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 501.570556][T12185] syzkaller1: entered promiscuous mode [ 501.576919][T12185] syzkaller1: entered allmulticast mode [ 501.610670][T12185] wg2 speed is unknown, defaulting to 1000 [ 501.870573][ T1045] usb 40-1: device descriptor read/8, error -110 [ 501.964088][ T8543] usb 8-1: USB disconnect, device number 24 [ 501.964117][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 501.966620][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 502.435496][ T1045] usb usb40-port1: attempt power cycle [ 502.689311][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 503.002805][ T1045] usb usb40-port1: unable to enumerate USB device [ 503.884705][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 504.013006][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1246'. [ 504.320343][T12254] CIFS: Attempting to mount //127.0.0.1/share [ 504.335191][T12254] CIFS: VFS: Error connecting to socket. Aborting operation. [ 504.339332][T12254] CIFS: VFS: cifs_mount failed w/return code = -4 [ 504.380057][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 506.091514][ T5826] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 506.241486][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 506.245242][ T5826] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 506.248827][ T5826] usb 6-1: config 179 has no interface number 0 [ 506.251748][ T5826] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 506.256627][ T5826] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 506.261196][ T5826] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 506.266039][ T5826] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 506.270713][ T5826] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 506.277787][ T5826] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 506.290757][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.297798][T12270] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.753068][T12270] syzkaller1: entered promiscuous mode [ 506.755658][T12270] syzkaller1: entered allmulticast mode [ 506.809799][T12270] wg2 speed is unknown, defaulting to 1000 [ 507.238094][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 507.382934][ T8543] usb 6-1: USB disconnect, device number 18 [ 507.383008][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 507.388494][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 507.410644][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1254'. [ 507.650141][ T42] audit: type=1326 audit(1785634814.063:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.3.1255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 507.667324][ T42] audit: type=1326 audit(1785634814.063:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.3.1255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 507.688009][ T42] audit: type=1326 audit(1785634814.073:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.3.1255" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 507.702646][ T42] audit: type=1326 audit(1785634814.073:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.3.1255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 507.717894][ T42] audit: type=1326 audit(1785634814.073:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.3.1255" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 509.071624][T12320] comedi comedi2: dt2814: I/O base address or length out of range [ 509.230215][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1262'. [ 509.238696][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1262'. [ 509.414351][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 509.956561][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 510.759544][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 512.131924][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1277'. [ 512.135483][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1277'. [ 512.245950][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 512.361930][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 512.446853][T12388] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 512.449003][T12388] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 512.474641][T12388] vhci_hcd vhci_hcd.0: Device attached [ 512.597761][T12388] geneve3: entered allmulticast mode [ 512.761500][ T1045] usb 38-1: SetAddress Request (19) to port 0 [ 512.763727][ T1045] usb 38-1: new SuperSpeed USB device number 19 using vhci_hcd [ 512.990725][T12389] vhci_hcd: connection reset by peer [ 512.993156][ T13] vhci_hcd vhci_hcd.0: stop threads [ 512.995708][ T13] vhci_hcd vhci_hcd.0: release socket [ 512.998446][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 513.723709][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 514.737015][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 515.668662][ T5826] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 515.871516][ T5826] usb 8-1: Using ep0 maxpacket: 8 [ 515.909858][T12418] wg2 speed is unknown, defaulting to 1000 [ 516.503545][ T5826] usb 8-1: unable to get BOS descriptor or descriptor too short [ 516.511780][ T5826] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 516.515154][T12434] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 516.519416][ T5826] usb 8-1: can't read configurations, error -71 [ 518.212095][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 518.448330][ T1045] usb 38-1: device descriptor read/8, error -110 [ 518.567541][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 518.842467][ T1045] usb usb38-port1: attempt power cycle [ 519.019691][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 519.412255][ T1045] usb usb38-port1: unable to enumerate USB device [ 519.414310][ T42] audit: type=1326 audit(1785634825.823:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12487 comm="syz.0.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 519.414357][ T42] audit: type=1326 audit(1785634825.823:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12487 comm="syz.0.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 519.414393][ T42] audit: type=1326 audit(1785634825.823:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12487 comm="syz.0.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 519.432758][ T42] audit: type=1326 audit(1785634825.833:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12487 comm="syz.0.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 519.486150][ T42] audit: type=1326 audit(1785634825.883:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12487 comm="syz.0.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 519.781705][T12479] CIFS: Attempting to mount //127.0.0.1/share [ 519.782541][T12479] CIFS: VFS: Error connecting to socket. Aborting operation. [ 519.782565][T12479] CIFS: VFS: cifs_mount failed w/return code = -4 [ 519.871750][ T8543] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 520.021469][ T8543] usb 7-1: Using ep0 maxpacket: 8 [ 520.023174][ T8543] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 520.023201][ T8543] usb 7-1: config 179 has no interface number 0 [ 520.023234][ T8543] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 520.023257][ T8543] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 520.023279][ T8543] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.023301][ T8543] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 520.023323][ T8543] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 520.023356][ T8543] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 520.023375][ T8543] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.040892][T12493] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.571422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 520.706980][T12503] syzkaller1: entered promiscuous mode [ 520.741637][T12503] syzkaller1: entered allmulticast mode [ 520.819097][T12507] wg2 speed is unknown, defaulting to 1000 [ 521.708598][T10896] usb 7-1: USB disconnect, device number 7 [ 521.708643][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 521.713710][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 521.905471][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 522.146443][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 522.154019][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 522.593173][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 523.632311][ T5757] Bluetooth: hci3: unexpected event for opcode 0x201c [ 524.022972][T12563] x_tables: duplicate underflow at hook 1 [ 524.082461][T12563] hub 8-0:1.0: USB hub found [ 524.089534][T12563] hub 8-0:1.0: 1 port detected [ 524.139628][T12567] capability: warning: `syz.3.1310' uses 32-bit capabilities (legacy support in use) [ 525.124549][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 525.560084][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'. [ 525.874532][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 526.079756][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 526.327028][T12611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1319'. [ 526.327322][T12611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1319'. [ 527.031651][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 527.852989][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 528.800460][ T5757] Bluetooth: hci1: unexpected event for opcode 0x201c [ 528.952575][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'. [ 529.097845][T12646] x_tables: duplicate underflow at hook 1 [ 529.213928][T12646] hub 8-0:1.0: USB hub found [ 529.221012][T12646] hub 8-0:1.0: 1 port detected [ 529.308515][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 530.203979][T12682] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 530.552695][T12686] __nla_validate_parse: 2 callbacks suppressed [ 530.552708][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 531.255784][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 531.356402][ T42] audit: type=1326 audit(1785634837.773:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 531.367423][ T42] audit: type=1326 audit(1785634837.793:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 531.380819][ T42] audit: type=1326 audit(1785634837.803:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf704efec code=0x7ffc0000 [ 531.474038][ T42] audit: type=1326 audit(1785634837.893:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 531.483234][ T42] audit: type=1326 audit(1785634837.893:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 531.492674][ T42] audit: type=1326 audit(1785634837.893:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 531.502014][T12711] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 531.504169][T12711] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 531.507609][T12711] vhci_hcd vhci_hcd.0: Device attached [ 531.691810][ T5826] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 531.751648][ T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 531.845563][ T5826] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 531.849605][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.853473][ T5826] usb 6-1: Product: syz [ 531.855312][ T5826] usb 6-1: Manufacturer: syz [ 531.857335][ T5826] usb 6-1: SerialNumber: syz [ 531.872597][ T1045] usb 44-1: SetAddress Request (14) to port 0 [ 531.874593][ T1045] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 531.904451][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 531.967666][ T5826] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 532.000966][T12718] wg2 speed is unknown, defaulting to 1000 [ 532.192629][ T42] audit: type=1326 audit(1785634838.613:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 532.204800][ T42] audit: type=1326 audit(1785634838.613:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71873eb code=0x7ffc0000 [ 532.237978][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 532.242920][ T50] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 532.243281][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 532.246762][ T50] usb 7-1: can't read configurations, error -71 [ 532.393199][ T42] audit: type=1326 audit(1785634838.813:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 532.402771][ T42] audit: type=1326 audit(1785634838.813:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.1.