last executing test programs: 11m29.950197316s ago: executing program 1 (id=103): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, r0, 0x28, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd0a, 0x28}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0x18, 0x34, @random="f95cde530dfc4e065efd816efbb25e658110e2c3"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff32e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x32}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x112}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0xe4}, 0x1, 0x0, 0x0, 0x4c001}, 0x200488c4) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe01000000000000", 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c000480280001800a0001006d61746368000000180002800800010065636e000400030008000240000000000900010073797a30"], 0xc8}}, 0x0) landlock_restrict_self(r4, 0xf) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)) r6 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) pread64(r6, &(0x7f0000000600)=""/155, 0x9b, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 11m29.790708109s ago: executing program 1 (id=105): r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffecb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x25) sendto$packet(r1, &(0x7f0000000280)="647ea944a227cbaed0f21aec93f6350c741dcc3255951e9ddd3d71e4e0c9", 0x1e, 0x4, &(0x7f0000000380)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000003c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c04c160440100b5b94c00000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0xffffffffffffffce}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4095}, 0x40000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c40, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 11m29.377991035s ago: executing program 1 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048090}, 0x8080) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r4 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) socket$netlink(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='vers\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 11m29.271965401s ago: executing program 1 (id=114): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2, 0x5, 0x4000003}) r3 = memfd_create(&(0x7f0000000240)='\\]#\x00', 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={r2, 0x1, r3, 0xa1}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (async, rerun: 64) mount(0x0, 0x0, 0x0, 0x2e110c4, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mq_open(&(0x7f0000000000)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xde\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba]\b\x1b\xf5\x85\xe5\nt\xd1\xcf\v\xab\xfd\x9a(\xe7\xf9\xa7yY\x18i\xcc\xe7\x1d\xc5J\xf0\xc5\xc7\xd9hi\xc8\xc6\x9b-\xe9\xf1.\x1dE=\x117n\x88^\x9a\x927\x0f{r\xfe\xe3\xae\xf9\x16\x98=0\x99\xa0\xbd\x03\nK\xeaI\x83>\xe4\xbd\x98\x89Ub\xf2\xad\xdb\\\xf62\t\x10W\x80\x16\aJB\xf9\x1c\x06\x98+\xa7\xcf\x1c\xa7j\xea\xf8\xf0\x1ak\x98$\xd8r\x8c;_S=N\xe7\xba\x8e_\xd2kS\x177p^#\x8b-\xbb;H\xf5v\xb1@\xc12\x9d\xe4\xe4c\xa1\xf1\xb8\xce\x0e.\x8aox\xec)\xf3\x89\xe4\xa4|\xc5\xa9\xa8\xc4\x15;\xc3W.\x1a\xb2\xb3\x15\x9a9\xf1\xa9\xb9\x04e\xd21\xab\x8e(-S\x1d|\x8320\xb2\xd7L\x8b\'\n\xfa7`2D\xf1\x94\x16\xa9\r\x15K\xde\x01\x94?\x97y \x95\xdc\x04\xaf\x96\xd9\x83\x0e2%\xed\xf8E\f\x01A\x88\x897\f\x03\v\xed\x8d\xdc\x9elg\xd11\xac\xfbY\xcbj!\xae\xb7:F\x0e\x83\xd5\xdd\xd7\x94\xea\x00\x00\x00\x00\x00\x00\x97\x9b\x062\x82\x01\x90\x04\xe1\xa6K\v\xe1g\xd5i\"q\xfa\xe7t\xb2\xd0W4\x04\x1a\x1f\xb6L\xc7\t\x18J\xb2Zp\x06J\xa3\xcc\v\xcc\x06\xd2M\x06\x17]\xa3cX\\\x1e\x83\xf0Hm\x83%\x91Q \xf9\xecX\xb2\x10z\xee\"\xfa{U\xb2a\x16\xae\xab\xac\v\xe1(\x13\"\xee$\x8f\xe1\xdd\fC\xfa3}b\x9e\xffsSv\xaf', 0x6e93ebbbcc088cf2, 0x2, 0x0) (async) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x40004) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 11m28.352836808s ago: executing program 1 (id=119): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x8) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x0, 0xcf1, 0x120a, r0, 0x5, '\x00', r5, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x6}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11m27.87785095s ago: executing program 1 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x40804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffd55, 0x104, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback={0x1000000000000}}, @typed={0x0, 0x9d, 0x0, 0x0, @uid}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080035000001"], 0x44}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031405c700a1e527ea4bd85d380021bd7000fbdbdf250900020073797a320000000008004100727865000432170000000000000000000000008ef69445884fabf2ffeea6dcacb847a0935277d9c136435c5bb4091750f41bcbc5ac24f2cb59e3b688a82229f5"], 0x38}}, 0x800) 11m27.768495358s ago: executing program 32 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x40804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffd55, 0x104, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback={0x1000000000000}}, @typed={0x0, 0x9d, 0x0, 0x0, @uid}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080035000001"], 0x44}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031405c700a1e527ea4bd85d380021bd7000fbdbdf250900020073797a320000000008004100727865000432170000000000000000000000008ef69445884fabf2ffeea6dcacb847a0935277d9c136435c5bb4091750f41bcbc5ac24f2cb59e3b688a82229f5"], 0x38}}, 0x800) 8m51.507628304s ago: executing program 3 (id=616): r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffecb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x25) sendto$packet(r1, &(0x7f0000000280)="647ea944a227cbaed0f21aec93f6350c741dcc3255951e9ddd3d71e4e0c9", 0x1e, 0x4, &(0x7f0000000380)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000080)={0x9, @meta={0x50314b52, 0x18ec3fef, 0xa7ec, 0x70f3, 0x4acb0ec9}}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000003c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') close_range(r5, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c04c160440100b5b94c00000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0xffffffffffffffce}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4095}, 0x40000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c40, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 8m50.972793282s ago: executing program 3 (id=619): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) r3 = gettid() tkill(r3, 0x12) rt_sigsuspend(&(0x7f0000000040)={[0x4]}, 0x8) 8m49.786236004s ago: executing program 3 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000fbff00000200000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec00c9e9b98602000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2146}, 0x4c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r7 = dup(r6) read(r7, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r7, &(0x7f0000008180)={0x2020}, 0xfffffdfc) setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000200)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0xffff, 0x10}, {0xf}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND_TUNE_MODE(r12, 0x6f51, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r10, 0x8}, 0x80, &(0x7f00000034c0)}, 0x8801) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) accept4$x25(r9, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x800) 8m49.150556644s ago: executing program 3 (id=628): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r0, 0x20, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_IES={0x48, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x7, 0x9, 0x3, 0x7, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x8000, 0x7fff, 0x0, 0x8, 0x3, 0x4, 0x8ed2, 0xbd9, 0xcc4a, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x4, 0x6, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x8001, 0x7f, 0x1ff, 0x1, 0x4, 0x9f8b]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x6c}}, 0x0) 8m48.973408936s ago: executing program 3 (id=629): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f00000003c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='isp1301 -x', 0xa) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x13, r2}, 0xfffffffffffffe57) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x674, 0x49c, 0x0, 0xffffffff, 0xc8, 0x49c, 0x5ac, 0x5ac, 0xffffffff, 0x5ac, 0x5ac, 0x5, &(0x7f0000000280), {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x7fff}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff, 0x7f800000, 0xffffffff], 'veth0_to_hsr\x00', 'geneve0\x00', {}, {0xff}, 0x0, 0x9, 0x2, 0x8}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc4}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff000000, 0xff, 0xff], @ipv4=@broadcast, [0xffffff00, 0xff, 0xffffffff], @ipv4=@broadcast, [0x0, 0xffffff00, 0xff000000], 0xfa, 0x7, 0x33, 0x4e24, 0x4e23, 0x4e20, 0x4e24, 0x208, 0x3004}, 0x181, 0x240, 0x4e20, 0x4e21, 0x4e21, 0x4e22}}, @common=@rt={{0x138}, {0x80000000, [0x8, 0x2], 0x8, 0x30, 0x7, [@dev={0xfe, 0x80, '\x00', 0xb}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private1], 0x8}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@local, @ipv6=@local, @gre_key=0x49b, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv6=@mcast2, @ipv6=@local, @icmp_id=0x65, @gre_key=0x6}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@eui64={{0x24}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@loopback, @ipv4=@broadcast, @icmp_id=0x64, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6d0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) r7 = syz_clone(0x100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRES32=r8, @ANYRES16=r5], 0x3c}}, 0x404c840) socket$nl_generic(0x10, 0x3, 0x10) 8m47.777212909s ago: executing program 3 (id=635): io_setup(0x6, &(0x7f0000000180)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$random(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x400000}]) 8m32.736896018s ago: executing program 33 (id=635): io_setup(0x6, &(0x7f0000000180)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$random(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x400000}]) 6m57.123127365s ago: executing program 5 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m53.188710222s ago: executing program 5 (id=1022): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 6m49.071750846s ago: executing program 5 (id=1041): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x144}}, 0x4050) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0ca93082f25d87755f4", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000000000008001b0000000000"], 0x3b}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000b80)=ANY=[@ANYRES16, @ANYRESDEC, @ANYBLOB="e08060fec96c06ba963f6ccd619b02337aba1e5eaa4be25709d7"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r2, 0x0, 0x8) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0) write(r5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x3, 0xda000000, {{0x5, 0x4, 0x1, 0x10, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1}}}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) 6m47.655941573s ago: executing program 5 (id=1045): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0xc201}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) fsmount(0xffffffffffffffff, 0x1, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) 6m47.015502674s ago: executing program 5 (id=1048): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$unix(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x20004044}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000011, 0x2000, 0x2f93) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 6m46.077981323s ago: executing program 5 (id=1053): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) mprotect(&(0x7f0000add000/0x3000)=nil, 0x3000, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 6m30.896266019s ago: executing program 34 (id=1053): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) mprotect(&(0x7f0000add000/0x3000)=nil, 0x3000, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4m41.486162103s ago: executing program 6 (id=1582): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x80503d0a, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x14, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}, 0x94) r6 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x2, 0x20, 0xa0, 0x6c}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2, 0x0, 0x0, 0x100}}, 0xe8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) 4m39.033835622s ago: executing program 6 (id=1587): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000300)={{0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, {@loopback, 0x22b8, 0x1, 0x1}}, 0x44) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0 1\n', 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000800)='hello\x00', 0x6, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r4, &(0x7f0000000a00)='1\n', 0x2) sendto$inet(r3, &(0x7f0000000b00)='world\x00', 0x6, 0x0, &(0x7f0000000c00)={0x2, 0x22b8, @loopback}, 0x10) 4m38.684148921s ago: executing program 6 (id=1590): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 4m38.574635281s ago: executing program 6 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x33) ioctl$BLKZEROOUT(r0, 0xc01070ce, 0x0) 4m38.498358968s ago: executing program 6 (id=1593): r0 = socket$kcm(0x29, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x400}}, 0x10) readlink(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0)=""/63, 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESOCT, @ANYBLOB="000000000000000000000000000010"], 0x50) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140400001000010700000000fbdbdf250d0035dd1f0000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000014) 4m38.23015922s ago: executing program 6 (id=1594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x401, 0xa733, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000600)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @loopback}}}, 0x108) socket(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) 4m22.732303313s ago: executing program 35 (id=1594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x401, 0xa733, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000600)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @loopback}}}, 0x108) socket(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) 2m5.200907139s ago: executing program 4 (id=2894): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) 2m5.128198536s ago: executing program 4 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r1, 0x1, 0x803, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) 2m5.05063925s ago: executing program 4 (id=2897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xa, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8'], 0x6e) 2m5.037105906s ago: executing program 4 (id=2898): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x3, 0x7, 0x101, 0x7, 0x4, 0x6, 0x2b, 0x5, 0x1000}}, 0x43) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000600)={0x5, 0xf3, &(0x7f0000000500)="3cd5a5b5ac1ddc946e33b805c33de280c8156b07ebbef9fb6f431f57c62549955bcde945daccd7d1fc678b621072b9e25798850444ad627c1eb38ff0dee02ac2213ceea785e6e86311118efa7939f1b2843cdabecc60e0af856ac2e00bc08bbc1f7d33f11e7e4fd0be667422b0cd75b01e760a93968371e2fb0061814875f7e9d46410a4ccf7073c2d9ab560d023701cb134e6f28b57fa79cdcadb7571d88992a7efc2d8d49f0e9d2d965aa30332242ed2de1bef4d99d4775b8f93a131ee2f1c09be86e342e7b6d882de942fbb5301b40f60b725f1d7cc5c5b1495e9e59c81c4318665ffee153474a4e0582f5689ba695247f6"}) fcntl$notify(r5, 0x402, 0x1a) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x80, 0x9, 0x1000, {{0x34, 0x4, 0x2, 0x22, 0xd0, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @remote, {[@lsrr={0x83, 0x23, 0x26, [@remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @local, @empty, @multicast1]}, @cipso={0x86, 0x36, 0x1, [{0x7, 0x12, "d9e5dd32532ad29ad504c20833f5d38f"}, {0x1, 0xf, "d50ad6b29f74f87ebfbdcf553e"}, {0x1, 0x8, "c75584269547"}, {0x1, 0x4, "9f27"}, {0x2, 0x3, "e9"}]}, @end, @end, @ssrr={0x89, 0xf, 0x6b, [@dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010101]}, @rr={0x7, 0x17, 0xaf, [@multicast1, @empty, @empty, @loopback, @multicast2]}, @cipso={0x86, 0x39, 0x1, [{0x0, 0xa, "b75088fe71967649"}, {0x6, 0x5, "956a78"}, {0x0, 0x12, "1e1fa79564f169a0d7ed2275032c8367"}, {0x0, 0x12, "79f4d4ff165b16a1b49bebd5f73e98a9"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x10, 0x60, 0x7, 0x1, @mcast2, @empty, 0x1, 0x700, 0x3, 0x9}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mkdir(&(0x7f0000000140)='./control\x00', 0x111) r10 = inotify_init1(0x800) inotify_add_watch(r10, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010800000004fc02256fad34ffffff00004c00", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b000000000005001000050000000800280029450000"], 0x38}, 0x1, 0xffffa888}, 0x20000880) 2m4.450438656s ago: executing program 4 (id=2906): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r1, &(0x7f0000000280)='1', 0x1) getpid() r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x4207, r2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) 2m4.390774769s ago: executing program 4 (id=2907): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x2, 0x12, 0xf1, 0x400000000050, 0x12, 0x5, 0x0, 0x1d497c23, 0xffffffffffff9a66, 0x6, 0x0, 0xbdb], 0x4, 0x43100}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000740)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0xdea, 0xfffffffffffffffb, 0xd4, 0x7, 0x0, 0x5, 0xff, 0x400006, 0xffffffff80000004], 0x0, 0x10002}) ioctl$KVM_RUN(r2, 0xae80, 0xf8) 1m49.426111344s ago: executing program 36 (id=2907): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x2, 0x12, 0xf1, 0x400000000050, 0x12, 0x5, 0x0, 0x1d497c23, 0xffffffffffff9a66, 0x6, 0x0, 0xbdb], 0x4, 0x43100}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000740)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0xdea, 0xfffffffffffffffb, 0xd4, 0x7, 0x0, 0x5, 0xff, 0x400006, 0xffffffff80000004], 0x0, 0x10002}) ioctl$KVM_RUN(r2, 0xae80, 0xf8) 7.784845761s ago: executing program 7 (id=3665): ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) chmod(0x0, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x2, 0x8001, 0x4}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000003a40)=[{0x0}, {&(0x7f0000000880)="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", 0x690}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000010000000800000040"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) 7.652271151s ago: executing program 8 (id=3668): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) 7.316629962s ago: executing program 7 (id=3670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x411, 0x70bd28, 0x0, {0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80785659, &(0x7f0000000340)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r3, &(0x7f0000000980), 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000600)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x2b}, {&(0x7f0000000280)}, {&(0x7f0000000500)="dc113275f3a961f4d54ff7b77b8114ac6e21861a524a2b61d614eea45d2910ebf9f747f0f8bb67e646d75f20d43fbe0ba1c0999904d953489b1fccef91ff32298c2e2b077fe73222427da6f1a4209f0d2393857adb0a64749460456764a267302e8c0d1bf319229cbfd00ded93d1ba97489bc160c7f5020a364b042efcd1c40676f7b610e52289d1b0529338e53c7c46968075e4a33b0a65939942d2a32f3a39b140b24a3fd22924713f366ee5dc152c3236f2810320894147c4e335782e6615f58b1301c371a09f5b76a0c4ccbd4c61044d88dc22750ba3b6788c4609eedab9da8a"}], 0x2) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) clock_settime(0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x31, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r9}, {}, {0x46, 0x0, 0x0, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000b77d521476c8a1c35a53cbc3af5cc0c556102b417571474072b3e9b16dda3a9ca5076266aab9d517d52709c6cefcd3da1fd723c3e25ebbd43f827d582fff946306a67822ffc394b88756ba60c0a03f13d24e7b5d917277d915b9aada635f3b19dc1db947c91f83e61a59fcdbf3388a276cf4b0311afd243fb02e7d747ddb95627c19ce7106446ce8da954f5d8c7a34c5bba556600486b861bf8f6db7659c053c23b6eede7652b7e1da8cabb5c74ee9ec521f4a02d429f2957242c2ee0a4b73", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES64=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES16=r7, @ANYBLOB="1f003300d000000008021100000108"], 0x3c}}, 0x5) 6.999464301s ago: executing program 2 (id=3671): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADAUDIO(r2, 0x31e, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x1c, 0x10, 0x41, 0x5}}) write$vhost_msg(r5, &(0x7f00000002c0)={0x1, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x44) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x485b, 0x9, 0x8, 0x6, 0x0, 0xffffffff, 0xfaa, 0x9}}) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 020'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) 6.648996686s ago: executing program 8 (id=3672): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADAUDIO(r2, 0x31e, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x1c, 0x10, 0x41, 0x5}}) write$vhost_msg(r5, &(0x7f00000002c0)={0x1, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x44) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x485b, 0x9, 0x8, 0x6, 0x0, 0xffffffff, 0xfaa, 0x9}}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) 4.044026469s ago: executing program 8 (id=3675): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/63, 0x3f}, 0x10002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4107, 0x100b}], 0x1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0xfaf70000, @dev={0xfe, 0x80, '\x00', 0x21}, 0xe0000000}, {0xa, 0x4e20, 0x3ff, @remote, 0x5}, 0x0, {[0xc, 0xfff, 0x7f, 0xcea, 0x2, 0x3, 0x9e2, 0x6]}}, 0x5c) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.043924769s ago: executing program 2 (id=3676): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000001200)="80006466d3805699", 0x8, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x7fff, @remote, 0xffff}, 0x1c) (fail_nth: 1) 4.043417401s ago: executing program 7 (id=3677): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd, 0x4}, @jmp={0x5, 0x0, 0x0, 0x0, 0x8, 0x4, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, r2, 0xc}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x20050800) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r7, r7, 0x7, 0x2, &(0x7f0000000040)='9f', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) close(r5) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x7fffffff) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r8, &(0x7f0000000040)='oom_score_a|j & 1', 0x11) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9, 0x6}}, 0x30) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) 3.946994207s ago: executing program 2 (id=3678): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$kcm(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="6dba5609be70662984abcde8400fa5ab343d460d3a0de42261d1d79efa462c02a5b92705d8776eeb9667358cb861f5ae10125f402395fd4797f604ccfb1f288a6b8df702b437ac9b3ac54076b82c8e762fa404ef58a01694a215cccbc98dc207ac8a00"/110, 0x6e}, {&(0x7f00000013c0)="962e604d9e1c1a49cb003d6966747685af1b1af7e184d3fe5da93e9288d222ad07a32340af556e4c6198d567107655c111c6f189f7b55e0d835d5287a91f2d59ce6bbcb694de0a106e102b778ddbfa574e6b0fea7f105df82b84a63a92c2a6780218de", 0x63}], 0x3, &(0x7f0000001480)=[{0x100c, 0x29, 0x7, "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"}, {0x68, 0x10c, 0x9, "a94daa158030cd0128329a3c7bbf76b1e48b12e4d9d55317ed0cfaf8e6aacc7356d461ec68403de351fe875edabcc9ad77513bc3a35c316699f4e2bd5295ea343fb09747603f0caae5531154fc91c64b37ef8bdf258a0ec914"}, {0x28, 0x107, 0x3, "03354189535248033820c675950d703c32d5f8cadb05772caa0f"}, {0xfc, 0x119, 0x7, "44470bb2014e483c9ab609c0c7ef921abb9c0ea1c8a28260e01a01bf5e58798fac85eff4fd0b708db68f2b3be9cd087562e0cff31459a555bf87338913d643ead7fb69ee645bf866f06df0993312ed005e09bb997ad9a8e0de2f0f2dea68876cdc251b13c914c6a4afe29e5153bb2dd2d68eb419a4db3f9680edc893b7e06dd96e5b3f318584504171462bdbade198000ee9b996a2210afd90261fe9494cbcef1f4892ba87c291197d1f9c6feca20e68c8f4dbcfacb99f7a097b2caf8809bfa6996b61c613e68d38f6681210142a64dbe668a224e659393889af55e83e9d5f5c3f2c1d65563d993700d12c90f5a1"}, {0xa8, 0x0, 0x100, "d5f50b3f4c5e6a714ccdeec2b9912496153a9d5007ffecadc7ce2714957065bfc8db80613f6dca9a55971f0e3b44ff93c4270c73fa4e341fd4f7792e182a8341aab8fab20603855301964eefad10b20d444d37de4357e6ee8010b0c389d1a313acc2588598acfa66386eb27086cd505a0134a24153f2deebe9beca60103344815b6b68353dbf8ef58a408f72358235268d76cd8208d63c05248f"}], 0x1240}, 0x20048080) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x0, 0x84, 0x4, 0x2000009, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}]}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d000100000100000000000000"], 0x1c}}, 0x0) 3.773022647s ago: executing program 2 (id=3679): socket(0x10, 0x3, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8180, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x1, 0xd5, 0x7, 0x5, 0x6, 0x400, 0x0, 0x76}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008881}, 0x4040840) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) 3.654573303s ago: executing program 0 (id=3680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x494, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff1, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2.638441828s ago: executing program 2 (id=3681): syz_usb_connect(0x5, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="1201100126ad12081304046a2b27010203010902"], 0x0) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8abd, 0xc0, 0x0, 0x128, 0x0, r0}, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0xffffff81}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000500)={0x0, 0x2, {0x0, 0x0, 0x3}}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 2.454560699s ago: executing program 8 (id=3682): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x1}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setrlimit(0x7, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.144764424s ago: executing program 0 (id=3683): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000300)="ba", 0x1}], 0x3) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x6, 0x10089, 0xffffffff, 0x2}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) 952.234941ms ago: executing program 8 (id=3684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x411, 0x70bd28, 0x0, {0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80785659, &(0x7f0000000340)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r3, &(0x7f0000000980), 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000600)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x2b}, {&(0x7f0000000280)}, {&(0x7f0000000500)="dc113275f3a961f4d54ff7b77b8114ac6e21861a524a2b61d614eea45d2910ebf9f747f0f8bb67e646d75f20d43fbe0ba1c0999904d953489b1fccef91ff32298c2e2b077fe73222427da6f1a4209f0d2393857adb0a64749460456764a267302e8c0d1bf319229cbfd00ded93d1ba97489bc160c7f5020a364b042efcd1c40676f7b610e52289d1b0529338e53c7c46968075e4a33b0a65939942d2a32f3a39b140b24a3fd22924713f366ee5dc152c3236f2810320894147c4e335782e6615f58b1301c371a09f5b76a0c4ccbd4c61044d88dc22750ba3b6788c4609eedab9da8a"}], 0x2) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) clock_settime(0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x31, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r9}, {}, {0x46, 0x0, 0x0, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000b77d521476c8a1c35a53cbc3af5cc0c556102b417571474072b3e9b16dda3a9ca5076266aab9d517d52709c6cefcd3da1fd723c3e25ebbd43f827d582fff946306a67822ffc394b88756ba60c0a03f13d24e7b5d917277d915b9aada635f3b19dc1db947c91f83e61a59fcdbf3388a276cf4b0311afd243fb02e7d747ddb95627c19ce7106446ce8da954f5d8c7a34c5bba556600486b861bf8f6db7659c053c23b6eede7652b7e1da8cabb5c74ee9ec521f4a02d429f2957242c2ee0a4b73", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES64=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES16=r7, @ANYBLOB="1f003300d000000008021100000108"], 0x3c}}, 0x5) 951.971696ms ago: executing program 0 (id=3685): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x1, 0x0) write(r0, &(0x7f0000000940)='1', 0x1) write(r0, &(0x7f0000000940)='2', 0x1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1}, 0x2) 949.923396ms ago: executing program 7 (id=3686): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000010000000800000040"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) 909.378551ms ago: executing program 0 (id=3687): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xd2d5, 0x82) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$proc_mixer(0xffffff9c, &(0x7f0000000080)='/proc/asound/card3/oss_mixer\x00', 0x101080, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) writev(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r1, 0x0, 0x4) 861.40977ms ago: executing program 7 (id=3688): mkdir(0x0, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 817.474526ms ago: executing program 7 (id=3689): syz_open_dev$video(&(0x7f0000000080), 0x4, 0x64100) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x40, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000002100)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)=[0x0], 0x1}, 0x58) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x100000}) syz_open_dev$vbi(0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)={'b', ' *:* ', 'r\x00'}, 0x8) mkdirat$cgroup(r2, &(0x7f00000001c0)='syz1\x00', 0x1ff) write$cgroup_devices(r3, &(0x7f0000000540)={'c', ' *:* ', 'w\x00'}, 0x8) r4 = socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0xfffffffc, 0x5, "42341f9b1000007e4f00"}) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) 640.190454ms ago: executing program 8 (id=3690): socket(0x10, 0x3, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8180, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x1, 0xd5, 0x7, 0x5, 0x6, 0x400, 0x0, 0x76}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008881}, 0x4040840) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) 531.755593ms ago: executing program 0 (id=3691): openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVen:Di', 0x0) 380.369075ms ago: executing program 0 (id=3692): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADAUDIO(r2, 0x31e, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x1c, 0x10, 0x41, 0x5}}) write$vhost_msg(r5, &(0x7f00000002c0)={0x1, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x44) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x485b, 0x9, 0x8, 0x6, 0x0, 0xffffffff, 0xfaa, 0x9}}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) 0s ago: executing program 2 (id=3693): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x800081fd, 0x2001, 0x4001}, 0x1c) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x66) r3 = socket(0x1e, 0xa, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) (async) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7fffffff, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x102) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) (async) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000400), 0x109000, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000090000000c06000007000000152504"], 0x50) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80804120, &(0x7f00000022c0)) kernel console output (not intermixed with test programs): [ 706.341448][T18140] ? ksys_write+0x1ac/0x250 [ 706.341471][T18140] ? __pfx_ksys_write+0x10/0x10 [ 706.341494][T18140] __ia32_sys_connect+0x71/0xb0 [ 706.341518][T18140] ? lockdep_hardirqs_on+0x7d/0x110 [ 706.341539][T18140] __do_fast_syscall_32+0x13a/0x8b0 [ 706.341560][T18140] ? lockdep_hardirqs_on+0x7d/0x110 [ 706.341583][T18140] do_fast_syscall_32+0x32/0x70 [ 706.341623][T18140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 706.341644][T18140] RIP: 0023:0xf706efec [ 706.341663][T18140] Code: Unable to access opcode bytes at 0xf706efc2. [ 706.341672][T18140] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 706.341691][T18140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 706.341704][T18140] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 706.341714][T18140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.341724][T18140] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 706.341734][T18140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.341759][T18140] [ 707.197448][T18160] nvme_rdma: malformed address passed: 127.0.0.:4420 [ 707.354439][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 707.354464][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 707.354509][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 707.354519][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 707.354529][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 707.354538][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 707.354620][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 707.354633][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 707.354642][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 707.354651][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 707.354660][T18169] jffs2: Further such events for this erase block will not be printed [ 707.354730][T18169] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 707.354963][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 707.354978][T18169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 707.370316][T18169] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 707.370336][T18169] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 707.660588][T18173] veth1_macvtap: left promiscuous mode [ 707.660636][T18173] macsec0: entered promiscuous mode [ 707.664284][T18173] veth1_macvtap: entered promiscuous mode [ 707.664669][T18173] macsec0: left promiscuous mode [ 708.060656][T12069] Bluetooth: hci4: unexpected event for opcode 0x080d [ 708.522782][T18190] nvme_rdma: malformed address passed: 127.0.0.:4420 [ 708.724927][T18200] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3444'. [ 708.757579][T18197] nvme_rdma: malformed address passed: 127.0.0.:4420 [ 708.832368][T18203] netlink: 'syz.7.3444': attribute type 1 has an invalid length. [ 708.881397][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 708.881424][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 708.881471][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 708.881482][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 708.881492][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 708.881502][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 708.881585][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 708.881598][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 708.881607][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 708.881617][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 708.881626][T18206] jffs2: Further such events for this erase block will not be printed [ 708.881699][T18206] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 708.881877][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 708.881887][T18206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 708.903786][T18203] 8021q: adding VLAN 0 to HW filter on device bond4 [ 708.926632][T18206] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 708.926644][T18206] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 709.221876][T18214] FAULT_INJECTION: forcing a failure. [ 709.221876][T18214] name failslab, interval 1, probability 0, space 0, times 0 [ 709.221902][T18214] CPU: 0 UID: 0 PID: 18214 Comm: syz.0.3447 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.221919][T18214] Tainted: [L]=SOFTLOCKUP [ 709.221924][T18214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 709.221931][T18214] Call Trace: [ 709.221936][T18214] [ 709.221941][T18214] dump_stack_lvl+0x100/0x190 [ 709.221961][T18214] should_fail_ex.cold+0x5/0xa [ 709.221978][T18214] should_failslab+0xc2/0x120 [ 709.221996][T18214] __kmalloc_cache_noprof+0x91/0x6d0 [ 709.222009][T18214] ? x509_cert_parse+0x9a/0x910 [ 709.222028][T18214] x509_cert_parse+0x9a/0x910 [ 709.222046][T18214] x509_key_preparse+0x65/0x9c0 [ 709.222065][T18214] asymmetric_key_preparse+0xce/0x1d0 [ 709.222078][T18214] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 709.222093][T18214] __key_create_or_update+0x463/0xe30 [ 709.222110][T18214] ? __pfx___key_create_or_update+0x10/0x10 [ 