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 532.452449][T12708] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 532.458265][T12708] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 532.498850][T12708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.511635][T12708] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 532.543196][T12708] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 532.545202][T12708] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 532.550608][T12708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 532.561771][T12708] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 532.616580][ T24] usb 6-1: USB disconnect, device number 19 [ 532.675528][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 533.031659][ T5826] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 533.038977][T12715] vhci_hcd: connection reset by peer [ 533.043245][ T13] vhci_hcd vhci_hcd.3: stop threads [ 533.045339][ T13] vhci_hcd vhci_hcd.3: release socket [ 533.047195][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 533.117918][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'. [ 533.124163][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'. [ 533.520529][ T5826] ath9k_htc: Failed to initialize the device [ 533.797289][T12741] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 533.803096][T12741] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 534.249657][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 534.522201][ T5757] Bluetooth: hci1: command 0x0406 tx timeout [ 534.525040][ T5757] Bluetooth: hci0: command 0x0406 tx timeout [ 534.578070][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 534.601760][T12755] Bluetooth: hci3: command 0x0406 tx timeout [ 534.604370][ T5748] Bluetooth: hci2: command 0x0406 tx timeout [ 534.687093][T12759] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 534.798451][T12759] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 534.804685][T12759] overlayfs: failed to look up (tracing) for ino (-66) [ 535.868359][T12765] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 535.868359][T12765] Please contact the netfilter-devel mailing list or update your nftables rules. [ 536.661533][T12755] Bluetooth: hci0: command 0x0406 tx timeout [ 536.664141][T12755] Bluetooth: hci1: command 0x0406 tx timeout [ 536.681560][T12755] Bluetooth: hci3: command 0x0406 tx timeout [ 536.684247][T12755] Bluetooth: hci2: command 0x0406 tx timeout [ 536.921667][ T1045] usb 44-1: device descriptor read/8, error -110 [ 537.029475][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 537.322578][ T1045] usb usb44-port1: attempt power cycle [ 537.915523][ T1045] usb usb44-port1: unable to enumerate USB device [ 537.957465][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 538.283330][T12802] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 538.596485][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 539.178742][T12796] syz.3.1352: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 539.192478][T12796] CPU: 1 UID: 0 PID: 12796 Comm: syz.3.1352 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.192521][T12796] Tainted: [L]=SOFTLOCKUP [ 539.192528][T12796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 539.192537][T12796] Call Trace: [ 539.192543][T12796] [ 539.192549][T12796] dump_stack_lvl+0x100/0x190 [ 539.192656][T12796] warn_alloc.cold+0x94/0xa8 [ 539.192687][T12796] ? __pfx_warn_alloc+0x10/0x10 [ 539.192747][T12796] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 539.192865][T12796] ? __pfx_get_page_from_freelist+0x10/0x10 [ 539.192894][T12796] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 539.192921][T12796] ? __lock_acquire+0x49f/0x1a40 [ 539.192986][T12796] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 539.193027][T12796] ? find_held_lock+0x2b/0x80 [ 539.193049][T12796] ? __free_frozen_pages+0x747/0x1090 [ 539.193079][T12796] ? __free_frozen_pages+0x747/0x1090 [ 539.193110][T12796] ? do_raw_spin_unlock+0x145/0x1e0 [ 539.193132][T12796] ? _raw_spin_unlock+0x28/0x50 [ 539.193156][T12796] ? irqentry_exit+0x24d/0xa00 [ 539.193193][T12796] __folio_alloc_noprof+0x13/0x260 [ 539.193214][T12796] alloc_migration_target+0x1d7/0x6d0 [ 539.193255][T12796] migrate_pages_batch+0x5dc/0x45c0 [ 539.193286][T12796] ? __pfx_alloc_migration_target+0x10/0x10 [ 539.193319][T12796] ? migrate_pages_sync+0x12c/0x880 [ 539.193347][T12796] ? migrate_pages_sync+0x588/0x880 [ 539.193374][T12796] ? __pfx_migrate_pages_batch+0x10/0x10 [ 539.193408][T12796] ? __pfx_migrate_pages_sync+0x10/0x10 [ 539.193442][T12796] ? __lock_acquire+0x49f/0x1a40 [ 539.193469][T12796] ? __css_rstat_updated+0x1ce/0x5a0 [ 539.193511][T12796] migrate_pages+0x1950/0x2850 [ 539.193541][T12796] ? __lock_acquire+0x49f/0x1a40 [ 539.193570][T12796] ? __pfx_alloc_migration_target+0x10/0x10 [ 539.193608][T12796] ? __pfx_migrate_pages+0x10/0x10 [ 539.193642][T12796] ? __lock_acquire+0x49f/0x1a40 [ 539.193672][T12796] ? mtree_load+0x32d/0xa90 [ 539.193712][T12796] move_pages_and_store_status+0xf1/0x230 [ 539.193744][T12796] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 539.193783][T12796] kernel_move_pages+0xc89/0x14a0 [ 539.193821][T12796] ? __pfx_kernel_move_pages+0x10/0x10 [ 539.193857][T12796] ? xfd_validate_state+0x129/0x190 [ 539.193903][T12796] __ia32_sys_move_pages+0xdd/0x1b0 [ 539.193933][T12796] ? __do_fast_syscall_32+0x98/0x970 [ 539.193960][T12796] ? lockdep_hardirqs_on+0x78/0x100 [ 539.193982][T12796] __do_fast_syscall_32+0xe7/0x970 [ 539.194011][T12796] do_fast_syscall_32+0x32/0x70 [ 539.194037][T12796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.194061][T12796] RIP: 0023:0xf7f32fec [ 539.194082][T12796] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 539.194089][T12796] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 539.194106][T12796] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 539.194117][T12796] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 539.194128][T12796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.194138][T12796] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 539.194148][T12796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.194171][T12796] [ 539.363791][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1359'. [ 539.382836][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1359'. [ 539.400050][T12819] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 539.441817][T12796] Mem-Info: [ 539.443227][T12796] active_anon:8567 inactive_anon:28938 isolated_anon:2 [ 539.443227][T12796] active_file:15034 inactive_file:7097 isolated_file:0 [ 539.443227][T12796] unevictable:1768 dirty:611 writeback:0 [ 539.443227][T12796] slab_reclaimable:7860 slab_unreclaimable:58788 [ 539.443227][T12796] mapped:24398 shmem:33430 pagetables:1122 [ 539.443227][T12796] sec_pagetables:315 bounce:0 [ 539.443227][T12796] kernel_misc_reclaimable:0 [ 539.443227][T12796] free:44351 free_pcp:1217 free_cma:0 [ 539.463826][T12796] Node 0 active_anon:504kB inactive_anon:10836kB active_file:20kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:12872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7904kB pagetables:1224kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 539.522586][T12796] Node 1 active_anon:34096kB inactive_anon:104916kB active_file:60116kB inactive_file:28388kB unevictable:5536kB isolated(anon):4kB isolated(file):0kB mapped:97944kB dirty:2444kB writeback:0kB shmem:120848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6224kB pagetables:3252kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 539.551982][T12796] Node 0 DMA free:2264kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.636839][T12796] lowmem_reserve[]: 0 280 280 280 280 [ 539.645557][T12796] Node 0 DMA32 free:19512kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:504kB inactive_anon:10464kB active_file:20kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:1136kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.698237][T12796] lowmem_reserve[]: 0 0 0 0 0 [ 539.701878][T12796] Node 1 DMA32 free:153404kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34600kB inactive_anon:104916kB active_file:60116kB inactive_file:28388kB unevictable:5536kB writepending:2444kB zspages:5496kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:6260kB local_pcp:1128kB free_cma:0kB [ 539.772549][T12796] lowmem_reserve[]: 0 0 0 0 0 [ 539.780997][T12796] Node 0 DMA: 132*4kB (U) 15*8kB (U) 3*16kB (U) 13*32kB (U) 6*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2264kB [ 539.788147][T12796] Node 0 DMA32: 630*4kB (UME) 96*8kB (UME) 40*16kB (UME) 203*32kB (UME) 38*64kB (UME) 10*128kB (UM) 5*256kB (UM) 0*512kB 4*1024kB (M) 0*2048kB 0*4096kB = 19512kB [ 539.801754][T12796] Node 1 DMA32: 913*4kB (UME) 1660*8kB (UME) 1083*16kB (UME) 682*32kB (UME) 258*64kB (UME) 122*128kB (UME) 29*256kB (UME) 37*512kB (UM) 16*1024kB (M) 5*2048kB (UM) 3*4096kB (U) = 153492kB [ 539.814885][T12796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.822610][T12796] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 539.834170][T12796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.838280][T12796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.843000][T12796] 56009 total pagecache pages [ 539.846033][T12796] 450 pages in swap cache [ 539.848016][T12796] Free swap = 12376kB [ 539.849904][T12796] Total swap = 124996kB [ 539.851872][T12796] 524155 pages RAM [ 539.853767][T12796] 0 pages HighMem/MovableOnly [ 539.856374][T12796] 211540 pages reserved [ 539.858211][T12796] 0 pages cma reserved [ 540.034894][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1360'. [ 540.046819][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1360'. [ 540.411505][T10896] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 540.591593][T10896] usb 6-1: Using ep0 maxpacket: 8 [ 540.619458][T12831] wg2 speed is unknown, defaulting to 1000 [ 540.926981][T10896] usb 6-1: unable to get BOS descriptor or descriptor too short [ 540.930332][T10896] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 540.932811][T10896] usb 6-1: can't read configurations, error -71 [ 541.664843][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'. [ 542.044043][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 542.757210][T12863] 9pnet_virtio: no channels available for device syz [ 542.820646][T12864] comedi comedi2: dt2814: I/O base address or length out of range [ 543.121843][T12863] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 543.165371][T12869] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 543.915524][T12874] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 545.015651][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 545.052367][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'. [ 545.790746][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 546.770206][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 547.231257][T12924] comedi comedi2: dt2814: I/O base address or length out of range [ 548.241683][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 548.310468][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 548.611598][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 549.075823][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 549.384854][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 550.918542][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 550.966475][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 551.195617][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1399'. [ 551.199484][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1399'. [ 551.830514][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 552.594354][T13056] wg2 speed is unknown, defaulting to 1000 [ 553.287657][T13075] __nla_validate_parse: 2 callbacks suppressed [ 553.287693][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 553.295857][ C3] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 553.299075][ C3] sr 2:0:0:0: [sr0] tag#10 CDB: Test Unit Ready [ 553.561138][T13066] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 554.387052][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1410'. [ 554.623935][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 554.932543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 556.119301][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 556.525774][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 557.869320][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 560.109614][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 560.162477][T13179] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 560.208643][T13179] bond0: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 560.213792][T13179] bond0: (slave ip6gre0): Error -95 calling set_mac_address [ 560.441519][ T5826] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 561.091490][ T5826] usb 8-1: Using ep0 maxpacket: 8 [ 561.093376][ T5826] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 561.093400][ T5826] usb 8-1: config 0 has no interface number 0 [ 561.093432][ T5826] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 561.093451][ T5826] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 561.093472][ T5826] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 561.093493][ T5826] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 561.093525][ T5826] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 561.093544][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.096197][ T5826] usb 8-1: config 0 descriptor?? [ 561.121169][ T5826] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 561.924415][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 562.175520][T13211] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 562.226750][T13211] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 562.230016][T13211] overlayfs: failed to look up (tracing) for ino (-66) [ 562.444719][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.446717][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.376509][T10896] usb 8-1: USB disconnect, device number 27 [ 564.415117][T10896] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 564.619187][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 565.014003][T13213] 9pnet_virtio: no channels available for device syz [ 565.025044][T13213] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 565.384892][ T5792] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.581875][ T5792] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.647114][ T5792] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.733373][ T5792] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.737362][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 565.922927][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 566.477441][ T5792] bond0 (unregistering): Released all slaves [ 566.496824][ T5792] bond1 (unregistering): Released all slaves [ 566.514800][ T5792] bond2 (unregistering): Released all slaves [ 566.528068][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 566.688918][T12755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 566.702646][T12755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 566.710747][T12755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 566.728052][T12755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 566.759126][T12755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.821518][T10896] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 566.892343][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 566.993862][T10896] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 567.003282][T10896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.012471][T10896] usb 6-1: Product: syz [ 567.013954][T10896] usb 6-1: Manufacturer: syz [ 567.015498][T10896] usb 6-1: SerialNumber: syz [ 567.018340][T10896] usb 6-1: config 0 descriptor?? [ 567.338696][T13270] wg2 speed is unknown, defaulting to 1000 [ 567.341482][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 567.716707][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 568.149579][ T5792] hsr_slave_0: left promiscuous mode [ 568.159107][ T5792] hsr_slave_1: left promiscuous mode [ 568.515351][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 568.841926][ T5748] Bluetooth: hci3: command tx timeout [ 568.950714][T13270] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.953911][T13270] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.961325][T13270] bridge_slave_0: entered allmulticast mode [ 568.997855][T13270] bridge_slave_0: entered promiscuous mode [ 569.038449][T13270] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.045801][T13270] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.052959][T13270] bridge_slave_1: entered allmulticast mode [ 569.088008][T13270] bridge_slave_1: entered promiscuous mode [ 569.335501][T13270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.362090][T13270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.395998][T13270] team0: Port device team_slave_0 added [ 569.399172][T13270] team0: Port device team_slave_1 added [ 569.417706][T13270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.420469][T13270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.430140][T13270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.436394][T13270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.438629][T13270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.448305][T13270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.516586][T13270] hsr_slave_0: entered promiscuous mode [ 569.520486][T13270] hsr_slave_1: entered promiscuous mode [ 569.523797][T13270] debugfs: 'hsr0' already exists in 'hsr' [ 569.526540][T13270] Cannot create hsr debugfs directory [ 569.595166][ T8543] usb 6-1: USB disconnect, device number 22 [ 570.227562][T13270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 570.251773][T13270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.259516][T13270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 570.278356][T13270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.288237][T13270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 570.338530][T13270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.346567][T13270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 570.357681][T13270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.496528][T13270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.529498][T13270] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.571080][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.574188][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.587149][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.590235][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.931804][ T5748] Bluetooth: hci3: command tx timeout [ 571.100938][T13270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.446557][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'. [ 571.453695][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'. [ 571.490635][T13270] veth0_vlan: entered promiscuous mode [ 571.500501][T13270] veth1_vlan: entered promiscuous mode [ 571.533912][T13270] veth0_macvtap: entered promiscuous mode [ 571.540404][T13270] veth1_macvtap: entered promiscuous mode [ 571.555493][T13270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.575241][T13270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.612904][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.684082][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.693012][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.711523][ T5792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.743328][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.747699][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.761708][ T5792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.769247][ T5792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.435633][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 572.493177][T13398] syz.4.1447: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 572.499106][T13398] CPU: 3 UID: 0 PID: 13398 Comm: syz.4.1447 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.499138][T13398] Tainted: [L]=SOFTLOCKUP [ 572.499142][T13398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 572.499149][T13398] Call Trace: [ 572.499154][T13398] [ 572.499159][T13398] dump_stack_lvl+0x100/0x190 [ 572.499297][T13398] warn_alloc.cold+0x94/0xa8 [ 572.499319][T13398] ? __pfx_warn_alloc+0x10/0x10 [ 572.499359][T13398] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 572.499446][T13398] ? __pfx_get_page_from_freelist+0x10/0x10 [ 572.499463][T13398] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 572.499482][T13398] ? __lock_acquire+0x49f/0x1a40 [ 572.499523][T13398] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.499538][T13398] ? find_held_lock+0x2b/0x80 [ 572.499552][T13398] ? __free_frozen_pages+0x747/0x1090 [ 572.499570][T13398] ? __free_frozen_pages+0x747/0x1090 [ 572.499588][T13398] ? do_raw_spin_unlock+0x145/0x1e0 [ 572.499601][T13398] ? _raw_spin_unlock+0x28/0x50 [ 572.499615][T13398] ? irqentry_exit+0x24d/0xa00 [ 572.499637][T13398] __folio_alloc_noprof+0x13/0x260 [ 572.499650][T13398] alloc_migration_target+0x1d7/0x6d0 [ 572.499703][T13398] migrate_pages_batch+0x5dc/0x45c0 [ 572.499722][T13398] ? __pfx_alloc_migration_target+0x10/0x10 [ 572.499742][T13398] ? migrate_pages_sync+0x12c/0x880 [ 572.499759][T13398] ? migrate_pages_sync+0x588/0x880 [ 572.499775][T13398] ? __pfx_migrate_pages_batch+0x10/0x10 [ 572.499796][T13398] ? __pfx_migrate_pages_sync+0x10/0x10 [ 572.499816][T13398] ? __lock_acquire+0x49f/0x1a40 [ 572.499832][T13398] ? __css_rstat_updated+0x1ce/0x5a0 [ 572.499859][T13398] migrate_pages+0x1950/0x2850 [ 572.499878][T13398] ? __lock_acquire+0x49f/0x1a40 [ 572.499895][T13398] ? __pfx_alloc_migration_target+0x10/0x10 [ 572.499915][T13398] ? __pfx_migrate_pages+0x10/0x10 [ 572.499935][T13398] ? __lock_acquire+0x49f/0x1a40 [ 572.499954][T13398] ? mtree_load+0x32d/0xa90 [ 572.499983][T13398] move_pages_and_store_status+0xf1/0x230 [ 572.500002][T13398] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 572.500026][T13398] kernel_move_pages+0xc89/0x14a0 [ 572.500047][T13398] ? __pfx_kernel_move_pages+0x10/0x10 [ 572.500069][T13398] ? xfd_validate_state+0x129/0x190 [ 572.500099][T13398] __ia32_sys_move_pages+0xdd/0x1b0 [ 572.500117][T13398] ? __do_fast_syscall_32+0x98/0x970 [ 572.500146][T13398] ? lockdep_hardirqs_on+0x78/0x100 [ 572.500161][T13398] __do_fast_syscall_32+0xe7/0x970 [ 572.500178][T13398] do_fast_syscall_32+0x32/0x70 [ 572.500194][T13398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.500210][T13398] RIP: 0023:0xf6fdefec [ 572.500225][T13398] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 572.500229][T13398] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 572.500240][T13398] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 572.500247][T13398] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 572.500254][T13398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.500261][T13398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.500267][T13398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.500281][T13398] [ 572.500387][T13398] Mem-Info: [ 572.661446][T13398] active_anon:13073 inactive_anon:16883 isolated_anon:12 [ 572.661446][T13398] active_file:15231 inactive_file:8265 isolated_file:0 [ 572.661446][T13398] unevictable:1768 dirty:564 writeback:0 [ 572.661446][T13398] slab_reclaimable:7893 slab_unreclaimable:59310 [ 572.661446][T13398] mapped:24570 shmem:25059 pagetables:1182 [ 572.661446][T13398] sec_pagetables:316 bounce:0 [ 572.661446][T13398] kernel_misc_reclaimable:0 [ 572.661446][T13398] free:49483 free_pcp:666 free_cma:0 [ 572.801585][T13398] Node 0 active_anon:588kB inactive_anon:6008kB active_file:20kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:8128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7872kB pagetables:1224kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 572.815397][T13398] Node 1 active_anon:52520kB inactive_anon:61368kB active_file:60904kB inactive_file:33060kB unevictable:5536kB isolated(anon):96kB isolated(file):0kB mapped:102252kB dirty:2256kB writeback:0kB shmem:91952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6116kB pagetables:3504kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 572.861457][T13398] Node 0 DMA free:2408kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84kB inactive_anon:144kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.901541][T13398] lowmem_reserve[]: 0 280 280 280 280 [ 572.911794][T13398] Node 0 DMA32 free:26056kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:504kB inactive_anon:5760kB active_file:20kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:1136kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.961500][T13398] lowmem_reserve[]: 0 0 0 0 0 [ 572.981517][T13398] Node 1 DMA32 free:159008kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53820kB inactive_anon:61368kB active_file:60904kB inactive_file:33060kB unevictable:5536kB writepending:2256kB zspages:5032kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:11420kB local_pcp:7044kB free_cma:0kB [ 573.001714][T13398] lowmem_reserve[]: 0 0 0 0 0 [ 573.004034][T13398] Node 0 DMA: 132*4kB (U) 15*8kB (U) 4*16kB (U) 15*32kB (U) 5*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2408kB [ 573.012878][ T5748] Bluetooth: hci3: command tx timeout [ 573.021094][T13398] Node 0 DMA32: 716*4kB (UME) 126*8kB (UME) 47*16kB (UME) 236*32kB (UME) 46*64kB (UME) 20*128kB (UM) 13*256kB (UM) 2*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 26128kB [ 573.035842][T13398] Node 1 DMA32: 1086*4kB (UE) 719*8kB (UE) 557*16kB (UME) 381*32kB (UME) 216*64kB (UME) 119*128kB (UME) 59*256kB (ME) 45*512kB (UM) 29*1024kB (UM) 11*2048kB (M) 2*4096kB (UM) = 158816kB [ 573.052120][T13398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.056726][T13398] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 573.062971][T13398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.067330][T13398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 573.101531][T13398] 48881 total pagecache pages [ 573.120737][T13398] 268 pages in swap cache [ 573.133212][T13398] Free swap = 36316kB [ 573.143442][T13398] Total swap = 124996kB [ 573.199105][T13398] 524155 pages RAM [ 573.209448][T13398] 0 pages HighMem/MovableOnly [ 573.230269][T13398] 211540 pages reserved [ 573.243694][T13398] 0 pages cma reserved [ 575.081498][ T5748] Bluetooth: hci3: command tx timeout [ 576.359084][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 577.339823][T13463] 9pnet_virtio: no channels available for device syz [ 577.347155][T13463] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 578.091029][ T5845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.307536][ T5845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.426254][ T5845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.440315][T12755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 578.455364][T12755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 578.460213][T12755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 578.468725][T12755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 578.474824][T12755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 578.607698][ T5845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.619585][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 