709.222125][T18214] ? lookup_user_key+0x3f3/0x1300 [ 709.222144][T18214] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 709.222167][T18214] key_create_or_update+0x42/0x60 [ 709.222188][T18214] __do_sys_add_key+0x2e8/0x460 [ 709.222205][T18214] ? __pfx___do_sys_add_key+0x10/0x10 [ 709.222220][T18214] ? fput+0x7c/0x100 [ 709.222238][T18214] ? __pfx_ksys_write+0x10/0x10 [ 709.222255][T18214] __do_fast_syscall_32+0x13a/0x8b0 [ 709.222270][T18214] ? lockdep_hardirqs_on+0x7d/0x110 [ 709.222286][T18214] do_fast_syscall_32+0x32/0x70 [ 709.222301][T18214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.222316][T18214] RIP: 0023:0xf706efec [ 709.222331][T18214] Code: Unable to access opcode bytes at 0xf706efc2. [ 709.222336][T18214] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 709.222348][T18214] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 709.222356][T18214] RDX: 0000000080000c40 RSI: 00000000000001d8 RDI: 00000000ffffffff [ 709.222363][T18214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.222369][T18214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.222376][T18214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.222391][T18214] [ 709.318472][T18216] program syz.0.3448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.933708][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 709.933725][ T43] audit: type=1800 audit(1790912259.887:3974): pid=18237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34478 res=0 errno=0 [ 710.053732][T18246] FAULT_INJECTION: forcing a failure. [ 710.053732][T18246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.053768][T18246] CPU: 1 UID: 0 PID: 18246 Comm: syz.8.3455 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.053795][T18246] Tainted: [L]=SOFTLOCKUP [ 710.053803][T18246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 710.053816][T18246] Call Trace: [ 710.053824][T18246] [ 710.053832][T18246] dump_stack_lvl+0x100/0x190 [ 710.053866][T18246] should_fail_ex.cold+0x5/0xa [ 710.053894][T18246] _copy_from_user+0x2e/0xd0 [ 710.053924][T18246] compat_wext_handle_ioctl+0xc4/0x220 [ 710.053950][T18246] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 710.053978][T18246] ? do_vfs_ioctl+0x226/0x13e0 [ 710.054002][T18246] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 710.054028][T18246] compat_sock_ioctl+0x381/0x760 [ 710.054060][T18246] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 710.054087][T18246] ? hook_file_ioctl_common+0x140/0x440 [ 710.054114][T18246] ? __fget_files+0x21f/0x3d0 [ 710.054143][T18246] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 710.054169][T18246] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 710.054194][T18246] __do_fast_syscall_32+0x13a/0x8b0 [ 710.054220][T18246] ? lockdep_hardirqs_on+0x7d/0x110 [ 710.054246][T18246] do_fast_syscall_32+0x32/0x70 [ 710.054271][T18246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 710.054296][T18246] RIP: 0023:0xf7f13fec [ 710.054320][T18246] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 710.054329][T18246] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 710.054350][T18246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b18 [ 710.054383][T18246] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 710.054395][T18246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 710.054407][T18246] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 710.054420][T18246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 710.054447][T18246] [ 710.159524][ T2422] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 710.320035][ T2422] usb 7-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice=80.00 [ 710.321044][ T2422] usb 7-1: config 0 interface 0 has no altsetting 0 [ 710.321067][ T2422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.322482][ T2422] usb 7-1: config 0 descriptor?? [ 710.324291][ T43] audit: type=1800 audit(1790912260.277:3975): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245003 res=0 errno=0 [ 710.325316][ T43] audit: type=1800 audit(1790912260.277:3976): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245013 res=0 errno=0 [ 710.326641][ T43] audit: type=1800 audit(1790912260.277:3977): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245042 res=0 errno=0 [ 710.330817][ T43] audit: type=1800 audit(1790912260.287:3978): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245020 res=0 errno=0 [ 710.332241][ T43] audit: type=1800 audit(1790912260.287:3979): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=245021 res=0 errno=0 [ 710.333080][ T43] audit: type=1800 audit(1790912260.287:3980): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=245022 res=0 errno=0 [ 710.500584][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 710.500737][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 710.500797][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 710.500811][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 710.500823][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 710.500837][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 710.500944][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 710.500962][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 710.500976][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 710.500992][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 710.501006][T18262] jffs2: Further such events for this erase block will not be printed [ 710.501105][T18262] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 710.501363][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 710.501377][T18262] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 710.512544][T18262] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 710.512558][T18262] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 710.709774][ T9191] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 710.890322][ T9191] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 710.892265][ T9191] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 710.892284][ T9191] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 710.892304][ T9191] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.898612][T18260] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 710.900984][ T9191] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 710.919713][ T43] audit: type=1800 audit(1790912260.877:3981): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245093 res=0 errno=0 [ 710.948853][ T43] audit: type=1800 audit(1790912260.897:3982): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245122 res=0 errno=0 [ 710.957094][ T43] audit: type=1800 audit(1790912260.907:3983): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245100 res=0 errno=0 [ 711.241597][ T57] usb 13-1: USB disconnect, device number 14 [ 711.415804][T18273] XFS (nbd0): SB validate failed with error -5. [ 711.435333][T18273] XFS (nbd0): io_pages changed from 0 to 1024, not restoring. [ 711.435354][T18273] XFS (nbd0): ra_pages changed from 0 to 64, not restoring. [ 711.604095][T18280] Bluetooth: MGMT ver 1.23 [ 711.604130][T18280] Bluetooth: hci0: unsupported parameter 5135 [ 711.604142][T18280] Bluetooth: hci0: unsupported parameter 8192 [ 711.604153][T18280] Bluetooth: hci0: unsupported parameter 5135 [ 711.604164][T18280] Bluetooth: hci0: unsupported parameter 8192 [ 711.741839][ T2422] usb 7-1: string descriptor 0 read error: -71 [ 711.746398][ T2422] usbhid 7-1:0.0: can't add hid device: -71 [ 711.746462][ T2422] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 711.747892][ T2422] usb 7-1: USB disconnect, device number 35 [ 711.818083][T18296] input: syz1 as /devices/virtual/input/input40 [ 711.926777][T18299] veth1_macvtap: left promiscuous mode [ 711.926814][T18299] macsec0: entered promiscuous mode [ 711.931143][T18299] veth1_macvtap: entered promiscuous mode [ 711.931399][T18299] macsec0: left promiscuous mode [ 712.010955][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 712.011004][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 712.011072][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 712.011083][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 712.011092][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 712.011101][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 712.011180][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 712.011192][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 712.011201][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 712.011210][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 712.011218][T18302] jffs2: Further such events for this erase block will not be printed [ 712.011289][T18302] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 712.011469][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 712.011478][T18302] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 712.018520][T18302] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 712.018532][T18302] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 712.077623][T12069] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 712.077673][T12069] Bluetooth: hci4: Injecting HCI hardware error event [ 712.079900][ T5744] Bluetooth: hci4: hardware error 0x00 [ 712.723781][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 712.723808][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 712.723857][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 712.723867][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 712.723878][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 712.723888][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 712.723975][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 712.723989][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 712.723998][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 712.724008][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 712.724017][T18308] jffs2: Further such events for this erase block will not be printed [ 712.724093][T18308] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 712.724280][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 712.724291][T18308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 712.743382][T18308] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 712.743402][T18308] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 713.785922][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3478'. [ 713.966683][T18334] veth1_macvtap: left promiscuous mode [ 713.966711][T18334] macsec0: entered promiscuous mode [ 713.972176][T18334] veth1_macvtap: entered promiscuous mode [ 713.972411][T18334] macsec0: left promiscuous mode [ 714.149640][ T5744] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 714.239096][T18341] veth1_macvtap: left promiscuous mode [ 714.239121][T18341] macsec0: entered promiscuous mode [ 714.246983][T18341] veth1_macvtap: entered promiscuous mode [ 714.247344][T18341] macsec0: left promiscuous mode [ 714.419951][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 714.419977][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 714.420025][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 714.420035][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 714.420045][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 714.420258][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 714.421408][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 714.421428][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 714.421438][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 714.421448][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 714.421457][T18343] jffs2: Further such events for this erase block will not be printed [ 714.421531][T18343] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 714.421733][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 714.421745][T18343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 714.454039][T18343] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 714.454055][T18343] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 714.621749][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 714.621776][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 714.621831][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 714.621842][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 714.621851][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 714.621862][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 714.621943][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 714.621956][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 714.621965][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 714.621974][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 714.621983][T18345] jffs2: Further such events for this erase block will not be printed [ 714.622059][T18345] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 714.622237][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 714.622247][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 714.640210][T18345] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 714.640220][T18345] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 714.976030][T18361] fuse: Bad value for 'fd' [ 714.978218][T18361] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 715.087245][T18363] veth1_macvtap: left promiscuous mode [ 715.087272][T18363] macsec0: entered promiscuous mode [ 715.090450][T18363] veth1_macvtap: entered promiscuous mode [ 715.090726][T18363] macsec0: left promiscuous mode [ 715.184076][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 715.184094][ T43] audit: type=1800 audit(1790912265.137:4013): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245797 res=0 errno=0 [ 715.374454][ T43] audit: type=1800 audit(1790912265.327:4014): pid=18368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3493" name="c_srate" dev="configfs" ino=64779 res=0 errno=0 [ 715.420203][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'. [ 715.765721][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 715.765748][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 715.765794][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 715.765804][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 715.765814][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 715.765824][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 715.765909][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 715.765922][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 715.765932][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 715.765942][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 715.765952][T18380] jffs2: Further such events for this erase block will not be printed [ 715.766045][T18380] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 715.766386][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 715.766400][T18380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 715.777979][T18380] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 715.777993][T18380] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 716.778690][ T43] audit: type=1800 audit(1790912266.727:4015): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245816 res=0 errno=0 [ 716.789352][T12069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 716.789893][ T43] audit: type=1800 audit(1790912266.747:4016): pid=18237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245822 res=0 errno=0 [ 716.793593][ T43] audit: type=1800 audit(1790912266.747:4017): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245846 res=0 errno=0 [ 716.795986][T12069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 716.801863][T12069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 716.803972][T12069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 716.806288][T12069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 716.837836][ T43] audit: type=1800 audit(1790912266.787:4018): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245865 res=0 errno=0 [ 716.844326][ T43] audit: type=1800 audit(1790912266.797:4019): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245909 res=0 errno=0 [ 716.854133][T18392] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 716.854157][T18392] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 716.854180][T18392] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 716.868359][T18392] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 716.893148][T18392] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 716.905564][ T43] audit: type=1800 audit(1790912266.857:4020): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245920 res=0 errno=0 [ 716.908947][ T43] audit: type=1800 audit(1790912266.857:4021): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245934 res=0 errno=0 [ 716.921463][ T43] audit: type=1800 audit(1790912266.867:4022): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245876 res=0 errno=0 [ 717.278297][T18421] FAULT_INJECTION: forcing a failure. [ 717.278297][T18421] name failslab, interval 1, probability 0, space 0, times 0 [ 717.278323][T18421] CPU: 0 UID: 0 PID: 18421 Comm: syz.0.3506 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.278339][T18421] Tainted: [L]=SOFTLOCKUP [ 717.278344][T18421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.278351][T18421] Call Trace: [ 717.278355][T18421] [ 717.278360][T18421] dump_stack_lvl+0x100/0x190 [ 717.278380][T18421] should_fail_ex.cold+0x5/0xa [ 717.278395][T18421] should_failslab+0xc2/0x120 [ 717.278412][T18421] __kvmalloc_node_noprof+0x113/0x9b0 [ 717.278428][T18421] ? newary+0x185/0xc30 [ 717.278447][T18421] newary+0x185/0xc30 [ 717.278463][T18421] ? ipcget+0x8aa/0xf50 [ 717.278475][T18421] ? ipcget+0x8aa/0xf50 [ 717.278490][T18421] ipcget+0x909/0xf50 [ 717.278505][T18421] ? __mutex_unlock_slowpath+0x35d/0x930 [ 717.278522][T18421] ? __pfx_ipcget+0x10/0x10 [ 717.278536][T18421] ? __fget_files+0x21f/0x3d0 [ 717.278553][T18421] __ia32_sys_semget+0x1cb/0x260 [ 717.278572][T18421] ? __pfx___ia32_sys_semget+0x10/0x10 [ 717.278588][T18421] ? ksys_write+0x1ac/0x250 [ 717.278602][T18421] ? __pfx_ksys_write+0x10/0x10 [ 717.278618][T18421] __do_fast_syscall_32+0x13a/0x8b0 [ 717.278633][T18421] ? lockdep_hardirqs_on+0x7d/0x110 [ 717.278647][T18421] do_fast_syscall_32+0x32/0x70 [ 717.278662][T18421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 717.278676][T18421] RIP: 0023:0xf706efec [ 717.278689][T18421] Code: Unable to access opcode bytes at 0xf706efc2. [ 717.278694][T18421] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000189 [ 717.278706][T18421] RAX: ffffffffffffffda RBX: 00000000798e2636 RCX: 0000000000000001 [ 717.278713][T18421] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.278719][T18421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 717.278726][T18421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.278732][T18421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.278747][T18421] [ 717.563793][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.943791][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.031582][T18393] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.031673][T18393] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.031801][T18393] bridge_slave_0: entered allmulticast mode [ 718.037783][T18393] bridge_slave_0: entered promiscuous mode [ 718.052333][T18393] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.052467][T18393] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.052601][T18393] bridge_slave_1: entered allmulticast mode [ 718.054042][T18393] bridge_slave_1: entered promiscuous mode [ 718.598365][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.617936][T18393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.620098][T18393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.646056][T18393] team0: Port device team_slave_0 added [ 718.648115][T18393] team0: Port device team_slave_1 added [ 718.702403][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.707453][T18393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.707469][T18393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.707491][T18393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.709039][T18393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.709052][T18393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.718661][T18393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.751504][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 718.751529][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 718.751578][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 718.751591][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 718.751603][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 718.751615][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 718.751726][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 718.751744][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 718.751758][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 718.751771][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 718.751784][T18436] jffs2: Further such events for this erase block will not be printed [ 718.751881][T18436] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 718.752140][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 718.752154][T18436] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 718.763466][T18436] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 718.763481][T18436] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 718.786766][T18393] hsr_slave_0: entered promiscuous mode [ 718.787539][T18393] hsr_slave_1: entered promiscuous mode [ 718.788046][T18393] debugfs: 'hsr0' already exists in 'hsr' [ 718.788060][T18393] Cannot create hsr debugfs directory [ 718.880780][ T5744] Bluetooth: hci3: command tx timeout [ 719.073418][ T13] bridge_slave_1: left allmulticast mode [ 719.073446][ T13] bridge_slave_1: left promiscuous mode [ 719.073614][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.082477][ T13] bridge_slave_0: left allmulticast mode [ 719.082499][ T13] bridge_slave_0: left promiscuous mode [ 719.082671][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.493157][ T13] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 719.493188][ T13] ip6gre1 (unregistering): left promiscuous mode [ 719.596837][T18450] FAULT_INJECTION: forcing a failure. [ 719.596837][T18450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.596860][T18450] CPU: 3 UID: 0 PID: 18450 Comm: syz.8.3511 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.596876][T18450] Tainted: [L]=SOFTLOCKUP [ 719.596880][T18450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 719.596888][T18450] Call Trace: [ 719.596892][T18450] [ 719.596897][T18450] dump_stack_lvl+0x100/0x190 [ 719.596916][T18450] should_fail_ex.cold+0x5/0xa [ 719.596936][T18450] _copy_from_user+0x2e/0xd0 [ 719.596953][T18450] kstrtouint_from_user+0xd6/0x1d0 [ 719.596966][T18450] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 719.596982][T18450] ? lock_acquire+0x1d1/0x380 [ 719.597002][T18450] proc_fail_nth_write+0x83/0x220 [ 719.597016][T18450] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 719.597034][T18450] vfs_write+0x2aa/0x1050 [ 719.597050][T18450] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 719.597063][T18450] ? lock_acquire+0x1d1/0x380 [ 719.597079][T18450] ? __fget_files+0x34/0x3d0 [ 719.597094][T18450] ? __pfx_vfs_write+0x10/0x10 [ 719.597106][T18450] ? find_held_lock+0x2b/0x80 [ 719.597120][T18450] ? __fget_files+0x215/0x3d0 [ 719.597136][T18450] ? __fget_files+0x21f/0x3d0 [ 719.597155][T18450] ksys_write+0x12a/0x250 [ 719.597168][T18450] ? __pfx_ksys_write+0x10/0x10 [ 719.597186][T18450] do_int80_emulation+0x166/0x650 [ 719.597203][T18450] asm_int80_emulation+0x1a/0x20 [ 719.597215][T18450] RIP: 0023:0xf71175ab [ 719.597225][T18450] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 719.597241][T18450] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 719.597253][T18450] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 719.597260][T18450] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 719.597268][T18450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 719.597274][T18450] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 719.597281][T18450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 719.597295][T18450] [ 719.642478][T18452] netlink: 199784 bytes leftover after parsing attributes in process `syz.8.3512'. [ 719.642498][T18452] netlink: 'syz.8.3512': attribute type 1 has an invalid length. [ 719.702515][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 719.767371][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.787627][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.792535][ T13] bond0 (unregistering): Released all slaves [ 719.796998][ T13] bond1 (unregistering): Released all slaves [ 719.805987][ T13] bond2 (unregistering): Released all slaves [ 719.815750][ T13] bond3 (unregistering): Released all slaves [ 719.824115][ T13] bond4 (unregistering): Released all slaves [ 719.841211][T18454] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 719.841235][T18454] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 719.841246][T18454] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 719.902656][ T9] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 719.910694][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 719.910710][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 719.939747][ T9] usb 7-1: string descriptor 0 read error: -22 [ 719.939882][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.942971][ T9] etas_es58x 7-1:1.0: Starting (null) (null) (Serial Number (null)) [ 719.962804][ T9] etas_es58x 7-1:1.0: could not retrieve the product info string [ 720.038157][ T13] IPVS: stopping master sync thread 12608 ... [ 720.083026][ T5453] 8021q: adding VLAN 0 to HW filter on device eth1 [ 720.094726][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 720.179938][ T5844] netdevsim netdevsim7 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.181688][ T5844] netdevsim netdevsim7 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.181806][ T5844] netdevsim netdevsim7 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.181838][ T5844] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.183202][T18458] FAULT_INJECTION: forcing a failure. [ 720.183202][T18458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.183222][T18458] CPU: 2 UID: 0 PID: 18458 Comm: syz.0.3513 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.183238][T18458] Tainted: [L]=SOFTLOCKUP [ 720.183242][T18458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 720.183249][T18458] Call Trace: [ 720.183253][T18458] [ 720.183258][T18458] dump_stack_lvl+0x100/0x190 [ 720.183277][T18458] should_fail_ex.cold+0x5/0xa [ 720.183292][T18458] _copy_from_user+0x2e/0xd0 [ 720.183316][T18458] do_sys_poll+0x345/0xe90 [ 720.183329][T18458] ? find_held_lock+0x2b/0x80 [ 720.183343][T18458] ? is_bpf_text_address+0x8a/0x1a0 [ 720.183360][T18458] ? is_bpf_text_address+0x8a/0x1a0 [ 720.183378][T18458] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 720.183395][T18458] ? __pfx_do_sys_poll+0x10/0x10 [ 720.183409][T18458] ? __kernel_text_address+0xd/0x30 [ 720.183436][T18458] ? lock_acquire+0x1d1/0x380 [ 720.183476][T18458] ? ksys_write+0x190/0x250 [ 720.183489][T18458] ? lock_acquire+0x1d1/0x380 [ 720.183506][T18458] ? set_compat_user_sigmask+0x1d9/0x260 [ 720.183523][T18458] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 720.183541][T18458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 720.183558][T18458] __ia32_compat_sys_ppoll_time32+0x2b6/0x350 [ 720.183576][T18458] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 720.183592][T18458] ? fput+0x7c/0x100 [ 720.183607][T18458] ? ksys_write+0x1ac/0x250 [ 720.183620][T18458] ? __pfx_ksys_write+0x10/0x10 [ 720.183636][T18458] __do_fast_syscall_32+0x13a/0x8b0 [ 720.183650][T18458] ? lockdep_hardirqs_on+0x7d/0x110 [ 720.183664][T18458] do_fast_syscall_32+0x32/0x70 [ 720.183679][T18458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 720.183694][T18458] RIP: 0023:0xf706efec [ 720.183708][T18458] Code: Unable to access opcode bytes at 0xf706efc2. [ 720.183714][T18458] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 720.183725][T18458] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 720.183732][T18458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 720.183739][T18458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 720.183748][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.183757][T18458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 720.183773][T18458] [ 720.307647][T18393] netdevsim netdevsim7 eth20 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.339631][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 720.339651][ T43] audit: type=1800 audit(1790912270.287:4055): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255389 res=0 errno=0 [ 720.339690][ T43] audit: type=1800 audit(1790912270.287:4056): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=255394 res=0 errno=0 [ 720.354588][T18445] etas_es58x 7-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 720.355149][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 720.355971][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 720.356159][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 720.356351][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 720.356532][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 720.356597][T18445] etas_es58x 7-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 720.360212][ T25] usb 7-1: USB disconnect, device number 36 [ 720.361189][ T25] etas_es58x 7-1:1.0: Disconnecting (null) (null) [ 720.376770][ T43] audit: type=1800 audit(1790912270.327:4057): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=215207 res=0 errno=0 [ 720.442222][T18393] netdevsim netdevsim7 eth19 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.478645][ T5453] 8021q: adding VLAN 0 to HW filter on device eth18 [ 720.531431][ T43] audit: type=1800 audit(1790912270.487:4058): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205979 res=0 errno=0 [ 720.612533][T18393] netdevsim netdevsim7 eth18 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.616006][ T43] audit: type=1800 audit(1790912270.567:4059): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255558 res=0 errno=0 [ 720.683834][T18393] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.819325][ T43] audit: type=1800 audit(1790912270.767:4060): pid=18393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26903 res=0 errno=0 [ 720.826773][ T43] audit: type=1800 audit(1790912270.777:4061): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255577 res=0 errno=0 [ 720.862103][T18483] dlm: no locking on control device [ 720.953592][ T5744] Bluetooth: hci3: command tx timeout [ 720.962167][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 720.962192][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 720.962239][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 720.962248][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 720.962258][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 720.962267][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 720.962350][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 720.962363][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 720.962372][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 720.962381][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 720.962390][T18489] jffs2: Further such events for this erase block will not be printed [ 720.962460][T18489] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 720.962641][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 720.962651][T18489] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 721.000360][T18489] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 721.000371][T18489] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 721.054638][ T13] hsr_slave_0: left promiscuous mode [ 721.055144][ T13] hsr_slave_1: left promiscuous mode [ 721.067516][ T13] veth1_macvtap: left promiscuous mode [ 721.067552][ T13] veth0_macvtap: left promiscuous mode [ 721.067689][ T13] veth1_vlan: left promiscuous mode [ 721.067718][ T13] veth0_vlan: left promiscuous mode [ 721.390097][ T13] team0 (unregistering): Port device team_slave_1 removed [ 721.394840][ T13] team0 (unregistering): Port device team_slave_0 removed [ 721.462086][T14380] smc: removing ib device syz2 [ 721.617351][T18393] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 721.621779][T18393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.628825][T18393] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 721.636250][T18393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.642902][T18393] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 721.654066][T18393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.659133][ T25] infiniband syz2: ib_query_port failed (-19) [ 721.666195][T18393] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 721.694891][T18393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.772840][T14380] smbdirect: ib_dev[syz2] removed [ 721.896588][T18393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.973523][T18393] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.985850][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.985899][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.989686][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.989732][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.401828][T18530] veth1_macvtap: left promiscuous mode [ 722.401860][T18530] macsec0: entered promiscuous mode [ 722.421386][T18530] veth1_macvtap: entered promiscuous mode [ 722.421680][T18530] macsec0: left promiscuous mode [ 722.702584][T18536] macsec1: entered promiscuous mode [ 722.826960][T18393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.892036][ T13] IPVS: stop unused estimator thread 0... [ 722.918299][ T43] audit: type=1800 audit(1790912272.867:4062): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256013 res=0 errno=0 [ 722.989091][ T43] audit: type=1800 audit(1790912272.937:4063): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256032 res=0 errno=0 [ 722.991103][ T43] audit: type=1800 audit(1790912272.947:4064): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=256047 res=0 errno=0 [ 722.992436][T18550] input: syz1 as /devices/virtual/input/input41 [ 723.029859][ T5744] Bluetooth: hci3: command tx timeout [ 723.093969][T18393] veth0_vlan: entered promiscuous mode [ 723.098895][T18393] veth1_vlan: entered promiscuous mode [ 723.130583][T18393] veth0_macvtap: entered promiscuous mode [ 723.134234][T18393] veth1_macvtap: entered promiscuous mode [ 723.147455][T18393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.155408][T18393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.193561][ T5844] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.193612][ T5844] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.232102][ T5844] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.232132][ T5844] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.255195][T14380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.255215][T14380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.290939][T14389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.290959][T14389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.480355][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 723.480380][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 723.480424][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 723.480434][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 723.480443][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 723.480453][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 723.480535][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 723.480572][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 723.480581][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 723.480591][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 723.480600][T18566] jffs2: Further such events for this erase block will not be printed [ 723.480684][T18566] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 723.480876][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 723.480885][T18566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 