578.836073][ T5845] bridge_slave_1: left allmulticast mode [ 578.837880][ T5845] bridge_slave_1: left promiscuous mode [ 578.847193][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.856537][ T5845] bridge_slave_0: left allmulticast mode [ 578.858774][ T5845] bridge_slave_0: left promiscuous mode [ 578.862864][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.117564][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 579.564455][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.595102][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.600909][ T5845] bond0 (unregistering): Released all slaves [ 580.024095][T13488] wg2 speed is unknown, defaulting to 1000 [ 580.446089][T13539] 9pnet_virtio: no channels available for device syz [ 580.452387][T13539] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 580.522589][T13497] Bluetooth: hci3: command tx timeout [ 582.601768][T13497] Bluetooth: hci3: command tx timeout [ 582.619928][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 582.926884][ T5845] hsr_slave_0: left promiscuous mode [ 582.933716][ T5845] hsr_slave_1: left promiscuous mode [ 582.938965][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.944756][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.953149][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.955593][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.002932][ T5845] veth1_macvtap: left promiscuous mode [ 583.007577][ T5845] veth0_macvtap: left promiscuous mode [ 583.014281][ T5845] veth1_vlan: left promiscuous mode [ 583.016905][ T5845] veth0_vlan: left promiscuous mode [ 583.276490][ T5845] team0 (unregistering): Port device team_slave_1 removed [ 583.288498][ T5845] team0 (unregistering): Port device team_slave_0 removed [ 583.390032][T13566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 583.747128][T13488] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.750341][T13488] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.753901][T13488] bridge_slave_0: entered allmulticast mode [ 583.757932][T13488] bridge_slave_0: entered promiscuous mode [ 583.763519][T13488] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.766709][T13488] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.769830][T13488] bridge_slave_1: entered allmulticast mode [ 583.774297][T13488] bridge_slave_1: entered promiscuous mode [ 583.804848][T13488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.811671][T13488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.839446][T13488] team0: Port device team_slave_0 added [ 583.845964][T13488] team0: Port device team_slave_1 added [ 583.869761][T13488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.873370][T13488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.884335][T13488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.906955][T13488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.910118][T13488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.921310][T13488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.973889][T13488] hsr_slave_0: entered promiscuous mode [ 583.977298][T13488] hsr_slave_1: entered promiscuous mode [ 583.980376][T13488] debugfs: 'hsr0' already exists in 'hsr' [ 583.983816][T13488] Cannot create hsr debugfs directory [ 584.225606][T13488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 584.232241][T13488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.236372][T13488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 584.242640][T13488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.246674][T13488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 584.254572][T13488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.258634][T13488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 584.269833][T13488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.310523][T13488] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.313651][T13488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.317641][T13488] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.320704][T13488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.398026][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 584.421833][T13488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.439880][T13488] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.454749][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.462327][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.492528][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.495634][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.512626][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.515734][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.569657][ T5845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.624144][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 584.682178][T13497] Bluetooth: hci3: command tx timeout [ 584.725982][ T5845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.768353][ T5757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 584.777569][ T5757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 584.787637][ T5757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.792240][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.797005][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.808668][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 584.853624][ T5845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.962956][ T5845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.980608][ T5452] 8021q: adding VLAN 0 to HW filter on device eth9 [ 585.114969][T13488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.440533][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 586.162287][ T5845] bond0 (unregistering): Released all slaves [ 586.230065][ T5845] bond1 (unregistering): Released all slaves [ 586.244958][T13612] wg2 speed is unknown, defaulting to 1000 [ 586.530776][T13488] veth0_vlan: entered promiscuous mode [ 586.562701][T13488] veth1_vlan: entered promiscuous mode [ 586.658645][T13488] veth0_macvtap: entered promiscuous mode [ 586.690883][T13488] veth1_macvtap: entered promiscuous mode [ 586.723052][T13488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.728170][T13488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.762190][T13497] Bluetooth: hci3: command tx timeout [ 586.775128][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 586.835923][ T5792] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.842501][ T5792] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.851743][T13497] Bluetooth: hci0: command tx timeout [ 587.016165][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.019112][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.028938][T13612] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.032128][T13612] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.035208][T13612] bridge_slave_0: entered allmulticast mode [ 587.039079][T13612] bridge_slave_0: entered promiscuous mode [ 587.070902][T13612] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.074376][T13612] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.077511][T13612] bridge_slave_1: entered allmulticast mode [ 587.081549][T13612] bridge_slave_1: entered promiscuous mode [ 587.140993][T13612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.148902][T13612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.152614][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.157758][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.161079][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.232823][ T5845] hsr_slave_0: left promiscuous mode [ 587.235685][ T5845] hsr_slave_1: left promiscuous mode [ 587.454726][T13612] team0: Port device team_slave_0 added [ 587.458939][T13612] team0: Port device team_slave_1 added [ 587.461947][T13341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.474374][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 587.515461][T13612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.518420][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.531553][T13612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.536719][T13612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.540016][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.551018][T13612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.602507][T13612] hsr_slave_0: entered promiscuous mode [ 587.605253][T13612] hsr_slave_1: entered promiscuous mode [ 587.609259][T13612] debugfs: 'hsr0' already exists in 'hsr' [ 587.614926][T13612] Cannot create hsr debugfs directory [ 587.920857][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 588.269504][T13612] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 588.282242][T13612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.286167][T13612] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 588.300599][T13612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.308118][T13612] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 588.324104][T13612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.335120][T13612] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 588.346438][T13612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.438734][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13 [ 588.445882][T13612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.473764][T13612] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.489545][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.492686][ T6120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.515075][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.518129][ T6120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.835933][T13612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.921777][T13497] Bluetooth: hci0: command tx timeout [ 589.203149][T13612] veth0_vlan: entered promiscuous mode [ 589.217262][T13612] veth1_vlan: entered promiscuous mode [ 589.272402][T13612] veth0_macvtap: entered promiscuous mode [ 589.305162][T13612] veth1_macvtap: entered promiscuous mode [ 589.331991][T13612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.346016][T13612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.362515][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.368412][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.444087][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.457878][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.478762][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.485801][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.522553][ T6116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.526567][ T6116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.424045][T13754] comedi comedi2: dt2814: I/O base address or length out of range [ 591.006382][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 591.011706][T13497] Bluetooth: hci0: command tx timeout [ 591.763182][T13776] wg2 speed is unknown, defaulting to 1000 [ 591.952582][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1505'. [ 591.956334][T13781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.969806][T13781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.320157][ C1] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 592.324467][ C1] sr 2:0:0:0: [sr0] tag#11 CDB: Test Unit Ready [ 593.093261][T13497] Bluetooth: hci0: command tx timeout [ 593.246509][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1506'. [ 593.257853][T13797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.289496][T13797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.462482][T13795] warn_alloc: 2 callbacks suppressed [ 593.462495][T13795] syz.6.1507: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 593.470908][T13795] CPU: 2 UID: 0 PID: 13795 Comm: syz.6.1507 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.470926][T13795] Tainted: [L]=SOFTLOCKUP [ 593.470930][T13795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 593.470937][T13795] Call Trace: [ 593.470942][T13795] [ 593.470947][T13795] dump_stack_lvl+0x100/0x190 [ 593.471087][T13795] warn_alloc.cold+0x94/0xa8 [ 593.471110][T13795] ? __pfx_warn_alloc+0x10/0x10 [ 593.471150][T13795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 593.471235][T13795] ? __pfx_get_page_from_freelist+0x10/0x10 [ 593.471252][T13795] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 593.471268][T13795] ? __lock_acquire+0x49f/0x1a40 [ 593.471311][T13795] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 593.471326][T13795] ? find_held_lock+0x2b/0x80 [ 593.471350][T13795] ? __free_frozen_pages+0x747/0x1090 [ 593.471371][T13795] ? __free_frozen_pages+0x747/0x1090 [ 593.471389][T13795] ? do_raw_spin_unlock+0x145/0x1e0 [ 593.471402][T13795] ? _raw_spin_unlock+0x28/0x50 [ 593.471424][T13795] __folio_alloc_noprof+0x13/0x260 [ 593.471437][T13795] alloc_migration_target+0x1d7/0x6d0 [ 593.471464][T13795] migrate_pages_batch+0x5dc/0x45c0 [ 593.471482][T13795] ? __pfx_alloc_migration_target+0x10/0x10 [ 593.471501][T13795] ? migrate_pages_sync+0x12c/0x880 [ 593.471518][T13795] ? migrate_pages_sync+0x588/0x880 [ 593.471535][T13795] ? __pfx_migrate_pages_batch+0x10/0x10 [ 593.471555][T13795] ? __pfx_migrate_pages_sync+0x10/0x10 [ 593.471599][T13795] ? trace_sched_exit_tp+0x120/0x160 [ 593.471631][T13795] ? __schedule+0x126e/0x6730 [ 593.471645][T13795] ? __lock_acquire+0x49f/0x1a40 [ 593.471662][T13795] ? __css_rstat_updated+0x1ce/0x5a0 [ 593.471689][T13795] migrate_pages+0x1950/0x2850 [ 593.471708][T13795] ? __lock_acquire+0x49f/0x1a40 [ 593.471726][T13795] ? __pfx_alloc_migration_target+0x10/0x10 [ 593.471746][T13795] ? __pfx_migrate_pages+0x10/0x10 [ 593.471772][T13795] ? __lock_acquire+0x49f/0x1a40 [ 593.471791][T13795] ? mtree_load+0x32d/0xa90 [ 593.471818][T13795] move_pages_and_store_status+0xf1/0x230 [ 593.471844][T13795] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 593.471868][T13795] kernel_move_pages+0xc89/0x14a0 [ 593.471890][T13795] ? __pfx_kernel_move_pages+0x10/0x10 [ 593.471911][T13795] ? xfd_validate_state+0x129/0x190 [ 593.471941][T13795] __ia32_sys_move_pages+0xdd/0x1b0 [ 593.471958][T13795] ? __do_fast_syscall_32+0x98/0x970 [ 593.471975][T13795] ? lockdep_hardirqs_on+0x78/0x100 [ 593.471990][T13795] __do_fast_syscall_32+0xe7/0x970 [ 593.472008][T13795] do_fast_syscall_32+0x32/0x70 [ 593.472024][T13795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.472039][T13795] RIP: 0023:0xf7f95fec [ 593.472054][T13795] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 593.472059][T13795] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 593.472070][T13795] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 593.472077][T13795] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 593.472084][T13795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.472090][T13795] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 593.472097][T13795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.472110][T13795] [ 593.597873][T13795] Mem-Info: [ 593.599487][T13795] active_anon:9263 inactive_anon:12601 isolated_anon:12 [ 593.599487][T13795] active_file:15049 inactive_file:8910 isolated_file:0 [ 593.599487][T13795] unevictable:1768 dirty:523 writeback:0 [ 593.599487][T13795] slab_reclaimable:7866 slab_unreclaimable:59755 [ 593.599487][T13795] mapped:24517 shmem:17584 pagetables:1408 [ 593.599487][T13795] sec_pagetables:317 bounce:0 [ 593.599487][T13795] kernel_misc_reclaimable:0 [ 593.599487][T13795] free:56795 free_pcp:1612 free_cma:0 [ 593.622716][T13795] Node 0 active_anon:48kB inactive_anon:1276kB active_file:20kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7712kB pagetables:1224kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 593.636538][T13795] Node 1 active_anon:34956kB inactive_anon:49024kB active_file:60176kB inactive_file:35640kB unevictable:5536kB isolated(anon):2096kB isolated(file):0kB mapped:98040kB dirty:2092kB writeback:0kB shmem:67376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6940kB pagetables:4408kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 593.650311][T13795] Node 0 DMA free:2408kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:228kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.662133][T13795] lowmem_reserve[]: 0 280 280 280 280 [ 593.665503][T13795] Node 0 DMA32 free:33644kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:1048kB active_file:20kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:1100kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.678156][T13795] lowmem_reserve[]: 0 0 0 0 0 [ 593.701697][T13795] Node 1 DMA32 free:196752kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35056kB inactive_anon:49024kB active_file:60176kB inactive_file:35640kB unevictable:5536kB writepending:2092kB zspages:4568kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2920kB local_pcp:940kB free_cma:0kB [ 593.741972][T13795] lowmem_reserve[]: 0 0 0 0 0 [ 593.743723][T13795] Node 0 DMA: 132*4kB (U) 15*8kB (U) 4*16kB (U) 15*32kB (U) 5*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2408kB [ 593.763867][T13795] Node 0 DMA32: 944*4kB (UME) 218*8kB (UME) 55*16kB (UME) 254*32kB (UME) 44*64kB (UME) 18*128kB (UM) 11*256kB (UM) 4*512kB (M) 4*1024kB (M) 2*2048kB (M) 0*4096kB = 32704kB [ 593.800587][T13795] Node 1 DMA32: 2536*4kB (UME) 1372*8kB (UME) 779*16kB (UME) 580*32kB (UME) 196*64kB (UME) 71*128kB (UME) 40*256kB (UME) 29*512kB (M) 19*1024kB (UM) 13*2048kB (UM) 13*4096kB (UM) = 198192kB [ 593.821111][T13795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.837221][T13795] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.844440][T13795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.851321][T13795] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.855555][T13795] 41721 total pagecache pages [ 593.864146][T13795] 258 pages in swap cache [ 593.869117][T13795] Free swap = 64936kB [ 593.870767][T13795] Total swap = 124996kB [ 593.874258][T13795] 524155 pages RAM [ 593.879307][T13795] 0 pages HighMem/MovableOnly [ 593.881279][T13795] 211540 pages reserved [ 593.883131][T13795] 0 pages cma reserved [ 594.921717][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 595.492057][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 595.507470][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 596.046478][T13845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1517'. [ 596.088558][T13845] Illegal XDP return value 3137126851 on prog (id 84) dev syz_tun, expect packet loss! [ 596.101178][T13845] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 597.024225][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 597.400119][T13877] 9pnet_virtio: no channels available for device syz [ 597.407435][T13877] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 598.846015][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 599.490645][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1526'. [ 599.725286][ T5757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.730145][ T5757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.736262][ T5757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.758833][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.766978][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.841333][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 599.852769][ T42] audit: type=1804 audit(1785634905.257:657): pid=13938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1527" name="/newroot/402/bus/bus" dev="overlay" ino=2434 res=1 errno=0 [ 600.343766][ T12] bond0 (unregistering): Released all slaves [ 600.348926][ T12] bond1 (unregistering): Released all slaves [ 600.372551][ T5452] 8021q: adding VLAN 0 to HW filter on device eth14 [ 600.379934][T13959] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 600.712474][T13948] 9pnet_virtio: no channels available for device syz [ 600.716719][T13948] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 600.838270][T13940] wg2 speed is unknown, defaulting to 1000 [ 600.904215][ T5452] 8021q: adding VLAN 0 to HW filter on device eth15 [ 601.289652][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1533'. [ 601.353566][ T5452] 8021q: adding VLAN 0 to HW filter on device eth16 [ 601.453061][ T12] hsr_slave_0: left promiscuous mode [ 601.458575][ T12] hsr_slave_1: left promiscuous mode [ 601.801734][T13497] Bluetooth: hci1: command tx timeout [ 601.922514][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.932055][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.936216][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.944564][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.949017][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 602.324161][T13940] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.329784][T13940] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.333606][T13940] bridge_slave_0: entered allmulticast mode [ 602.338000][T13940] bridge_slave_0: entered promiscuous mode [ 602.343719][T13940] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.346855][T13940] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.354674][T13940] bridge_slave_1: entered allmulticast mode [ 602.358709][T13940] bridge_slave_1: entered promiscuous mode [ 602.377553][ T5452] 8021q: adding VLAN 0 to HW filter on device eth17 [ 602.424708][T13940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.441318][T13940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.490548][T13940] team0: Port device team_slave_0 added [ 602.565998][T13940] team0: Port device team_slave_1 added [ 602.586736][T13940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.589717][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.600476][T13940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.606844][T13940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.609777][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.621470][T13940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.676284][ T12] IPVS: stop unused estimator thread 0... [ 602.681233][T13940] hsr_slave_0: entered promiscuous mode [ 602.684462][T13940] hsr_slave_1: entered promiscuous mode [ 602.918547][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.966373][T13940] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 602.976245][T13940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.980163][T13940] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 602.988354][T13940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.991296][T13940] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 602.999168][T13940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 603.003979][T13940] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 603.023561][T13940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 603.112163][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.236669][T13996] wg2 speed is unknown, defaulting to 1000 [ 603.285127][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.359833][T13940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.397556][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.426610][T13940] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.458009][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.461156][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.476458][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.479584][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.674059][ T12] bridge_slave_1: left allmulticast mode [ 603.678935][ T12] bridge_slave_1: left promiscuous mode [ 603.680852][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.688493][ T12] bridge_slave_0: left allmulticast mode [ 603.691490][ T12] bridge_slave_0: left promiscuous mode [ 603.694417][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.887879][T13497] Bluetooth: hci1: command tx timeout [ 603.961658][T13497] Bluetooth: hci3: command tx timeout [ 604.239736][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.246962][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.254500][ T12] bond0 (unregistering): Released all slaves [ 604.779238][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.783572][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.820422][T13996] bridge_slave_0: entered allmulticast mode [ 604.837864][T13996] bridge_slave_0: entered promiscuous mode [ 604.874930][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18 [ 604.878497][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.882390][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.897287][T13996] bridge_slave_1: entered allmulticast mode [ 604.939867][T13996] bridge_slave_1: entered promiscuous mode [ 605.173711][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.206064][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.361491][T13996] team0: Port device team_slave_0 added [ 605.382366][T13996] team0: Port device team_slave_1 added [ 605.575287][ T12] hsr_slave_0: left promiscuous mode [ 605.578180][ T12] hsr_slave_1: left promiscuous mode [ 605.580344][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.583170][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.590515][ T12] veth1_macvtap: left promiscuous mode [ 605.592796][ T12] veth0_macvtap: left promiscuous mode [ 605.595082][ T12] veth1_vlan: left promiscuous mode [ 605.596818][ T12] veth0_vlan: left promiscuous mode [ 605.914600][T14087] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 605.917378][T14087] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 605.934442][T14087] vhci_hcd vhci_hcd.0: Device attached [ 605.961848][T13497] Bluetooth: hci1: command tx timeout [ 605.977498][ T12] team0 (unregistering): Port device team_slave_1 removed [ 606.030567][ T12] team0 (unregistering): Port device team_slave_0 removed [ 606.041723][T13497] Bluetooth: hci3: command tx timeout [ 606.152991][T14083] erspan0: entered promiscuous mode [ 606.159549][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1542'. [ 606.180570][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.215787][T10899] usb 42-1: SetAddress Request (26) to port 0 [ 606.218502][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.227131][T10899] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 606.237634][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.249782][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.257087][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.273564][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.306711][T13940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.404148][T13996] hsr_slave_0: entered promiscuous mode [ 606.412932][T13996] hsr_slave_1: entered promiscuous mode [ 606.418181][T13996] debugfs: 'hsr0' already exists in 'hsr' [ 606.425431][T13996] Cannot create hsr debugfs directory [ 606.477244][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19 [ 606.616161][T13996] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 606.623034][T13996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.625944][T13996] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 606.630006][T13996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.631058][T13996] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 606.637938][T14088] vhci_hcd: connection reset by peer [ 606.639987][ T5792] vhci_hcd vhci_hcd.2: stop threads [ 606.640158][T13996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.642110][ T5792] vhci_hcd vhci_hcd.2: release socket [ 606.642242][ T5792] vhci_hcd vhci_hcd.2: disconnect device [ 606.651157][T13996] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 606.659876][T13996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.729769][T13940] veth0_vlan: entered promiscuous mode [ 606.786700][T13940] veth1_vlan: entered promiscuous mode [ 606.827264][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20 [ 606.840010][T13940] veth0_macvtap: entered promiscuous mode [ 606.851148][T13940] veth1_macvtap: entered promiscuous mode [ 606.866987][T13996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.885884][T13940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.904725][T13940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.922435][T13996] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.933523][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.936865][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.947804][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1544'. [ 606.969928][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.973059][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.983301][T13341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.132905][ T5792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.138794][ T5452] 8021q: adding VLAN 0 to HW filter on device eth21 [ 607.142158][T13341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.150889][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.155789][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.199336][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.204299][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.209182][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.426811][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'. [ 607.434432][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'. [ 607.496099][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1535'. [ 607.503420][T14149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.521895][T14149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.591205][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.914391][T13996] veth0_vlan: entered promiscuous mode [ 607.922388][T13996] veth1_vlan: entered promiscuous mode [ 607.970440][T13996] veth0_macvtap: entered promiscuous mode [ 607.977472][T13996] veth1_macvtap: entered promiscuous mode [ 607.993582][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.006451][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.042259][T13497] Bluetooth: hci1: command tx timeout [ 608.051541][T13341] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.073750][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.079377][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.086531][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.135413][T13497] Bluetooth: hci3: command tx timeout [ 608.188216][ T6120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.197517][ T6120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.230034][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.236634][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.478970][T14172] wg2 speed is unknown, defaulting to 1000 [ 608.759909][ C3] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 608.764550][ C3] sr 2:0:0:0: [sr0] tag#12 CDB: Test Unit Ready [ 610.221527][T13497] Bluetooth: hci3: command tx timeout [ 611.336473][T10899] usb 42-1: device descriptor read/8, error -110 [ 612.222884][T10899] usb usb42-port1: attempt power cycle [ 612.341309][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1553'. [ 612.344590][T14209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.355815][T14209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.453816][T14211] 9p: Bad value for 'rfdno' [ 612.670024][T14198] 9pnet_virtio: no channels available for device syz [ 612.676328][T14198] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 612.712491][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1554'. [ 612.792076][T10899] usb usb42-port1: unable to enumerate USB device [ 613.199416][ T5792] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.272008][T14235] fuse: Bad value for 'fd' [ 613.355873][T14235] 9p: Bad value for 'rfdno' [ 613.404532][T14235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.405427][ T5792] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.544154][ T5792] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.752461][ T5757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.762917][ T5757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.768709][ T5757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.774584][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.790604][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 613.794956][ T5792] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.087887][ T5792] bridge_slave_1: left allmulticast mode [ 614.092110][ T5792] bridge_slave_1: left promiscuous mode [ 614.095247][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.105186][ T5792] bridge_slave_0: left allmulticast mode [ 614.108271][ T5792] bridge_slave_0: left promiscuous mode [ 614.110934][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.173993][T14242] warn_alloc: 1 callbacks suppressed [ 614.174032][T14242] syz.8.1561: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 614.207361][T14242] CPU: 2 UID: 0 PID: 14242 Comm: syz.8.1561 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.207382][T14242] Tainted: [L]=SOFTLOCKUP [ 614.207386][T14242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 614.207393][T14242] Call Trace: [ 614.207398][T14242] [ 614.207403][T14242] dump_stack_lvl+0x100/0x190 [ 614.207566][T14242] warn_alloc.cold+0x94/0xa8 [ 614.207588][T14242] ? __pfx_warn_alloc+0x10/0x10 [ 614.207628][T14242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 614.207729][T14242] ? __pfx_get_page_from_freelist+0x10/0x10 [ 614.207746][T14242] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 614.207762][T14242] ? __lock_acquire+0x49f/0x1a40 [ 614.207802][T14242] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 614.207817][T14242] ? find_held_lock+0x2b/0x80 [ 614.207831][T14242] ? __free_frozen_pages+0x747/0x1090 [ 614.207849][T14242] ? __free_frozen_pages+0x747/0x1090 [ 614.207867][T14242] ? do_raw_spin_unlock+0x145/0x1e0 [ 614.207880][T14242] ? _raw_spin_unlock+0x28/0x50 [ 614.207895][T14242] ? irqentry_exit+0x24d/0xa00 [ 614.207916][T14242] __folio_alloc_noprof+0x13/0x260 [ 614.207929][T14242] alloc_migration_target+0x1d7/0x6d0 [ 614.207954][T14242] migrate_pages_batch+0x5dc/0x45c0 [ 614.207973][T14242] ? __pfx_alloc_migration_target+0x10/0x10 [ 614.207993][T14242] ? migrate_pages_sync+0x12c/0x880 [ 614.208010][T14242] ? migrate_pages_sync+0x588/0x880 [ 614.208026][T14242] ? __pfx_migrate_pages_batch+0x10/0x10 [ 614.208046][T14242] ? __pfx_migrate_pages_sync+0x10/0x10 [ 614.208063][T14242] ? register_lock_class+0x40/0x560 [ 614.208083][T14242] ? __lock_acquire+0x49f/0x1a40 [ 614.208099][T14242] ? __css_rstat_updated+0x1ce/0x5a0 [ 614.208126][T14242] migrate_pages+0x1950/0x2850 [ 614.208144][T14242] ? __lock_acquire+0x49f/0x1a40 [ 614.208162][T14242] ? __pfx_alloc_migration_target+0x10/0x10 [ 614.208182][T14242] ? __pfx_migrate_pages+0x10/0x10 [ 614.208204][T14242] ? __lock_acquire+0x49f/0x1a40 [ 614.208222][T14242] ? mtree_load+0x32d/0xa90 [ 614.208246][T14242] move_pages_and_store_status+0xf1/0x230 [ 614.208265][T14242] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 614.208289][T14242] kernel_move_pages+0xc89/0x14a0 [ 614.208311][T14242] ? __pfx_kernel_move_pages+0x10/0x10 [ 614.208332][T14242] ? xfd_validate_state+0x129/0x190 [ 614.208362][T14242] __ia32_sys_move_pages+0xdd/0x1b0 [ 614.208380][T14242] ? __do_fast_syscall_32+0x98/0x970 [ 614.208396][T14242] ? lockdep_hardirqs_on+0x78/0x100 [ 614.208410][T14242] __do_fast_syscall_32+0xe7/0x970 [ 614.208427][T14242] do_fast_syscall_32+0x32/0x70 [ 614.208443][T14242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 614.208459][T14242] RIP: 0023:0xf7f42fec [ 614.208473][T14242] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 614.208478][T14242] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 614.208490][T14242] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 614.208497][T14242] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 614.208504][T14242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.208510][T14242] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 614.208517][T14242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.208530][T14242] [ 614.208548][T14242] Mem-Info: [ 614.341441][T14242] active_anon:3949 inactive_anon:7532 isolated_anon:12 [ 614.341441][T14242] active_file:15049 inactive_file:10722 isolated_file:0 [ 614.341441][T14242] unevictable:1768 dirty:827 writeback:0 [ 614.341441][T14242] slab_reclaimable:8017 slab_unreclaimable:59179 [ 614.341441][T14242] mapped:24608 shmem:6812 pagetables:1637 [ 614.341441][T14242] sec_pagetables:317 bounce:0 [ 614.341441][T14242] kernel_misc_reclaimable:0 [ 614.341441][T14242] free:63708 free_pcp:3350 free_cma:0 [ 614.358781][T14242] Node 0 active_anon:4kB inactive_anon:680kB active_file:20kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7712kB pagetables:1224kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 614.381458][T14242] Node 1 active_anon:15852kB inactive_anon:29448kB active_file:60176kB inactive_file:42888kB unevictable:5536kB isolated(anon):4kB isolated(file):0kB mapped:98408kB dirty:3316kB writeback:0kB shmem:25036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7472kB pagetables:5420kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 614.408120][T14242] Node 0 DMA free:2544kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:124kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.428532][T14242] lowmem_reserve[]: 0 280 280 280 280 [ 614.441011][T14242] Node 0 DMA32 free:40236kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:512kB active_file:20kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:1056kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.481453][T14242] lowmem_reserve[]: 0 0 0 0 0 [ 614.483254][T14242] Node 1 DMA32 free:210836kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15896kB inactive_anon:29448kB active_file:60176kB inactive_file:42876kB unevictable:5536kB writepending:3324kB zspages:4336kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:14036kB local_pcp:540kB free_cma:0kB [ 614.516901][T14258] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 614.531442][T14242] lowmem_reserve[]: 0 0 0 0 0 [ 614.539225][T14242] Node 0 DMA: 136*4kB (U) 16*8kB (U) 3*16kB (U) 13*32kB (U) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2544kB [ 614.558990][T14242] Node 0 DMA32: 1067*4kB (UME) 280*8kB (UME) 68*16kB (UME) 270*32kB (UME) 49*64kB (UME) 21*128kB (UM) 11*256kB (UM) 4*512kB (M) 3*1024kB (M) 5*2048kB (M) 0*4096kB = 40236kB [ 614.612663][T14242] Node 1 DMA32: 126*4kB (UE) 1213*8kB (UME) 1018*16kB (UME) 620*32kB (UME) 327*64kB (UME) 121*128kB (UME) 70*256kB (UME) 36*512kB (UM) 21*1024kB (UM) 12*2048kB (UM) 11*4096kB (UM) = 210240kB [ 614.673426][T14242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.699189][T14242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 614.709531][T14242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.721596][T14242] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 614.731322][T14242] 33691 total pagecache pages [ 614.736868][T14242] 142 pages in swap cache [ 614.741018][T14242] Free swap = 81444kB [ 614.748462][T14242] Total swap = 124996kB [ 614.753311][T14242] 524155 pages RAM [ 614.757114][T14242] 0 pages HighMem/MovableOnly [ 614.763010][T14242] 211540 pages reserved [ 614.767123][T14242] 0 pages cma reserved [ 615.387272][ T5792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.728327][ T5792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.733861][ T5792] bond0 (unregistering): Released all slaves [ 615.881608][T13497] Bluetooth: hci1: command tx timeout [ 616.115791][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 616.121317][T14250] wg2 speed is unknown, defaulting to 1000 [ 616.237200][ T5452] 8021q: adding VLAN 0 to HW filter on device eth22 [ 617.073273][ T5792] hsr_slave_0: left promiscuous mode [ 617.076696][ T5792] hsr_slave_1: left promiscuous