723.488590][T18566] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 723.488602][T18566] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 724.285356][T18569] fuse: Bad value for 'fd' [ 724.286768][T18569] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 724.795945][T18589] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 724.970915][T18592] veth1_macvtap: left promiscuous mode [ 724.970935][T18592] macsec0: entered promiscuous mode [ 724.980059][T18592] veth1_macvtap: entered promiscuous mode [ 724.980219][T18592] macsec0: left promiscuous mode [ 725.109806][ T5744] Bluetooth: hci3: command tx timeout [ 725.348329][T18597] veth1_macvtap: left promiscuous mode [ 725.348352][T18597] macsec0: entered promiscuous mode [ 725.357748][T18597] veth1_macvtap: entered promiscuous mode [ 725.358060][T18597] macsec0: left promiscuous mode [ 725.407405][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 725.407645][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 725.407712][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 725.407729][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 725.407743][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 725.407759][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 725.407875][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 725.407893][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 725.407904][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 725.407922][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 725.407935][T18602] jffs2: Further such events for this erase block will not be printed [ 725.408042][T18602] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 725.408361][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 725.408380][T18602] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 725.424707][T18602] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 725.424723][T18602] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 726.495154][T18619] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3545'. [ 726.953477][T18635] syzkaller0: entered promiscuous mode [ 726.953493][T18635] syzkaller0: entered allmulticast mode [ 726.974719][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3547'. [ 727.091719][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 727.091733][ T43] audit: type=1800 audit(1790912277.047:4075): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16439 res=0 errno=0 [ 727.112328][ T43] audit: type=1800 audit(1790912277.067:4076): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16439 res=0 errno=0 [ 727.133773][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 727.133811][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 727.133875][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 727.133889][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 727.133903][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 727.133918][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 727.134026][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 727.134044][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 727.134059][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 727.134073][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 727.134086][T18644] jffs2: Further such events for this erase block will not be printed [ 727.134189][T18644] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 727.134458][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 727.134473][T18644] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 727.136887][T18239] udevd[18239]: symlink '../../loop8' '/dev/disk/by-diskseq/79.tmp-b7:8' failed: Read-only file system [ 727.154236][T18644] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 727.154252][T18644] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 728.200002][T18649] syzkaller1: entered promiscuous mode [ 728.200041][T18649] syzkaller1: entered allmulticast mode [ 728.398581][T18666] gfs2: gfs2 mount does not exist [ 728.446673][T18669] FAULT_INJECTION: forcing a failure. [ 728.446673][T18669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.446713][T18669] CPU: 1 UID: 0 PID: 18669 Comm: syz.2.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.446743][T18669] Tainted: [L]=SOFTLOCKUP [ 728.446752][T18669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 728.446766][T18669] Call Trace: [ 728.446774][T18669] [ 728.446785][T18669] dump_stack_lvl+0x100/0x190 [ 728.446821][T18669] should_fail_ex.cold+0x5/0xa [ 728.446851][T18669] _copy_from_iter+0x1f4/0x1690 [ 728.446885][T18669] ? __lock_acquire+0x5c0/0x1f40 [ 728.446922][T18669] ? __pfx__copy_from_iter+0x10/0x10 [ 728.446957][T18669] ? lock_acquire+0x1d1/0x380 [ 728.446988][T18669] ? aa_file_perm+0x197/0x14d0 [ 728.447022][T18669] ? find_held_lock+0x2b/0x80 [ 728.447052][T18669] tun_get_user+0x265/0x3cc0 [ 728.447097][T18669] ? __lock_acquire+0x5c0/0x1f40 [ 728.447128][T18669] ? __pfx_tun_get_user+0x10/0x10 [ 728.447162][T18669] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 728.447200][T18669] ? find_held_lock+0x2b/0x80 [ 728.447223][T18669] ? tun_get+0x191/0x370 [ 728.447251][T18669] ? tun_get+0x191/0x370 [ 728.447288][T18669] tun_chr_write_iter+0xdc/0x200 [ 728.447324][T18669] vfs_write+0x6af/0x1050 [ 728.447350][T18669] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 728.447386][T18669] ? __pfx_vfs_write+0x10/0x10 [ 728.447409][T18669] ? find_held_lock+0x2b/0x80 [ 728.447454][T18669] ksys_write+0x12a/0x250 [ 728.447478][T18669] ? __pfx_ksys_write+0x10/0x10 [ 728.447502][T18669] ? ksys_write+0x1ac/0x250 [ 728.447527][T18669] ? __pfx_ksys_write+0x10/0x10 [ 728.447558][T18669] __do_fast_syscall_32+0x13a/0x8b0 [ 728.447586][T18669] ? lockdep_hardirqs_on+0x7d/0x110 [ 728.447614][T18669] do_fast_syscall_32+0x32/0x70 [ 728.447642][T18669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.447669][T18669] RIP: 0023:0xf7f53fec [ 728.447693][T18669] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 728.447703][T18669] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 728.447726][T18669] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 728.447740][T18669] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 728.447752][T18669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 728.447765][T18669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.447782][T18669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.447810][T18669] [ 728.463111][ T43] audit: type=1800 audit(1790912278.417:4077): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256866 res=0 errno=0 [ 728.469745][ T43] audit: type=1800 audit(1790912278.427:4078): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256881 res=0 errno=0 [ 728.485256][ T43] audit: type=1800 audit(1790912278.437:4079): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256896 res=0 errno=0 [ 728.499289][ T43] audit: type=1800 audit(1790912278.447:4080): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256911 res=0 errno=0 [ 728.898054][T18691] syz.8.3568: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 728.898185][T18691] CPU: 3 UID: 0 PID: 18691 Comm: syz.8.3568 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.898212][T18691] Tainted: [L]=SOFTLOCKUP [ 728.898221][T18691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 728.898234][T18691] Call Trace: [ 728.898261][T18691] [ 728.898272][T18691] dump_stack_lvl+0x100/0x190 [ 728.898309][T18691] warn_alloc.cold+0x9e/0xb2 [ 728.898335][T18691] ? __pfx_warn_alloc+0x10/0x10 [ 728.898358][T18691] ? __kasan_kmalloc+0xaa/0xb0 [ 728.898382][T18691] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 728.898404][T18691] ? xskq_create+0x52/0x290 [ 728.898425][T18691] ? do_sock_setsockopt+0xf3/0x1d0 [ 728.898449][T18691] ? __do_fast_syscall_32+0x13a/0x8b0 [ 728.898478][T18691] ? do_fast_syscall_32+0x32/0x70 [ 728.898518][T18691] ? xsk_setsockopt+0x743/0xab0 [ 728.898546][T18691] __vmalloc_node_range_noprof+0x123b/0x1420 [ 728.898592][T18691] ? xsk_setsockopt+0x743/0xab0 [ 728.898620][T18691] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.898653][T18691] ? kasan_save_track+0x14/0x30 [ 728.898682][T18691] ? __kasan_kmalloc+0xaa/0xb0 [ 728.898714][T18691] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 728.898739][T18691] ? xskq_create+0x52/0x290 [ 728.898760][T18691] ? xsk_setsockopt+0x743/0xab0 [ 728.898779][T18691] xskq_create+0x18f/0x290 [ 728.898800][T18691] ? xsk_setsockopt+0x743/0xab0 [ 728.898822][T18691] xsk_setsockopt+0x743/0xab0 [ 728.898840][T18691] ? __pfx_aa_sk_perm+0x10/0x10 [ 728.898864][T18691] ? __pfx_xsk_setsockopt+0x10/0x10 [ 728.898883][T18691] ? find_held_lock+0x2b/0x80 [ 728.898913][T18691] ? aa_sock_opt_perm+0x114/0x1e0 [ 728.898943][T18691] ? __pfx_xsk_setsockopt+0x10/0x10 [ 728.898964][T18691] do_sock_setsockopt+0xf3/0x1d0 [ 728.898992][T18691] __sys_setsockopt+0x119/0x190 [ 728.899028][T18691] __ia32_sys_setsockopt+0xbc/0x160 [ 728.899059][T18691] ? __do_fast_syscall_32+0xb3/0x8b0 [ 728.899083][T18691] ? lockdep_hardirqs_on+0x7d/0x110 [ 728.899109][T18691] __do_fast_syscall_32+0x13a/0x8b0 [ 728.899139][T18691] do_fast_syscall_32+0x32/0x70 [ 728.899166][T18691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.899192][T18691] RIP: 0023:0xf7f13fec [ 728.899217][T18691] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 728.899226][T18691] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 728.899247][T18691] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 728.899261][T18691] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 728.899275][T18691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 728.899289][T18691] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 728.899303][T18691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.899331][T18691] [ 728.899467][T18691] Mem-Info: [ 728.899480][T18691] active_anon:1639 inactive_anon:1251 isolated_anon:0 [ 728.899480][T18691] active_file:2095 inactive_file:18347 isolated_file:0 [ 728.899480][T18691] unevictable:1000 dirty:424 writeback:0 [ 728.899480][T18691] slab_reclaimable:6700 slab_unreclaimable:66577 [ 728.899480][T18691] mapped:25436 shmem:1235 pagetables:1646 [ 728.899480][T18691] sec_pagetables:327 bounce:0 [ 728.899480][T18691] kernel_misc_reclaimable:0 [ 728.899480][T18691] free:31389 free_pcp:13345 free_cma:0 [ 728.899543][T18691] Node 0 active_anon:168kB inactive_anon:64kB active_file:16kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8992kB pagetables:1396kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.899600][T18691] Node 1 active_anon:6388kB inactive_anon:4940kB active_file:8364kB inactive_file:73240kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:101708kB dirty:1684kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6508kB pagetables:5188kB sec_pagetables:176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.899656][T18691] Node 0 DMA free:2024kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:0kB active_file:16kB inactive_file:68kB unevictable:0kB writepending:12kB zspages:116kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:588kB local_pcp:192kB free_cma:0kB [ 728.899713][T18691] lowmem_reserve[]: 0 278 278 278 278 [ 728.899750][T18691] Node 0 DMA32 free:14688kB boost:0kB min:12624kB low:15780kB high:18936kB reserved_highatomic:2048kB free_highatomic:172kB active_anon:156kB inactive_anon:64kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB zspages:904kB present:1032196kB managed:284776kB mlocked:0kB bounce:0kB free_pcp:9836kB local_pcp:3372kB free_cma:0kB [ 728.899805][T18691] lowmem_reserve[]: 0 0 0 0 0 [ 728.899837][T18691] Node 1 DMA32 free:108844kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6388kB inactive_anon:4940kB active_file:8364kB inactive_file:73240kB unevictable:4000kB writepending:1684kB zspages:4616kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:42956kB local_pcp:9900kB free_cma:0kB [ 728.899891][T18691] lowmem_reserve[]: 0 0 0 0 0 [ 728.899924][T18691] Node 0 DMA: 36*4kB (UM) 59*8kB (UM) 8*16kB (UM) 12*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2024kB [ 728.900058][T18691] Node 0 DMA32: 26*4kB (EH) 23*8kB (UEH) 36*16kB (UME) 94*32kB (UME) 33*64kB (UMEH) 10*128kB (UME) 9*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 14688kB [ 728.900196][T18691] Node 1 DMA32: 1791*4kB (UME) 454*8kB (UME) 356*16kB (UME) 279*32kB (UME) 160*64kB (UME) 79*128kB (UME) 56*256kB (UME) 39*512kB (UME) 6*1024kB (M) 7*2048kB (UM) 2*4096kB (M) = 108748kB [ 728.900350][T18691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.900367][T18691] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 728.900381][T18691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.900396][T18691] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 728.900411][T18691] 22703 total pagecache pages [ 728.900420][T18691] 1028 pages in swap cache [ 728.900427][T18691] Free swap = 97008kB [ 728.900436][T18691] Total swap = 124996kB [ 728.900444][T18691] 524155 pages RAM [ 728.900451][T18691] 0 pages HighMem/MovableOnly [ 728.900459][T18691] 212069 pages reserved [ 728.900466][T18691] 0 pages cma reserved [ 728.922883][T18692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.933136][T18692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.069711][ T43] audit: type=1800 audit(1790912279.027:4081): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257230 res=0 errno=0 [ 729.141266][T18697] ima: policy update failed [ 729.141407][ T43] audit: type=1802 audit(1790912279.097:4082): pid=18697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.3571" res=0 errno=0 [ 729.263407][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3573'. [ 729.289106][T18707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 729.293561][T18707] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 729.293630][ T35] bond_slave_0: entered promiscuous mode [ 729.293648][ T35] bond_slave_1: entered promiscuous mode [ 729.356259][T18713] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3573'. [ 729.356479][T18713] bond_slave_0: left promiscuous mode [ 729.356499][T18713] bond_slave_1: left promiscuous mode [ 729.369098][T18713] bond1: (slave macvlan2): Releasing backup interface [ 729.375563][T18713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.377588][T18713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.378859][T18713] bond0 (unregistering): Released all slaves [ 729.466281][ T43] audit: type=1800 audit(1790912279.417:4083): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34728 res=0 errno=0 [ 729.466312][ T43] audit: type=1800 audit(1790912279.417:4084): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34751 res=0 errno=0 [ 729.700020][ T9192] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 729.862128][ T9192] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 729.866427][ T9192] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.866451][ T9192] usb 12-1: Product: syz [ 729.866464][ T9192] usb 12-1: Manufacturer: syz [ 729.866475][ T9192] usb 12-1: SerialNumber: syz [ 730.000060][T18726] 9p: Bad value for 'rfdno' [ 730.005785][ T9192] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 730.416320][ T9] usb 12-1: USB disconnect, device number 2 [ 731.270069][ T9192] usb 12-1: Service connection timeout for: 256 [ 731.270093][ T9192] ath9k_htc 12-1:1.0: ath9k_htc: Unable to initialize HTC services [ 731.276753][ T9192] ath9k_htc: Failed to initialize the device [ 731.277738][ T9] usb 12-1: ath9k_htc: USB layer deinitialized [ 731.463088][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3595'. [ 731.463980][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3595'. [ 731.464763][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3595'. [ 731.466925][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3595'. [ 731.467978][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3595'. [ 731.468323][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3595'. [ 731.489892][ T57] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 731.639524][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 731.640014][ T57] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 731.640961][ T57] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 731.643148][ T57] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 731.643161][ T57] usb 7-1: Product: syz [ 731.643169][ T57] usb 7-1: Manufacturer: syz [ 731.643177][ T57] usb 7-1: SerialNumber: syz [ 731.644398][ T57] usb 7-1: config 0 descriptor?? [ 731.644949][T18764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 731.861070][ T9] usb 7-1: USB disconnect, device number 37 [ 731.939497][ T9192] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 732.099531][ T9192] usb 12-1: Using ep0 maxpacket: 8 [ 732.101476][ T9192] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 732.102392][ T9192] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 732.102425][ T9192] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.104241][ T9192] usb 12-1: config 0 descriptor?? [ 732.106350][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 732.106365][ T43] audit: type=1800 audit(1790912282.057:4105): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258318 res=0 errno=0 [ 732.110515][ T43] audit: type=1800 audit(1790912282.067:4106): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=258347 res=0 errno=0 [ 732.111290][ T43] audit: type=1800 audit(1790912282.067:4107): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=258325 res=0 errno=0 [ 732.115894][ T43] audit: type=1800 audit(1790912282.067:4108): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=258326 res=0 errno=0 [ 732.117298][ T43] audit: type=1800 audit(1790912282.067:4109): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=258327 res=0 errno=0 [ 732.121763][ T43] audit: type=1800 audit(1790912282.077:4110): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258367 res=0 errno=0 [ 732.311097][ T9] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 732.312195][ T9192] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 732.313427][ T43] audit: type=1800 audit(1790912282.267:4111): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258392 res=0 errno=0 [ 732.379533][T14550] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 