mode [ 617.079585][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.084276][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.096727][ T5792] veth1_macvtap: left promiscuous mode [ 617.098582][ T5792] veth0_macvtap: left promiscuous mode [ 617.100702][ T5792] veth1_vlan: left promiscuous mode [ 617.103830][ T5792] veth0_vlan: left promiscuous mode [ 617.971565][T13497] Bluetooth: hci1: command tx timeout [ 618.518495][ T5792] team0 (unregistering): Port device team_slave_1 removed [ 618.530926][ T5792] team0 (unregistering): Port device team_slave_0 removed [ 618.701260][T14307] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 619.245094][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.260677][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.269988][T14250] bridge_slave_0: entered allmulticast mode [ 619.279813][T14250] bridge_slave_0: entered promiscuous mode [ 619.306772][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.319407][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.330751][T14250] bridge_slave_1: entered allmulticast mode [ 619.337404][T14250] bridge_slave_1: entered promiscuous mode [ 619.407798][T14250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.425816][T14250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.545948][T14250] team0: Port device team_slave_0 added [ 619.559091][T14250] team0: Port device team_slave_1 added [ 619.628793][ T5452] 8021q: adding VLAN 0 to HW filter on device eth23 [ 619.649897][T14250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.658290][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.681938][T14250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.690970][T14250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.699107][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.721649][T14250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.829565][T14250] hsr_slave_0: entered promiscuous mode [ 619.836159][T14250] hsr_slave_1: entered promiscuous mode [ 620.043398][T13497] Bluetooth: hci1: command tx timeout [ 620.061816][T14250] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 620.067057][T14250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.070083][T14250] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 620.075353][T14250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 620.078250][T14250] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 620.085705][T14250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 620.088627][T14250] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 620.093807][T14250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.186290][T14250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.199721][T14250] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.207482][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.210315][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.223547][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.225928][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.449423][ T5452] 8021q: adding VLAN 0 to HW filter on device eth24 [ 620.826525][T14250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.854431][T14395] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 620.858848][T14395] netlink: 'syz.2.1579': attribute type 2 has an invalid length. [ 620.923406][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 621.000060][ T5452] 8021q: adding VLAN 0 to HW filter on device eth25 [ 621.625115][T14250] veth0_vlan: entered promiscuous mode [ 621.677995][T14250] veth1_vlan: entered promiscuous mode [ 621.756535][T14250] veth0_macvtap: entered promiscuous mode [ 621.767874][T14250] veth1_macvtap: entered promiscuous mode [ 621.836673][T14250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.851968][T14250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.937480][ T5845] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.946973][ T5845] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.982351][ T5792] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.001681][ T5845] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.013011][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.020206][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.060217][ T6189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.066738][ T6189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.121523][T13497] Bluetooth: hci1: command tx timeout [ 622.404574][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 622.539392][T14460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.759248][ C3] sr 2:0:0:0: [sr0] tag#30 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 622.763649][ C3] sr 2:0:0:0: [sr0] tag#30 CDB: Test Unit Ready [ 622.913633][T14449] wg2 speed is unknown, defaulting to 1000 [ 622.954695][T14465] 9p: Bad value for 'rfdno' [ 623.930063][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.933101][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.333481][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1584'. [ 625.171688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 625.654596][T14508] zram0: detected capacity change from 0 to 8 [ 625.753774][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1589'. [ 626.120351][T14515] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 626.123117][T14515] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 626.128832][T14515] vhci_hcd vhci_hcd.0: Device attached [ 626.431583][T10715] usb 54-1: SetAddress Request (2) to port 0 [ 626.434251][T10715] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 626.600466][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 627.168702][T14516] vhci_hcd: connection reset by peer [ 627.182547][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.184524][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.186878][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 629.801818][T14582] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 630.112262][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1605'. [ 630.365801][T14593] ceph: No mds server is up or the cluster is laggy [ 630.376201][ T1045] libceph: connect (1)[c::]:6789 error -101 [ 630.379285][ T1045] libceph: mon0 (1)[c::]:6789 connect error [ 631.481575][T10715] usb 54-1: device descriptor read/8, error -110 [ 631.890904][T10715] usb usb54-port1: attempt power cycle [ 632.487092][T10715] usb usb54-port1: unable to enumerate USB device [ 633.624063][T14645] 9p: Bad value for 'rfdno' [ 634.079334][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1615'. [ 634.576406][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1616'. [ 634.580536][T14663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.639402][ T42] audit: type=1326 audit(1785634940.057:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.8.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 634.654528][ T42] audit: type=1326 audit(1785634940.057:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.8.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 634.667067][ T42] audit: type=1326 audit(1785634940.067:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.8.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 634.673813][T14663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.693755][ T42] audit: type=1326 audit(1785634940.067:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.8.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 634.707467][ T42] audit: type=1326 audit(1785634940.067:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.8.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 634.740631][T14678] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 634.743443][T14678] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 634.756740][T14678] vhci_hcd vhci_hcd.0: Device attached [ 635.051729][ T1045] usb 50-1: SetAddress Request (2) to port 0 [ 635.054123][ T1045] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 635.416159][T14684] macvlan2: entered promiscuous mode [ 635.426607][T14684] bridge0: entered promiscuous mode [ 635.460205][T14680] vhci_hcd: connection reset by peer [ 635.468299][ T12] vhci_hcd vhci_hcd.6: stop threads [ 635.470696][ T12] vhci_hcd vhci_hcd.6: release socket [ 635.473515][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 636.019693][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 636.146393][T14707] fuse: Bad value for 'fd' [ 636.214001][T14707] 9p: Bad value for 'rfdno' [ 636.223503][T14707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.408526][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1627'. [ 637.656144][T14734] 9p: Bad value for 'rfdno' [ 638.123203][T14735] syz.2.1629: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 638.130104][T14735] CPU: 3 UID: 0 PID: 14735 Comm: syz.2.1629 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.130149][T14735] Tainted: [L]=SOFTLOCKUP [ 638.130155][T14735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 638.130166][T14735] Call Trace: [ 638.130173][T14735] [ 638.130182][T14735] dump_stack_lvl+0x100/0x190 [ 638.130401][T14735] warn_alloc.cold+0x94/0xa8 [ 638.130433][T14735] ? __pfx_warn_alloc+0x10/0x10 [ 638.130493][T14735] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.130609][T14735] ? __pfx_get_page_from_freelist+0x10/0x10 [ 638.130636][T14735] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 638.130663][T14735] ? __lock_acquire+0x49f/0x1a40 [ 638.130723][T14735] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 638.130748][T14735] ? find_held_lock+0x2b/0x80 [ 638.130769][T14735] ? __free_frozen_pages+0x747/0x1090 [ 638.130798][T14735] ? __free_frozen_pages+0x747/0x1090 [ 638.130832][T14735] ? do_raw_spin_unlock+0x145/0x1e0 [ 638.130852][T14735] ? _raw_spin_unlock+0x28/0x50 [ 638.130878][T14735] ? __pfx_alloc_migration_target+0x10/0x10 [ 638.130929][T14735] __folio_alloc_noprof+0x13/0x260 [ 638.130951][T14735] alloc_migration_target+0x1d7/0x6d0 [ 638.130980][T14735] migrate_pages_batch+0x5dc/0x45c0 [ 638.131010][T14735] ? __pfx_alloc_migration_target+0x10/0x10 [ 638.131042][T14735] ? migrate_pages_sync+0x12c/0x880 [ 638.131070][T14735] ? migrate_pages_sync+0x588/0x880 [ 638.131098][T14735] ? __pfx_migrate_pages_batch+0x10/0x10 [ 638.131136][T14735] ? __pfx_migrate_pages_sync+0x10/0x10 [ 638.131171][T14735] ? __lock_acquire+0x49f/0x1a40 [ 638.131196][T14735] ? __css_rstat_updated+0x1ce/0x5a0 [ 638.131254][T14735] migrate_pages+0x1950/0x2850 [ 638.131287][T14735] ? __lock_acquire+0x49f/0x1a40 [ 638.131315][T14735] ? __pfx_alloc_migration_target+0x10/0x10 [ 638.131349][T14735] ? __pfx_migrate_pages+0x10/0x10 [ 638.131410][T14735] ? __lock_acquire+0x49f/0x1a40 [ 638.131440][T14735] ? mtree_load+0x32d/0xa90 [ 638.131480][T14735] move_pages_and_store_status+0xf1/0x230 [ 638.131512][T14735] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 638.131551][T14735] kernel_move_pages+0xc89/0x14a0 [ 638.131588][T14735] ? __pfx_kernel_move_pages+0x10/0x10 [ 638.131625][T14735] ? xfd_validate_state+0x129/0x190 [ 638.131671][T14735] __ia32_sys_move_pages+0xdd/0x1b0 [ 638.131700][T14735] ? __do_fast_syscall_32+0x98/0x970 [ 638.131727][T14735] ? lockdep_hardirqs_on+0x78/0x100 [ 638.131751][T14735] __do_fast_syscall_32+0xe7/0x970 [ 638.131780][T14735] do_fast_syscall_32+0x32/0x70 [ 638.131806][T14735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.131830][T14735] RIP: 0023:0xf6ffefec [ 638.131853][T14735] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 638.131862][T14735] RSP: 002b:00000000f53ab50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 638.131879][T14735] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 638.131891][T14735] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 638.131902][T14735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.131913][T14735] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 638.131924][T14735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.131948][T14735] [ 638.289343][T14735] Mem-Info: [ 638.290785][T14735] active_anon:10067 inactive_anon:7445 isolated_anon:12 [ 638.290785][T14735] active_file:15049 inactive_file:10733 isolated_file:0 [ 638.290785][T14735] unevictable:1768 dirty:641 writeback:0 [ 638.290785][T14735] slab_reclaimable:8042 slab_unreclaimable:60208 [ 638.290785][T14735] mapped:31364 shmem:12455 pagetables:1828 [ 638.290785][T14735] sec_pagetables:317 bounce:0 [ 638.290785][T14735] kernel_misc_reclaimable:0 [ 638.290785][T14735] free:60059 free_pcp:512 free_cma:0 [ 638.331559][T14735] Node 0 active_anon:4kB inactive_anon:304kB active_file:20kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7712kB pagetables:1224kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 638.371676][T14735] Node 1 active_anon:34352kB inactive_anon:29456kB active_file:60176kB inactive_file:42932kB unevictable:5536kB isolated(anon):4kB isolated(file):0kB mapped:113948kB dirty:2564kB writeback:0kB shmem:42008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7848kB pagetables:6008kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 638.389934][T14743] netlink: 'syz.6.1631': attribute type 1 has an invalid length. [ 638.391489][T14735] Node 0 DMA free:2548kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:124kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.428589][T14735] lowmem_reserve[]: 