732.469790][ T9] usb 13-1: Using ep0 maxpacket: 32 [ 732.471653][ T9] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 732.473371][ T9] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.473394][ T9] usb 13-1: config 0 has no interface number 0 [ 732.475879][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.475897][ T9] usb 13-1: Product: syz [ 732.475908][ T9] usb 13-1: Manufacturer: syz [ 732.475919][ T9] usb 13-1: SerialNumber: syz [ 732.480886][ T43] audit: type=1800 audit(1790912282.437:4112): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258439 res=0 errno=0 [ 732.480991][ T9] usb 13-1: config 0 descriptor?? [ 732.486984][ T9] usb 13-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 732.487009][ T9] usb 13-1: selecting invalid altsetting 1 [ 732.487025][ T9] usb 13-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 732.487556][ T43] audit: type=1800 audit(1790912282.437:4113): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=258471 res=0 errno=0 [ 732.487600][ T43] audit: type=1800 audit(1790912282.437:4114): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=258446 res=0 errno=0 [ 732.492847][ T9] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 732.493129][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 732.493166][ T9] usb 13-1: media controller created [ 732.510217][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.535267][ T5855] usb 12-1: USB disconnect, device number 3 [ 732.580529][T14550] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 732.581616][T14550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.581642][T14550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.581661][T14550] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 732.581693][T14550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.583589][T14550] usb 5-1: config 0 descriptor?? [ 732.785351][ T9] usb 13-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 732.785396][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 732.785851][ T9] usb 13-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 732.830490][ T9] usb 13-1: USB disconnect, device number 15 [ 733.006606][T14550] plantronics 0003:047F:FFFF.000D: item fetching failed at offset 11/15 [ 733.011216][T14550] plantronics 0003:047F:FFFF.000D: parse failed [ 733.011265][T14550] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 733.111845][T18803] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3609'. [ 733.230997][ T35] usb 5-1: USB disconnect, device number 56 [ 733.292264][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 733.292291][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 733.292338][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 733.292349][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 733.292360][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 733.292370][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 733.292454][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 733.292467][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 733.292477][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 733.292486][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 733.292518][T18811] jffs2: Further such events for this erase block will not be printed [ 733.292596][T18811] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 733.292793][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 733.292803][T18811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 733.300460][T18811] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 733.300471][T18811] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 733.535267][T18816] FAULT_INJECTION: forcing a failure. [ 733.535267][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 733.535298][T18816] CPU: 3 UID: 0 PID: 18816 Comm: syz.8.3613 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.535321][T18816] Tainted: [L]=SOFTLOCKUP [ 733.535327][T18816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 733.535337][T18816] Call Trace: [ 733.535343][T18816] [ 733.535351][T18816] dump_stack_lvl+0x100/0x190 [ 733.535377][T18816] should_fail_ex.cold+0x5/0xa [ 733.535397][T18816] should_failslab+0xc2/0x120 [ 733.535420][T18816] kmem_cache_alloc_noprof+0x92/0x6a0 [ 733.535441][T18816] ? security_file_alloc+0x34/0x2c0 [ 733.535464][T18816] security_file_alloc+0x34/0x2c0 [ 733.535483][T18816] init_file+0x95/0x480 [ 733.535505][T18816] alloc_empty_file+0x79/0x1c0 [ 733.535529][T18816] alloc_file_pseudo+0x183/0x290 [ 733.535553][T18816] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 733.535582][T18816] __shmem_file_setup+0x205/0x460 [ 733.535607][T18816] ? __pfx___shmem_file_setup+0x10/0x10 [ 733.535630][T18816] ? __rwlock_init+0x37/0x150 [ 733.535650][T18816] drm_gem_object_init+0x180/0x1b0 [ 733.535671][T18816] ? __pfx_drm_gem_object_init+0x10/0x10 [ 733.535706][T18816] ? vgem_gem_create_object+0x3b/0xb0 [ 733.535730][T18816] ? __pfx_vgem_gem_create_object+0x10/0x10 [ 733.535759][T18816] __drm_gem_shmem_create+0x107/0x410 [ 733.535785][T18816] drm_gem_shmem_create_with_handle+0x28/0x120 [ 733.535811][T18816] drm_gem_shmem_dumb_create+0x83/0xa0 [ 733.535834][T18816] ? find_held_lock+0x2b/0x80 [ 733.535857][T18816] drm_mode_create_dumb+0x272/0x300 [ 733.535883][T18816] drm_mode_create_dumb_ioctl+0x24/0xe0 [ 733.535905][T18816] drm_ioctl_kernel+0x1f3/0x3e0 [ 733.535923][T18816] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 733.535947][T18816] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 733.535975][T18816] drm_ioctl+0x5e6/0xc60 [ 733.535999][T18816] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 733.536039][T18816] ? __pfx_drm_ioctl+0x10/0x10 [ 733.536077][T18816] drm_compat_ioctl+0x386/0x4c0 [ 733.536104][T18816] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 733.536129][T18816] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 733.536156][T18816] __do_fast_syscall_32+0x13a/0x8b0 [ 733.536181][T18816] ? lockdep_hardirqs_on+0x7d/0x110 [ 733.536205][T18816] do_fast_syscall_32+0x32/0x70 [ 733.536231][T18816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 733.536257][T18816] RIP: 0023:0xf7f13fec [ 733.536280][T18816] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 733.536290][T18816] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 733.536310][T18816] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c02064b2 [ 733.536323][T18816] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.536335][T18816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 733.536347][T18816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 733.536359][T18816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 733.536386][T18816] [ 733.828748][T18819] veth1_macvtap: left promiscuous mode [ 733.828768][T18819] macsec0: entered promiscuous mode [ 733.841717][T18819] veth1_macvtap: entered promiscuous mode [ 733.844195][T18819] macsec0: left promiscuous mode [ 734.990052][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 734.990093][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 734.990170][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 734.990188][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 734.990205][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 734.990222][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 734.990348][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 734.990369][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 734.990384][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 734.990399][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 734.990414][T18836] jffs2: Further such events for this erase block will not be printed [ 734.990524][T18836] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 734.990806][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 734.990825][T18836] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 735.014546][T18836] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 735.014563][T18836] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 735.132508][T18838] FAULT_INJECTION: forcing a failure. [ 735.132508][T18838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 735.132534][T18838] CPU: 2 UID: 0 PID: 18838 Comm: syz.0.3620 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.132552][T18838] Tainted: [L]=SOFTLOCKUP [ 735.132557][T18838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 735.132565][T18838] Call Trace: [ 735.132570][T18838] [ 735.132576][T18838] dump_stack_lvl+0x100/0x190 [ 735.132598][T18838] should_fail_ex.cold+0x5/0xa [ 735.132614][T18838] ? prepare_alloc_pages+0x16d/0x5b0 [ 735.132634][T18838] should_fail_alloc_page+0xeb/0x140 [ 735.132655][T18838] prepare_alloc_pages+0x1f0/0x5b0 [ 735.132678][T18838] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 735.132695][T18838] ? is_bpf_text_address+0x8a/0x1a0 [ 735.132716][T18838] ? bpf_ksym_find+0x124/0x1c0 [ 735.132732][T18838] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 735.132751][T18838] ? is_bpf_text_address+0x94/0x1a0 [ 735.132771][T18838] ? kernel_text_address+0x8d/0x100 [ 735.132789][T18838] ? stack_trace_save+0x8e/0xc0 [ 735.132822][T18838] ? __kernel_text_address+0xd/0x30 [ 735.132840][T18838] ? unwind_get_return_address+0x59/0xa0 [ 735.132857][T18838] ? arch_stack_walk+0xa6/0xf0 [ 735.132872][T18838] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 735.132894][T18838] ? stack_trace_save+0x8e/0xc0 [ 735.132911][T18838] ? __pfx_stack_trace_save+0x10/0x10 [ 735.132929][T18838] ? stack_depot_save_flags+0x27/0x9f0 [ 735.133024][T18838] ? __lock_acquire+0x5c0/0x1f40 [ 735.133046][T18838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 735.133067][T18838] ? policy_nodemask+0xed/0x4f0 [ 735.133092][T18838] alloc_pages_mpol+0x201/0x550 [ 735.133114][T18838] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 735.133135][T18838] ? filemap_get_entry+0x22d/0x450 [ 735.133155][T18838] ? filemap_get_entry+0x22d/0x450 [ 735.133178][T18838] folio_alloc_noprof+0x22/0x250 [ 735.133194][T18838] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 735.133214][T18838] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 735.133231][T18838] ? rcu_is_watching+0x13/0xc0 [ 735.133247][T18838] ? trace_kmalloc+0xeb/0x110 [ 735.133268][T18838] __filemap_get_folio_mpol+0x653/0x1280 [ 735.133294][T18838] ioctx_alloc+0x7e1/0x21a0 [ 735.133321][T18838] ? __pfx_ioctx_alloc+0x10/0x10 [ 735.133341][T18838] ? __might_fault+0x111/0x140 [ 735.133357][T18838] __ia32_compat_sys_io_setup+0xc8/0x220 [ 735.133379][T18838] __do_fast_syscall_32+0x13a/0x8b0 [ 735.133406][T18838] ? lockdep_hardirqs_on+0x7d/0x110 [ 735.133423][T18838] do_fast_syscall_32+0x32/0x70 [ 735.133441][T18838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 735.133458][T18838] RIP: 0023:0xf706efec [ 735.133475][T18838] Code: Unable to access opcode bytes at 0xf706efc2. [ 735.133482][T18838] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 735.133495][T18838] RAX: ffffffffffffffda RBX: 00000000000003ff RCX: 0000000080000500 [ 735.133504][T18838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.133512][T18838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 735.133520][T18838] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 735.133528][T18838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 735.133544][T18838] [ 736.294404][T18850] veth1_macvtap: left promiscuous mode [ 736.294427][T18850] macsec0: entered promiscuous mode [ 736.304441][T18850] veth1_macvtap: entered promiscuous mode [ 736.306207][T18850] macsec0: left promiscuous mode [ 736.314117][T18820] Set syz1 is full, maxelem 65536 reached [ 736.454902][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 736.454929][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 736.454976][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 736.454987][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 736.454997][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 736.455008][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 736.455094][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 736.455110][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 736.455124][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 736.455138][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 736.455151][T18856] jffs2: Further such events for this erase block will not be printed [ 736.455260][T18856] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 736.455481][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 736.455494][T18856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 736.463724][T18856] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 736.463738][T18856] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 737.846740][T18880] FAULT_INJECTION: forcing a failure. [ 737.846740][T18880] name failslab, interval 1, probability 0, space 0, times 0 [ 737.846769][T18880] CPU: 1 UID: 0 PID: 18880 Comm: syz.2.3634 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.846786][T18880] Tainted: [L]=SOFTLOCKUP [ 737.846791][T18880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 737.846799][T18880] Call Trace: [ 737.846804][T18880] [ 737.846810][T18880] dump_stack_lvl+0x100/0x190 [ 737.846830][T18880] should_fail_ex.cold+0x5/0xa [ 737.846847][T18880] should_failslab+0xc2/0x120 [ 737.846866][T18880] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 737.846891][T18880] ? kasprintf+0xc7/0x100 [ 737.846920][T18880] kvasprintf+0xbc/0x150 [ 737.846971][T18880] ? __pfx_kvasprintf+0x10/0x10 [ 737.847008][T18880] kasprintf+0xc7/0x100 [ 737.847042][T18880] ? __pfx_kasprintf+0x10/0x10 [ 737.847073][T18880] ? nla_strdup+0xc3/0x150 [ 737.847097][T18880] ? __asan_memcpy+0x3c/0x60 [ 737.847124][T18880] nf_tables_newset+0x29eb/0x4250 [ 737.847163][T18880] ? __pfx_nf_tables_newset+0x10/0x10 [ 737.847189][T18880] ? reacquire_held_locks+0xdd/0x1f0 [ 737.847220][T18880] ? nf_tables_valid_genid+0x38/0x140 [ 737.847250][T18880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 737.847284][T18880] ? __nla_validate_parse+0x1e7/0x28b0 [ 737.847327][T18880] ? lock_acquire+0x1d1/0x380 [ 737.847364][T18880] ? net_generic+0x25/0x2a0 [ 737.847401][T18880] ? __nla_parse+0x40/0x60 [ 737.847439][T18880] nfnetlink_rcv_batch+0x1410/0x2880 [ 737.847490][T18880] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 737.847520][T18880] ? find_held_lock+0x2b/0x80 [ 737.847556][T18880] ? __local_bh_enable_ip+0xa5/0x120 [ 737.847597][T18880] ? lockdep_hardirqs_on+0x7d/0x110 [ 737.847637][T18880] ? __dev_queue_xmit+0xa60/0x4a40 [ 737.847729][T18880] ? __nla_parse+0x40/0x60 [ 737.847767][T18880] nfnetlink_rcv+0x3bd/0x440 [ 737.847797][T18880] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 737.847842][T18880] netlink_unicast+0x585/0x850 [ 737.847888][T18880] ? __pfx_netlink_unicast+0x10/0x10 [ 737.847923][T18880] ? aa_sk_perm+0x389/0xab0 [ 737.847962][T18880] netlink_sendmsg+0x8b0/0xda0 [ 737.848006][T18880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.848048][T18880] ? apparmor_socket_sendmsg+0x165/0x280 [ 737.848092][T18880] ____sys_sendmsg+0xa4d/0xbe0 [ 737.848120][T18880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.848159][T18880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.848206][T18880] ___sys_sendmsg+0x190/0x1e0 [ 737.848242][T18880] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.848290][T18880] ? find_held_lock+0x2b/0x80 [ 737.848347][T18880] __sys_sendmsg+0x160/0x210 [ 737.848376][T18880] ? __pfx___sys_sendmsg+0x10/0x10 [ 737.848414][T18880] ? __pfx_ksys_write+0x10/0x10 [ 737.848455][T18880] __do_fast_syscall_32+0x13a/0x8b0 [ 737.848525][T18880] ? lockdep_hardirqs_on+0x7d/0x110 [ 737.848560][T18880] do_fast_syscall_32+0x32/0x70 [ 737.848596][T18880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 737.848641][T18880] RIP: 0023:0xf7f53fec [ 737.848673][T18880] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 737.848685][T18880] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 737.848712][T18880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 737.848729][T18880] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 737.848746][T18880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 737.848761][T18880] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 737.848777][T18880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 737.848813][T18880] [ 737.934389][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3633'. [ 737.934405][T18882] openvswitch: netlink: Flow actions attr not present in new flow. [ 738.237308][T18884] veth1_macvtap: left promiscuous mode [ 738.237339][T18884] macsec0: entered promiscuous mode [ 738.313708][T18884] veth1_macvtap: entered promiscuous mode [ 738.314092][T18884] macsec0: left promiscuous mode [ 738.529277][T18894] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 738.553379][ T5855] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 738.686082][T18901] XFS (nbd2): SB validate failed with error -5. [ 738.707931][T18901] XFS (nbd2): io_pages changed from 0 to 1024, not restoring. [ 738.707958][T18901] XFS (nbd2): ra_pages changed from 0 to 64, not restoring. [ 738.753350][ T5855] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 738.753397][ T5855] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 738.755485][ T5855] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.755563][ T5855] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.755587][ T5855] usb 13-1: config 0 interface 0 has no altsetting 0 [ 738.756811][ T5855] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.756847][ T5855] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.756869][ T5855] usb 13-1: config 0 interface 0 has no altsetting 0 [ 738.758209][ T5855] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.758244][ T5855] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.758266][ T5855] usb 13-1: config 0 interface 0 has no altsetting 0 [ 738.759867][ T5855] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.759902][ T5855] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.759975][ T5855] usb 13-1: config 0 interface 0 has no altsetting 0 [ 738.761212][ T5855] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.761250][ T5855] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.761365][ T5855] usb 13-1: config 0 interface 0 has no altsetting 0 [ 738.762461][ T5855] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.762498][ T5855] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.762571][ T5855] usb 13-1: config 0 interface 0 has no altsetting 0 [ 738.763874][ T5855] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.763966][ T5855] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.763989][ T5855] usb 13-1: config 0 interface 0 has no altsetting 0 [ 738.765253][ T5855] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.765345][ T5855] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.765366][ T5855] usb 13-1: config 0 interface 0 has no altsetting 0 [ 738.768602][ T5855] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 738.768634][ T5855] usb 13-1: Product: syz [ 738.768649][ T5855] usb 13-1: Manufacturer: syz [ 738.768662][ T5855] usb 13-1: SerialNumber: syz [ 738.799222][ T5855] usb 13-1: config 0 descriptor?? [ 738.805327][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 738.805344][ T43] audit: type=1800 audit(1790912288.757:4129): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259049 res=0 errno=0 [ 738.812775][T18900] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 738.833971][T18911] [U]  [ 738.835376][T18911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3642'. [ 738.839890][ T43] audit: type=1800 audit(1790912288.767:4130): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=259081 res=0 errno=0 [ 738.840036][ T43] audit: type=1800 audit(1790912288.767:4131): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=259056 res=0 errno=0 [ 738.909011][ T43] audit: type=1800 audit(1790912288.867:4132): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=259057 res=0 errno=0 [ 738.965408][ T43] audit: type=1800 audit(1790912288.917:4133): pid=18911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3642" name="pm_freeze_timeout" dev="sysfs" ino=587 res=0 errno=0 [ 738.968642][ T5855] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 738.976774][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3642'. [ 738.978190][ T43] audit: type=1800 audit(1790912288.927:4134): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=259078 res=0 errno=0 [ 738.979003][ T43] audit: type=1800 audit(1790912288.927:4135): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=259079 res=0 errno=0 [ 738.979799][ T43] audit: type=1800 audit(1790912288.927:4136): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=259058 res=0 errno=0 [ 738.986166][ T43] audit: type=1800 audit(1790912288.927:4137): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=259080 res=0 errno=0 [ 738.997279][ T43] audit: type=1800 audit(1790912288.957:4138): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259101 res=0 errno=0 [ 739.154279][ T5855] usb 13-1: USB disconnect, device number 16 [ 739.196801][ T5855] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 739.212072][T18922] XFS (nbd2): SB validate failed with error -5. [ 739.240647][T18922] XFS (nbd2): io_pages changed from 0 to 1024, not restoring. [ 739.240686][T18922] XFS (nbd2): ra_pages changed from 0 to 64, not restoring. [ 739.645313][T18937] veth1_macvtap: left promiscuous mode [ 739.645344][T18937] macsec0: entered promiscuous mode [ 739.665598][T18937] veth1_macvtap: entered promiscuous mode [ 739.665959][T18937] macsec0: left promiscuous mode [ 739.746943][T18942] FAULT_INJECTION: forcing a failure. [ 739.746943][T18942] name failslab, interval 1, probability 0, space 0, times 0 [ 739.746973][T18942] CPU: 3 UID: 0 PID: 18942 Comm: syz.7.3651 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.746997][T18942] Tainted: [L]=SOFTLOCKUP [ 739.747004][T18942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 739.747014][T18942] Call Trace: [ 739.747021][T18942] [ 739.747028][T18942] dump_stack_lvl+0x100/0x190 [ 739.747056][T18942] should_fail_ex.cold+0x5/0xa [ 739.747074][T18942] should_failslab+0xc2/0x120 [ 739.747103][T18942] __kmalloc_noprof+0xfc/0x840 [ 739.747124][T18942] ? rcu_is_watching+0x13/0xc0 [ 739.747145][T18942] ? tomoyo_realpath_from_path+0xb6/0x690 [ 739.747172][T18942] tomoyo_realpath_from_path+0xb6/0x690 [ 739.747193][T18942] tomoyo_path_number_perm+0x23c/0x580 [ 739.747211][T18942] ? tomoyo_path_number_perm+0x22e/0x580 [ 739.747231][T18942] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 739.747249][T18942] ? get_pid_task+0x106/0x250 [ 739.747276][T18942] ? __lock_acquire+0x5c0/0x1f40 [ 739.747307][T18942] ? __fget_files+0x34/0x3d0 [ 739.747328][T18942] ? find_held_lock+0x2b/0x80 [ 739.747348][T18942] ? __fget_files+0x215/0x3d0 [ 739.747368][T18942] ? hook_file_ioctl_common+0x140/0x440 [ 739.747387][T18942] ? __fget_files+0x215/0x3d0 [ 739.747413][T18942] ? __fget_files+0x21f/0x3d0 [ 739.747433][T18942] security_file_ioctl_compat+0xd3/0x230 [ 739.747454][T18942] __ia32_compat_sys_ioctl+0xc2/0x360 [ 739.747477][T18942] __do_fast_syscall_32+0x13a/0x8b0 [ 739.747499][T18942] ? lockdep_hardirqs_on+0x7d/0x110 [ 739.747527][T18942] do_fast_syscall_32+0x32/0x70 [ 739.747545][T18942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.747566][T18942] RIP: 0023:0xf7f27fec [ 739.747586][T18942] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 739.747594][T18942] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 739.747612][T18942] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0303e03 [ 739.747623][T18942] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 739.747634][T18942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.747644][T18942] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 739.747655][T18942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.747673][T18942] [ 739.747681][T18942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 739.902216][T18920] Process accounting resumed [ 739.983338][T18956] FAULT_INJECTION: forcing a failure. [ 739.983338][T18956] name failslab, interval 1, probability 0, space 0, times 0 [ 739.983370][T18956] CPU: 0 UID: 0 PID: 18956 Comm: syz.8.3654 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.983395][T18956] Tainted: [L]=SOFTLOCKUP [ 739.983402][T18956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 739.983413][T18956] Call Trace: [ 739.983420][T18956] [ 739.983427][T18956] dump_stack_lvl+0x100/0x190 [ 739.983456][T18956] should_fail_ex.cold+0x5/0xa [ 739.983481][T18956] should_failslab+0xc2/0x120 [ 739.983509][T18956] __kmalloc_node_noprof+0xff/0x880 [ 739.983532][T18956] ? __get_vm_area_node+0x1ff/0x350 [ 739.983557][T18956] ? __get_vm_area_node+0x22b/0x350 [ 739.983583][T18956] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 739.983614][T18956] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 739.983651][T18956] ? vb2_vmalloc_alloc+0x135/0x410 [ 739.983687][T18956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 739.983718][T18956] ? __kasan_kmalloc+0xaa/0xb0 [ 739.983744][T18956] ? vb2_vmalloc_alloc+0x135/0x410 [ 739.983772][T18956] vmalloc_user_noprof+0x9e/0xe0 [ 739.983799][T18956] ? vb2_vmalloc_alloc+0x135/0x410 [ 739.983826][T18956] vb2_vmalloc_alloc+0x135/0x410 [ 739.983851][T18956] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 739.983880][T18956] __vb2_queue_alloc+0x8d5/0x1160 [ 739.983919][T18956] vb2_core_reqbufs+0x899/0xf30 [ 739.983949][T18956] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 739.983983][T18956] ? __vb2_init_fileio+0x18f/0x1000 [ 739.984013][T18956] __vb2_init_fileio+0x32d/0x1000 [ 739.984049][T18956] __vb2_perform_fileio+0x9ba/0x1380 [ 739.984082][T18956] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 739.984119][T18956] ? get_pid_task+0xfc/0x250 [ 739.984143][T18956] vb2_fop_read+0x211/0x520 [ 739.984170][T18956] v4l2_read+0x229/0x2c0 [ 739.984193][T18956] ? __pfx_v4l2_read+0x10/0x10 [ 739.984215][T18956] vfs_read+0x1e4/0xb40 [ 739.984236][T18956] ? lock_acquire+0x1d1/0x380 [ 739.984262][T18956] ? __fget_files+0x34/0x3d0 [ 739.984285][T18956] ? __pfx_vfs_read+0x10/0x10 [ 739.984304][T18956] ? find_held_lock+0x2b/0x80 [ 739.984325][T18956] ? __fget_files+0x215/0x3d0 [ 739.984347][T18956] ? __fget_files+0x215/0x3d0 [ 739.984374][T18956] ? __fget_files+0x21f/0x3d0 [ 739.984405][T18956] ksys_pread64+0x161/0x1a0 [ 739.984424][T18956] ? __pfx_ksys_pread64+0x10/0x10 [ 739.984446][T18956] ? ksys_write+0x1ac/0x250 [ 739.984506][T18956] ? __pfx_ksys_write+0x10/0x10 [ 739.984534][T18956] __do_fast_syscall_32+0x13a/0x8b0 [ 739.984558][T18956] ? lockdep_hardirqs_on+0x7d/0x110 [ 739.984582][T18956] do_fast_syscall_32+0x32/0x70 [ 739.984605][T18956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.984628][T18956] RIP: 0023:0xf7f13fec [ 739.984649][T18956] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 739.984658][T18956] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 739.984681][T18956] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 739.984693][T18956] RDX: 000000000000004b RSI: 0000000000000000 RDI: 0000000000000000 [ 739.984704][T18956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.984716][T18956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 739.984727][T18956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.984753][T18956] [ 739.984794][T18956] syz.8.3654: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 739.984938][T18956] CPU: 0 UID: 0 PID: 18956 Comm: syz.8.3654 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.984964][T18956] Tainted: [L]=SOFTLOCKUP [ 739.984972][T18956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 739.984982][T18956] Call Trace: [ 739.984989][T18956] [ 739.984997][T18956] dump_stack_lvl+0x100/0x190 [ 739.985025][T18956] warn_alloc.cold+0x9e/0xb2 [ 739.985046][T18956] ? __pfx_warn_alloc+0x10/0x10 [ 739.985066][T18956] ? dump_stack_lvl+0x17c/0x190 [ 739.985098][T18956] ? rcu_is_watching+0x13/0xc0 [ 739.985121][T18956] ? __kasan_kmalloc+0x8a/0xb0 [ 739.985146][T18956] ? __kmalloc_node_noprof+0x360/0x880 [ 739.985169][T18956] ? __get_vm_area_node+0x1ff/0x350 [ 739.985194][T18956] ? __get_vm_area_node+0x22b/0x350 [ 739.985219][T18956] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 739.985252][T18956] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 739.985291][T18956] ? vb2_vmalloc_alloc+0x135/0x410 [ 739.985323][T18956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 739.985355][T18956] ? __kasan_kmalloc+0xaa/0xb0 [ 739.985382][T18956] ? vb2_vmalloc_alloc+0x135/0x410 [ 739.985410][T18956] vmalloc_user_noprof+0x9e/0xe0 [ 739.985438][T18956] ? vb2_vmalloc_alloc+0x135/0x410 [ 739.985466][T18956] vb2_vmalloc_alloc+0x135/0x410 [ 739.985491][T18956] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 739.985519][T18956] __vb2_queue_alloc+0x8d5/0x1160 [ 739.985563][T18956] vb2_core_reqbufs+0x899/0xf30 [ 739.985593][T18956] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 739.985629][T18956] ? __vb2_init_fileio+0x18f/0x1000 [ 739.985660][T18956] __vb2_init_fileio+0x32d/0x1000 [ 739.985694][T18956] __vb2_perform_fileio+0x9ba/0x1380 [ 739.985728][T18956] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 739.985757][T18956] ? get_pid_task+0xfc/0x250 [ 739.985783][T18956] vb2_fop_read+0x211/0x520 [ 739.985813][T18956] v4l2_read+0x229/0x2c0 [ 739.985835][T18956] ? __pfx_v4l2_read+0x10/0x10 [ 739.985857][T18956] vfs_read+0x1e4/0xb40 [ 739.985879][T18956] ? lock_acquire+0x1d1/0x380 [ 739.985905][T18956] ? __fget_files+0x34/0x3d0 [ 739.985927][T18956] ? __pfx_vfs_read+0x10/0x10 [ 739.985947][T18956] ? find_held_lock+0x2b/0x80 [ 739.985968][T18956] ? __fget_files+0x215/0x3d0 [ 739.985990][T18956] ? __fget_files+0x215/0x3d0 [ 739.986018][T18956] ? __fget_files+0x21f/0x3d0 [ 739.986048][T18956] ksys_pread64+0x161/0x1a0 [ 739.986071][T18956] ? __pfx_ksys_pread64+0x10/0x10 [ 739.986097][T18956] ? ksys_write+0x1ac/0x250 [ 739.986119][T18956] ? __pfx_ksys_write+0x10/0x10 [ 739.986146][T18956] __do_fast_syscall_32+0x13a/0x8b0 [ 739.986169][T18956] ? lockdep_hardirqs_on+0x7d/0x110 [ 739.986193][T18956] do_fast_syscall_32+0x32/0x70 [ 739.986217][T18956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.986240][T18956] RIP: 0023:0xf7f13fec [ 739.986257][T18956] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 739.986266][T18956] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 739.986283][T18956] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 739.986295][T18956] RDX: 000000000000004b RSI: 0000000000000000 RDI: 0000000000000000 [ 739.986306][T18956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.986317][T18956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 739.986329][T18956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.986355][T18956] [ 739.986362][T18956] Mem-Info: [ 739.986371][T18956] active_anon:1767 inactive_anon:1284 isolated_anon:0 [ 739.986371][T18956] active_file:2095 inactive_file:20313 isolated_file:0 [ 739.986371][T18956] unevictable:1000 dirty:265 writeback:0 [ 739.986371][T18956] slab_reclaimable:6706 slab_unreclaimable:67768 [ 739.986371][T18956] mapped:25546 shmem:1235 pagetables:1631 [ 739.986371][T18956] sec_pagetables:329 bounce:0 [ 739.986371][T18956] kernel_misc_reclaimable:0 [ 739.986371][T18956] free:24455 free_pcp:16590 free_cma:0 [ 739.986416][T18956] Node 0 active_anon:168kB inactive_anon:64kB active_file:16kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8992kB pagetables:1396kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 739.986464][T18956] Node 1 active_anon:6900kB inactive_anon:5072kB active_file:8364kB inactive_file:81104kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:102148kB dirty:1052kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6324kB pagetables:5128kB sec_pagetables:184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 739.986514][T18956] Node 0 DMA free:2024kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:0kB active_file:16kB inactive_file:68kB unevictable:0kB writepending:8kB zspages:116kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:600kB local_pcp:80kB free_cma:0kB [ 739.986564][T18956] lowmem_reserve[]: 0 278 278 278 278 [ 739.986596][T18956] Node 0 DMA32 free:14688kB boost:0kB min:12624kB low:15780kB high:18936kB reserved_highatomic:2048kB free_highatomic:172kB active_anon:156kB inactive_anon:64kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB zspages:880kB present:1032196kB managed:284776kB mlocked:0kB bounce:0kB free_pcp:10068kB local_pcp:1228kB free_cma:0kB [ 739.986647][T18956] lowmem_reserve[]: 0 0 0 0 0 [ 739.986678][T18956] Node 1 DMA32 free:81108kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6900kB inactive_anon:5072kB active_file:8364kB inactive_file:81104kB unevictable:4000kB writepending:1052kB zspages:4524kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:55692kB local_pcp:12888kB free_cma:0kB [ 739.986727][T18956] lowmem_reserve[]: 0 0 0 0 0 [ 739.986756][T18956] Node 0 DMA: 36*4kB (UM) 59*8kB (UM) 8*16kB (UM) 12*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2024kB [ 739.986910][T18956] Node 0 DMA32: 26*4kB (EH) 23*8kB (UEH) 36*16kB (UME) 94*32kB (UME) 33*64kB (UMEH) 10*128kB (UME) 9*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 14688kB [ 739.987040][T18956] Node 1 DMA32: 167*4kB (UM) 183*8kB (UME) 98*16kB (UME) 150*32kB (UME) 48*64kB (UME) 78*128kB (UME) 45*256kB (UME) 24*512kB (UME) 11*1024kB (M) 10*2048kB (UM) 1*4096kB (U) = 81204kB [ 739.987191][T18956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.987206][T18956] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 739.987220][T18956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.987235][T18956] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 739.987248][T18956] 24721 total pagecache pages [ 739.987255][T18956] 1080 pages in swap cache [ 739.987262][T18956] Free swap = 97324kB [ 739.987269][T18956] Total swap = 124996kB [ 739.987276][T18956] 524155 pages RAM [ 739.987282][T18956] 0 pages HighMem/MovableOnly [ 739.987289][T18956] 212069 pages reserved [ 739.987295][T18956] 0 pages cma reserved [ 740.265569][T18962] veth1_macvtap: left promiscuous mode [ 740.265595][T18962] macsec0: entered promiscuous mode [ 740.365201][T18962] veth1_macvtap: entered promiscuous mode [ 740.366834][T18962] macsec0: left promiscuous mode [ 741.116848][T18985] FAULT_INJECTION: forcing a failure. [ 741.116848][T18985] name failslab, interval 1, probability 0, space 0, times 0 [ 741.116891][T18985] CPU: 3 UID: 0 PID: 18985 Comm: syz.0.3664 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.116926][T18985] Tainted: [L]=SOFTLOCKUP [ 741.116935][T18985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 741.116950][T18985] Call Trace: [ 741.116959][T18985] [ 741.116970][T18985] dump_stack_lvl+0x100/0x190 [ 741.117010][T18985] should_fail_ex.cold+0x5/0xa [ 741.117043][T18985] should_failslab+0xc2/0x120 [ 741.117079][T18985] kmem_cache_alloc_noprof+0x92/0x6a0 [ 741.117108][T18985] ? kasan_save_free_info+0x3b/0x70 [ 741.117133][T18985] ? __kasan_slab_free+0x5f/0x80 [ 741.117168][T18985] ? vm_area_dup+0x27/0x9d0 [ 741.117219][T18985] vm_area_dup+0x27/0x9d0 [ 741.117259][T18985] __split_vma+0x19c/0x1de0 [ 741.117292][T18985] ? __pfx___split_vma+0x10/0x10 [ 741.117338][T18985] vms_gather_munmap_vmas+0x1d2/0x1720 [ 741.117363][T18985] ? kasan_quarantine_put+0x104/0x240 [ 741.117394][T18985] ? lockdep_hardirqs_on+0x7d/0x110 [ 741.117426][T18985] ? process_measurement+0x1030/0x2350 [ 741.117466][T18985] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 741.117500][T18985] ? process_measurement+0x1f4/0x2350 [ 741.117544][T18985] ? __lock_acquire+0x5c0/0x1f40 [ 741.117591][T18985] do_vmi_align_munmap+0x287/0x5f0 [ 741.117621][T18985] ? lock_acquire+0x1d1/0x380 [ 741.117656][T18985] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 741.117694][T18985] ? find_held_lock+0x2b/0x80 [ 741.117721][T18985] ? is_bpf_text_address+0x8a/0x1a0 [ 741.117785][T18985] ? mas_walk+0x260/0x310 [ 741.117820][T18985] do_vmi_munmap+0x1f8/0x3e0 [ 741.117853][T18985] do_munmap+0xba/0x100 [ 741.117887][T18985] ? __pfx_do_munmap+0x10/0x10 [ 741.117929][T18985] ? mtree_range_walk+0x72b/0xb70 [ 741.117957][T18985] ? check_prep_vma+0x2d5/0x1080 [ 741.117989][T18985] mremap_to+0x2b3/0x4c0 [ 741.118017][T18985] ? __pfx_mremap_to+0x10/0x10 [ 741.118043][T18985] ? mas_walk+0x260/0x310 [ 741.118078][T18985] __do_sys_mremap+0x99f/0x1780 [ 741.118119][T18985] ? __pfx___do_sys_mremap+0x10/0x10 [ 741.118154][T18985] ? rcu_read_lock_any_held+0x6a/0x90 [ 741.118194][T18985] ? ksys_write+0x190/0x250 [ 741.118230][T18985] ? __mutex_unlock_slowpath+0x35d/0x930 [ 741.118280][T18985] ? fput+0x7c/0x100 [ 741.118316][T18985] ? __pfx_ksys_write+0x10/0x10 [ 741.118354][T18985] __do_fast_syscall_32+0x13a/0x8b0 [ 741.118385][T18985] ? lockdep_hardirqs_on+0x7d/0x110 [ 741.118437][T18985] do_fast_syscall_32+0x32/0x70 [ 741.118469][T18985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 741.118501][T18985] RIP: 0023:0xf706efec [ 741.118529][T18985] Code: Unable to access opcode bytes at 0xf706efc2. [ 741.118541][T18985] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000a3 [ 741.118565][T18985] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600002 [ 741.118581][T18985] RDX: 0000000000600002 RSI: 0000000000000007 RDI: 0000000080a00000 [ 741.118596][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 741.118611][T18985] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 741.118625][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 741.118658][T18985] [ 741.247952][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 741.247996][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 741.248073][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 741.248092][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 741.248110][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 741.248126][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 741.248237][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000800: 0x001c instead [ 741.248256][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 741.248318][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 741.248335][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 741.248349][T18993] jffs2: Further such events for this erase block will not be printed [ 741.248487][T18993] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 741.248794][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 741.248814][T18993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 741.261917][T18993] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 741.261937][T18993] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 741.303028][T18994] netlink: 'syz.2.3666': attribute type 1 has an invalid length. [ 741.670232][T18998] veth1_macvtap: left promiscuous mode [ 741.670264][T18998] macsec0: entered promiscuous mode [ 741.675706][T18998] veth1_macvtap: entered promiscuous mode [ 741.676309][T18998] macsec0: left promiscuous mode [ 742.415622][T19010] trusted_key: encrypted_key: insufficient parameters specified [ 744.877739][T19021] FAULT_INJECTION: forcing a failure. [ 744.877739][T19021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.877772][T19021] CPU: 3 UID: 0 PID: 19021 Comm: syz.2.3676 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.877797][T19021] Tainted: [L]=SOFTLOCKUP [ 744.877802][T19021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 744.877809][T19021] Call Trace: [ 744.877813][T19021] [ 744.877819][T19021] dump_stack_lvl+0x100/0x190 [ 744.877838][T19021] should_fail_ex.cold+0x5/0xa [ 744.877854][T19021] _copy_from_user+0x2e/0xd0 [ 744.877872][T19021] move_addr_to_kernel+0x65/0x170 [ 744.877889][T19021] __sys_sendto+0x1b8/0x4e0 [ 744.877907][T19021] ? __pfx___sys_sendto+0x10/0x10 [ 744.877935][T19021] ? fput+0x7c/0x100 [ 744.877951][T19021] ? ksys_write+0x1ac/0x250 [ 744.877966][T19021] __ia32_sys_sendto+0xdd/0x1b0 [ 744.877984][T19021] ? __do_fast_syscall_32+0xb3/0x8b0 [ 744.878005][T19021] ? lockdep_hardirqs_on+0x7d/0x110 [ 744.878019][T19021] __do_fast_syscall_32+0x13a/0x8b0 [ 744.878033][T19021] ? lockdep_hardirqs_on+0x7d/0x110 [ 744.878048][T19021] do_fast_syscall_32+0x32/0x70 [ 744.878064][T19021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 744.878078][T19021] RIP: 0023:0xf7f53fec [ 744.878094][T19021] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 744.878102][T19021] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 744.878120][T19021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 744.878132][T19021] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000080000000 [ 744.878141][T19021] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 744.878150][T19021] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 744.878160][T19021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 744.878183][T19021] [ 745.002937][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3677'. [ 745.049507][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 745.049525][ T43] audit: type=1800 audit(1790912294.997:4143): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259258 res=0 errno=0 [ 745.060794][ T43] audit: type=1800 audit(1790912295.017:4144): pid=19033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259241 res=0 errno=0 [ 745.063013][ T43] audit: type=1800 audit(1790912295.017:4145): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259251 res=0 errno=0 [ 745.110184][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3678'. [ 745.110477][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3678'. [ 745.519664][T14550] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 745.671259][T14550] usb 5-1: Using ep0 maxpacket: 8 [ 745.672043][T14550] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 745.673762][T14550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 745.673804][T14550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.682749][ T43] audit: type=1800 audit(1790912295.637:4146): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259388 res=0 errno=0 [ 745.684164][ T43] audit: type=1800 audit(1790912295.637:4147): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=259417 res=0 errno=0 [ 745.685278][T14550] usb 5-1: config 0 descriptor?? [ 745.691634][ T43] audit: type=1800 audit(1790912295.647:4148): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=259395 res=0 errno=0 [ 745.707329][ T43] audit: type=1800 audit(1790912295.647:4149): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=259396 res=0 errno=0 [ 745.708508][ T43] audit: type=1800 audit(1790912295.657:4150): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=259397 res=0 errno=0 [ 745.718743][ T43] audit: type=1800 audit(1790912295.667:4151): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259437 res=0 errno=0 [ 745.896192][ T43] audit: type=1800 audit(1790912295.847:4152): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259454 res=0 errno=0 [ 745.897931][T14550] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 746.210832][ T35] usb 5-1: USB disconnect, device number 57 [ 746.254021][ T57] hid-generic 0005:0008:0009.000E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 746.549517][ T5855] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 746.700318][ T5855] usb 7-1: Using ep0 maxpacket: 8 [ 746.702190][ T5855] usb 7-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 746.702967][ T5855] usb 7-1: config 0 has no interfaces? [ 746.705204][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.705224][ T5855] usb 7-1: Product: syz [ 746.705238][ T5855] usb 7-1: Manufacturer: syz [ 746.705251][ T5855] usb 7-1: SerialNumber: syz [ 746.707337][ T5855] usb 7-1: config 0 descriptor?? [ 746.963816][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.963866][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.892293][T19024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.915096][T14550] usb 7-1: USB disconnect, device number 38 [ 748.084594][T19057] veth1_macvtap: left promiscuous mode [ 748.084621][T19057] macsec0: entered promiscuous mode [ 748.124901][T19057] veth1_macvtap: entered promiscuous mode [ 748.125992][T19057] macsec0: left promiscuous mode [ 748.349669][ T9] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 748.500253][ T9] usb 12-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 748.501211][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 748.501240][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.504157][ T9] usb 12-1: config 0 descriptor?? [ 749.099151][T19076] trusted_key: encrypted_key: insufficient parameters specified [ 749.396957][T19082] bond0: Error: Cannot enslave bond to itself. [ 749.520877][T19082] [ 749.522252][T19082] ====================================================== [ 749.526176][T19082] WARNING: possible circular locking dependency detected [ 749.528910][T19082] syzkaller #0 Tainted: G L [ 749.531124][T19082] ------------------------------------------------------ [ 749.533876][T19082] syz.2.3693/19082 is trying to acquire lock: [ 749.536229][T19082] ffffffff8ff53aa0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_show+0x26/0x210 [ 749.539743][T19082] [ 749.539743][T19082] but task is already holding lock: [ 749.543055][T19082] ffff888024c0ee18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 749.547949][T19082] [ 749.547949][T19082] which lock already depends on the new lock. [ 749.547949][T19082] [ 749.552671][T19082] [ 749.552671][T19082] the existing dependency chain (in reverse order) is: [ 749.556365][T19082] [ 749.556365][T19082] -> #4 (&p->lock){+.+.}-{4:4}: [ 749.559413][T19082] lock_acquire+0x1d1/0x380 [ 749.561523][T19082] __mutex_lock+0x1a4/0x1bd0 [ 749.563625][T19082] seq_read_iter+0xe1/0x1270 [ 749.565750][T19082] kernfs_fop_read_iter+0x46c/0x610 [ 749.568112][T19082] __kernel_read+0x397/0xad0 [ 749.570805][T19082] integrity_kernel_read+0x7e/0xb0 [ 749.573591][T19082] ima_calc_file_hash_tfm+0x25e/0x350 [ 749.576602][T19082] ima_calc_file_hash+0x1e3/0x380 [ 749.578943][T19082] ima_collect_measurement+0x94f/0xb30 [ 749.581486][T19082] process_measurement+0xdfe/0x2350 [ 749.583905][T19082] ima_file_check+0xcc/0x120 [ 749.586107][T19082] security_file_post_open+0xc4/0x210 [ 749.588668][T19082] path_openat+0x5cd/0x2440 [ 749.591036][T19082] do_file_open+0x20e/0x430 [ 749.593251][T19082] do_sys_openat2+0x10f/0x1e0 [ 749.595805][T19082] __x64_sys_openat+0x12d/0x210 [ 749.598768][T19082] do_syscall_64+0x121/0x770 [ 749.601125][T19082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.603774][T19082] [ 749.603774][T19082] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 749.607344][T19082] lock_acquire+0x1d1/0x380 [ 749.609729][T19082] __mutex_lock+0x1a4/0x1bd0 [ 749.611882][T19082] process_measurement+0x5ab/0x2350 [ 749.614723][T19082] ima_file_check+0xcc/0x120 [ 749.617478][T19082] security_file_post_open+0xc4/0x210 [ 749.620338][T19082] path_openat+0x5cd/0x2440 [ 749.622774][T19082] do_file_open+0x20e/0x430 [ 749.625021][T19082] file_open_name+0x1c3/0x3e0 [ 749.627202][T19082] filp_open+0x2e/0x50 [ 749.629159][T19082] kernel_read_file_from_path_initns+0xec/0x240 [ 749.631949][T19082] _request_firmware+0x733/0x13c0 [ 749.634306][T19082] request_firmware+0x35/0x50 [ 749.636534][T19082] reg_reload_regdb+0x85/0x460 [ 749.638815][T19082] genl_family_rcv_msg_doit+0x214/0x300 [ 749.641676][T19082] genl_rcv_msg+0x560/0x800 [ 749.644146][T19082] netlink_rcv_skb+0x159/0x420 [ 749.646632][T19082] genl_rcv+0x28/0x40 [ 749.648561][T19082] netlink_unicast+0x585/0x850 [ 749.650756][T19082] netlink_sendmsg+0x8b0/0xda0 [ 749.652946][T19082] ____sys_sendmsg+0xa4d/0xbe0 [ 749.655199][T19082] ___sys_sendmsg+0x190/0x1e0 [ 749.657395][T19082] __sys_sendmsg+0x160/0x210 [ 749.659668][T19082] __do_fast_syscall_32+0x13a/0x8b0 [ 749.662354][T19082] do_fast_syscall_32+0x32/0x70 [ 749.665266][T19082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.668973][T19082] [ 749.668973][T19082] -> #2 (cb_lock){++++}-{4:4}: [ 749.671870][T19082] lock_acquire+0x1d1/0x380 [ 749.674017][T19082] down_read+0x99/0x4c0 [ 749.676049][T19082] genl_release+0x7e/0x1d0 [ 749.678167][T19082] netlink_release+0x105e/0x2000 [ 749.680397][T19082] __sock_release+0xb3/0x260 [ 749.682506][T19082] sock_close+0x1c/0x30 [ 749.684516][T19082] __fput+0x3ff/0xb50 [ 749.686433][T19082] fput_close_sync+0x118/0x250 [ 749.688843][T19082] __x64_sys_close+0x8b/0x120 [ 749.691284][T19082] do_syscall_64+0x121/0x770 [ 749.693783][T19082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.696800][T19082] [ 749.696800][T19082] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 749.700538][T19082] lock_acquire+0x1d1/0x380 [ 749.702650][T19082] down_write+0x8b/0x1f0 [ 749.704666][T19082] __sock_release+0x86/0x260 [ 749.706893][T19082] sock_close+0x1c/0x30 [ 749.708951][T19082] __fput+0x3ff/0xb50 [ 749.711073][T19082] __fput_sync+0xd7/0x100 [ 749.713424][T19082] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 749.716646][T19082] nvme_tcp_configure_admin_queue+0x26/0x530 [ 749.719463][T19082] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 749.721815][T19082] nvme_tcp_create_ctrl+0x970/0xd90 [ 749.724176][T19082] nvmf_dev_write+0x4ee/0xb60 [ 749.726328][T19082] vfs_write+0x2aa/0x1050 [ 749.728380][T19082] ksys_write+0x12a/0x250 [ 749.730510][T19082] __do_fast_syscall_32+0x13a/0x8b0 [ 749.733003][T19082] do_fast_syscall_32+0x32/0x70 [ 749.735323][T19082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.738373][T19082] [ 749.738373][T19082] -> #0 (nvmf_dev_mutex){+.+.}-{4:4}: [ 749.741799][T19082] check_prev_add+0xeb/0xe60 [ 749.744114][T19082] __lock_acquire+0x1528/0x1f40 [ 749.746447][T19082] lock_acquire+0x1d1/0x380 [ 749.748606][T19082] __mutex_lock+0x1a4/0x1bd0 [ 749.750701][T19082] nvmf_dev_show+0x26/0x210 [ 749.752965][T19082] seq_read_iter+0x32f/0x1270 [ 749.755627][T19082] seq_read+0x344/0x4d0 [ 749.757818][T19082] vfs_read+0x1e4/0xb40 [ 749.759824][T19082] ksys_read+0x12a/0x250 [ 749.761873][T19082] __do_fast_syscall_32+0x13a/0x8b0 [ 749.764251][T19082] do_fast_syscall_32+0x32/0x70 [ 749.766585][T19082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.769471][T19082] [ 749.769471][T19082] other info that might help us debug this: [ 749.769471][T19082] [ 749.774564][T19082] Chain exists of: [ 749.774564][T19082] nvmf_dev_mutex --> &ima_iint_mutex_key[depth] --> &p->lock [ 749.774564][T19082] [ 749.780043][T19082] Possible unsafe locking scenario: [ 749.780043][T19082] [ 749.782977][T19082] CPU0 CPU1 [ 749.785072][T19082] ---- ---- [ 749.787158][T19082] lock(&p->lock); [ 749.788707][T19082] lock(&ima_iint_mutex_key[depth]); [ 749.791910][T19082] lock(&p->lock); [ 749.794956][T19082] lock(nvmf_dev_mutex); [ 749.797158][T19082] [ 749.797158][T19082] *** DEADLOCK *** [ 749.797158][T19082] [ 749.801251][T19082] locks held by syz.2.3693/19082: 1, last CPU#2: [ 749.803714][T19082] #0: ffff888024c0ee18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 749.807249][T19082] [ 749.807249][T19082] stack backtrace: [ 749.809635][T19082] CPU: 2 UID: 0 PID: 19082 Comm: syz.2.3693 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.813921][T19082] Tainted: [L]=SOFTLOCKUP [ 749.815625][T19082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 749.819779][T19082] Call Trace: [ 749.821232][T19082] [ 749.822479][T19082] dump_stack_lvl+0x100/0x190 [ 749.824775][T19082] print_circular_bug.cold+0x178/0x1be [ 749.827198][T19082] check_noncircular+0x146/0x160 [ 749.829338][T19082] check_prev_add+0xeb/0xe60 [ 749.831397][T19082] ? __lock_acquire+0x5c0/0x1f40 [ 749.833371][T19082] __lock_acquire+0x1528/0x1f40 [ 749.835376][T19082] ? seq_read+0x344/0x4d0 [ 749.837141][T19082] ? vfs_read+0x1e4/0xb40 [ 749.838907][T19082] lock_acquire+0x1d1/0x380 [ 749.841004][T19082] ? nvmf_dev_show+0x26/0x210 [ 749.843395][T19082] ? __pfx___might_resched+0x10/0x10 [ 749.845889][T19082] __mutex_lock+0x1a4/0x1bd0 [ 749.847765][T19082] ? nvmf_dev_show+0x26/0x210 [ 749.849651][T19082] ? nvmf_dev_show+0x26/0x210 [ 749.851562][T19082] ? __pfx___mutex_lock+0x10/0x10 [ 749.853620][T19082] ? __kasan_kmalloc+0xaa/0xb0 [ 749.855552][T19082] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 749.857765][T19082] ? nvmf_dev_show+0x26/0x210 [ 749.859538][T19082] nvmf_dev_show+0x26/0x210 [ 749.861397][T19082] seq_read_iter+0x32f/0x1270 [ 749.863442][T19082] seq_read+0x344/0x4d0 [ 749.865461][T19082] ? __pfx_seq_read+0x10/0x10 [ 749.867971][T19082] ? common_file_perm+0x266/0x500 [ 749.870595][T19082] ? bpf_lsm_file_permission+0x9/0x10 [ 749.873098][T19082] ? security_file_permission+0x76/0x210 [ 749.875126][T19082] ? rw_verify_area+0xce/0x6d0 [ 749.877025][T19082] ? __pfx_seq_read+0x10/0x10 [ 749.878977][T19082] vfs_read+0x1e4/0xb40 [ 749.880811][T19082] ? lock_acquire+0x1d1/0x380 [ 749.882791][T19082] ? __fget_files+0x34/0x3d0 [ 749.884729][T19082] ? __pfx_vfs_read+0x10/0x10 [ 749.886609][T19082] ? find_held_lock+0x2b/0x80 [ 749.888521][T19082] ? __fget_files+0x215/0x3d0 [ 749.890575][T19082] ? __fget_files+0x215/0x3d0 [ 749.892745][T19082] ? __fget_files+0x21f/0x3d0 [ 749.895651][T19082] ksys_read+0x12a/0x250 [ 749.898359][T19082] ? __pfx_ksys_read+0x10/0x10 [ 749.900926][T19082] __do_fast_syscall_32+0x13a/0x8b0 [ 749.903118][T19082] ? lockdep_hardirqs_on+0x7d/0x110 [ 749.905359][T19082] do_fast_syscall_32+0x32/0x70 [ 749.907459][T19082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.910066][T19082] RIP: 0023:0xf7f53fec [ 749.911705][T19082] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 749.914428][T19082] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 749.918088][T19082] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000480 [ 749.921898][T19082] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 749.925946][T19082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 749.929743][T19082] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 749.933112][T19082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 749.936482][T19082] [ 750.095994][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3695'. [ 750.218933][ T9] usb 12-1: string descriptor 0 read error: -71 [ 750.220953][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 750.220979][ T43] audit: type=1800 audit(1790912300.177:4169): pid=19096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259790 res=0 errno=0 [ 750.221927][ T9] usbhid 12-1:0.0: can't add hid device: -71 [ 750.221982][ T9] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 750.222935][ T9] usb 12-1: USB disconnect, device number 4