0 280 280 280 280 [ 638.449049][T14735] Node 0 DMA32 free:40724kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:180kB active_file:20kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:1056kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.466991][T14735] lowmem_reserve[]: 0 0 0 0 0 [ 638.475479][T14735] Node 1 DMA32 free:170032kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28888kB inactive_anon:29456kB active_file:60176kB inactive_file:42932kB unevictable:5536kB writepending:2564kB zspages:4340kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:19272kB local_pcp:992kB free_cma:0kB [ 638.539792][T14735] lowmem_reserve[]: 0 0 0 0 0 [ 638.545862][T14735] Node 0 DMA: 137*4kB (U) 16*8kB (U) 3*16kB (U) 13*32kB (U) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2548kB [ 638.562186][T14735] Node 0 DMA32: 1071*4kB (UME) 287*8kB (UME) 70*16kB (UME) 272*32kB (UME) 50*64kB (UME) 21*128kB (UM) 12*256kB (UM) 4*512kB (M) 3*1024kB (M) 5*2048kB (M) 0*4096kB = 40724kB [ 638.583863][T14735] Node 1 DMA32: 1355*4kB (UME) 1048*8kB (UME) 610*16kB (UME) 386*32kB (UME) 291*64kB (UME) 118*128kB (UME) 65*256kB (UME) 34*512kB (UM) 20*1024kB (UM) 8*2048kB (M) 9*4096kB (UM) = 177420kB [ 638.606072][T14735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.618728][T14735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 638.629813][T14735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.655487][T14735] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 638.664463][T14735] 33147 total pagecache pages [ 638.669706][T14735] 143 pages in swap cache [ 638.676778][T14735] Free swap = 81116kB [ 638.678647][T14735] Total swap = 124996kB [ 638.683100][T14735] 524155 pages RAM [ 638.684567][T14735] 0 pages HighMem/MovableOnly [ 638.691450][T14735] 211540 pages reserved [ 638.697163][T14735] 0 pages cma reserved [ 638.702719][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1632'. [ 639.947427][ T42] audit: type=1804 audit(1785634945.367:663): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1635" name="/newroot/40/bus/bus" dev="overlay" ino=243 res=1 errno=0 [ 640.121932][ T1045] usb 50-1: device descriptor read/8, error -110 [ 640.734562][T14758] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 641.002734][ T1045] usb usb50-port1: attempt power cycle [ 641.241282][T14776] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 641.244852][T14776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 641.258701][T14776] vhci_hcd vhci_hcd.0: Device attached [ 641.379061][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1638'. [ 641.641357][T14792] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 641.644160][T14792] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 641.654484][T10899] usb 56-1: SetAddress Request (2) to port 0 [ 641.657977][T10899] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 641.684276][T14792] vhci_hcd vhci_hcd.0: Device attached [ 641.731951][ T1045] usb usb50-port1: unable to enumerate USB device [ 641.816952][ T6120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.822914][ T6120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.942124][T10715] usb 42-1: SetAddress Request (30) to port 0 [ 641.946666][T10715] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 642.325111][T14801] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 642.479386][T14792] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 642.665884][T14777] vhci_hcd: connection reset by peer [ 642.668696][ T12] vhci_hcd vhci_hcd.9: stop threads [ 642.670942][ T12] vhci_hcd vhci_hcd.9: release socket [ 642.675446][ T12] vhci_hcd vhci_hcd.9: disconnect device [ 642.945765][T14793] vhci_hcd: connection reset by peer [ 642.956939][ T12] vhci_hcd vhci_hcd.2: stop threads [ 642.959539][ T12] vhci_hcd vhci_hcd.2: release socket [ 642.961838][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 644.562358][T14815] smc: removing ib device syz2 [ 644.590202][T14815] smbdirect: ib_dev[syz2] removed [ 645.096657][T14815] ------------[ cut here ]------------ [ 645.098506][T14815] !xa_empty(&pool->xa) [ 645.098516][T14815] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#3: syz.8.1643/14815 [ 645.103511][T14815] Modules linked in: [ 645.105186][T14815] CPU: 3 UID: 0 PID: 14815 Comm: syz.8.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.108875][T14815] Tainted: [L]=SOFTLOCKUP [ 645.110261][T14815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 645.113815][T14815] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 645.115987][T14815] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 46 9a 27 f9 5b c3 cc cc cc cc e8 3b 9a 27 f9 90 <0f> 0b 90 e8 32 9a 27 f9 5b e9 0c 3f da 02 e8 27 2a 97 f9 eb d0 0f [ 645.123495][T14815] RSP: 0000:ffffc90004597170 EFLAGS: 00010246 [ 645.125850][T14815] RAX: 0000000000080000 RBX: ffff88806b8f9398 RCX: ffffc9000c001000 [ 645.128533][T14815] RDX: 0000000000080000 RSI: ffffffff88e213c5 RDI: ffff88806b8f9418 [ 645.131023][T14815] RBP: ffffffff88e06df0 R08: 0000000000000005 R09: 0000000000000001 [ 645.133894][T14815] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88806b8f8698 [ 645.136953][T14815] R13: ffff88806b8f7fe0 R14: ffff88806b8f7fe0 R15: ffff88806b8f90f8 [ 645.140404][T14815] FS: 0000000000000000(0000) GS:ffff888096edf000(0063) knlGS:00000000f5406b40 [ 645.143926][T14815] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 645.146486][T14815] CR2: 0000000000000000 CR3: 000000006c397000 CR4: 0000000000352ef0 [ 645.149622][T14815] Call Trace: [ 645.150947][T14815] [ 645.152248][T14815] rxe_dealloc+0x25/0xc0 [ 645.153931][T14815] ib_dealloc_device+0x49/0x230 [ 645.155836][T14815] __ib_unregister_device+0x396/0x480 [ 645.157791][T14815] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 645.160048][T14815] ib_unregister_device_and_put+0x5a/0x80 [ 645.162249][T14815] nldev_dellink+0x308/0x430 [ 645.163751][T14815] ? __pfx_nldev_dellink+0x10/0x10 [ 645.165407][T14815] ? rcu_is_watching+0x12/0xc0 [ 645.166935][T14815] ? apparmor_capable+0x1d7/0x4d0 [ 645.168617][T14815] ? bpf_lsm_capable+0x9/0x10 [ 645.170103][T14815] ? security_capable+0x80/0x260 [ 645.171730][T14815] ? ns_capable+0xd2/0xf0 [ 645.173126][T14815] ? __pfx_nldev_dellink+0x10/0x10 [ 645.174730][T14815] rdma_nl_rcv_msg+0x392/0x6f0 [ 645.176489][T14815] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 645.178582][T14815] ? __lock_acquire+0x49f/0x1a40 [ 645.180495][T14815] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 645.183026][T14815] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 645.185734][T14815] ? netlink_deliver_tap+0x1ae/0xcc0 [ 645.187860][T14815] netlink_unicast+0x585/0x850 [ 645.189759][T14815] ? __pfx_netlink_unicast+0x10/0x10 [ 645.191919][T14815] netlink_sendmsg+0x8b0/0xda0 [ 645.193801][T14815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.195766][T14815] ? apparmor_socket_sendmsg+0x15b/0x270 [ 645.197796][T14815] ____sys_sendmsg+0xa4d/0xbe0 [ 645.199713][T14815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.201494][T14815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.203229][T14815] ___sys_sendmsg+0x190/0x1e0 [ 645.204779][T14815] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.207303][T14815] ? futex_wait+0x11e/0x370 [ 645.209365][T14815] ? find_held_lock+0x2b/0x80 [ 645.211460][T14815] __sys_sendmsg+0x160/0x210 [ 645.213418][T14815] ? __pfx___sys_sendmsg+0x10/0x10 [ 645.215636][T14815] __do_fast_syscall_32+0xe7/0x970 [ 645.217828][T14815] ? lockdep_hardirqs_on+0x78/0x100 [ 645.220607][T14815] do_fast_syscall_32+0x32/0x70 [ 645.222753][T14815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.225179][T14815] RIP: 0023:0xf7f42fec [ 645.226794][T14815] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 645.229602][T14815] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 645.233745][T14815] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800002c0 [ 645.237076][T14815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 645.240377][T14815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.244428][T14815] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 645.247754][T14815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.251661][T14815] [ 645.252854][T14815] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 645.255763][T14815] CPU: 3 UID: 0 PID: 14815 Comm: syz.8.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.260280][T14815] Tainted: [L]=SOFTLOCKUP [ 645.262113][T14815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 645.266279][T14815] Call Trace: [ 645.267713][T14815] [ 645.269002][T14815] dump_stack_lvl+0x100/0x190 [ 645.270993][T14815] vpanic+0x552/0x970 [ 645.272703][T14815] ? __pfx_vpanic+0x10/0x10 [ 645.274623][T14815] panic+0xd1/0xe0 [ 645.276225][T14815] ? __pfx_panic+0x10/0x10 [ 645.278118][T14815] check_panic_on_warn.cold+0x19/0x34 [ 645.280377][T14815] ? rxe_pool_cleanup+0x46/0x60 [ 645.282437][T14815] __warn.cold+0x191/0x318 [ 645.284327][T14815] __report_bug+0x30f/0x440 [ 645.286257][T14815] ? rxe_pool_cleanup+0x46/0x60 [ 645.288323][T14815] ? __pfx___report_bug+0x10/0x10 [ 645.290443][T14815] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 645.292881][T14815] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 645.295360][T14815] ? __flush_workqueue+0x426/0x1200 [ 645.297556][T14815] ? rxe_pool_cleanup+0x46/0x60 [ 645.299604][T14815] report_bug+0xb2/0x220 [ 645.301341][T14815] ? rxe_pool_cleanup+0x46/0x60 [ 645.302886][T14815] handle_bug+0x16a/0x2a0 [ 645.304269][T14815] exc_invalid_op+0x17/0x50 [ 645.305762][T14815] asm_exc_invalid_op+0x1a/0x20 [ 645.307296][T14815] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 645.309039][T14815] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 46 9a 27 f9 5b c3 cc cc cc cc e8 3b 9a 27 f9 90 <0f> 0b 90 e8 32 9a 27 f9 5b e9 0c 3f da 02 e8 27 2a 97 f9 eb d0 0f [ 645.315035][T14815] RSP: 0000:ffffc90004597170 EFLAGS: 00010246 [ 645.316917][T14815] RAX: 0000000000080000 RBX: ffff88806b8f9398 RCX: ffffc9000c001000 [ 645.319404][T14815] RDX: 0000000000080000 RSI: ffffffff88e213c5 RDI: ffff88806b8f9418 [ 645.321898][T14815] RBP: ffffffff88e06df0 R08: 0000000000000005 R09: 0000000000000001 [ 645.324363][T14815] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88806b8f8698 [ 645.326859][T14815] R13: ffff88806b8f7fe0 R14: ffff88806b8f7fe0 R15: ffff88806b8f90f8 [ 645.329323][T14815] ? __pfx_rxe_dealloc+0x10/0x10 [ 645.331125][T14815] ? rxe_pool_cleanup+0x45/0x60 [ 645.332709][T14815] rxe_dealloc+0x25/0xc0 [ 645.334097][T14815] ib_dealloc_device+0x49/0x230 [ 645.335719][T14815] __ib_unregister_device+0x396/0x480 [ 645.337416][T14815] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 645.339393][T14815] ib_unregister_device_and_put+0x5a/0x80 [ 645.341299][T14815] nldev_dellink+0x308/0x430 [ 645.342787][T14815] ? __pfx_nldev_dellink+0x10/0x10 [ 645.344910][T14815] ? rcu_is_watching+0x12/0xc0 [ 645.346874][T14815] ? apparmor_capable+0x1d7/0x4d0 [ 645.348960][T14815] ? bpf_lsm_capable+0x9/0x10 [ 645.350732][T14815] ? security_capable+0x80/0x260 [ 645.352770][T14815] ? ns_capable+0xd2/0xf0 [ 645.354511][T14815] ? __pfx_nldev_dellink+0x10/0x10 [ 645.356560][T14815] rdma_nl_rcv_msg+0x392/0x6f0 [ 645.358588][T14815] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 645.360770][T14815] ? __lock_acquire+0x49f/0x1a40 [ 645.362851][T14815] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 645.365563][T14815] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 645.368451][T14815] ? netlink_deliver_tap+0x1ae/0xcc0 [ 645.370660][T14815] netlink_unicast+0x585/0x850 [ 645.372505][T14815] ? __pfx_netlink_unicast+0x10/0x10 [ 645.374718][T14815] netlink_sendmsg+0x8b0/0xda0 [ 645.376773][T14815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.379031][T14815] ? apparmor_socket_sendmsg+0x15b/0x270 [ 645.381425][T14815] ____sys_sendmsg+0xa4d/0xbe0 [ 645.383471][T14815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.385703][T14815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.387989][T14815] ___sys_sendmsg+0x190/0x1e0 [ 645.390003][T14815] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.391925][T14815] ? futex_wait+0x11e/0x370 [ 645.393465][T14815] ? find_held_lock+0x2b/0x80 [ 645.395002][T14815] __sys_sendmsg+0x160/0x210 [ 645.396499][T14815] ? __pfx___sys_sendmsg+0x10/0x10 [ 645.398168][T14815] __do_fast_syscall_32+0xe7/0x970 [ 645.399829][T14815] ? lockdep_hardirqs_on+0x78/0x100 [ 645.401682][T14815] do_fast_syscall_32+0x32/0x70 [ 645.403245][T14815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.405291][T14815] RIP: 0023:0xf7f42fec [ 645.406633][T14815] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 645.409069][T14815] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 645.411798][T14815] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800002c0 [ 645.414344][T14815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 645.416864][T14815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.419413][T14815] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 645.422167][T14815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.424737][T14815] [ 645.426575][T14815] Kernel Offset: disabled [ 645.427972][T14815] Rebooting in 86400 seconds..