last executing test programs: 11.287357031s ago: executing program 0 (id=1087): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000380)={"b5293ce5975955b1b9ba75a030e5cf254699933de1a35faa3894db5240f3", 0x81, 0x0, 0x1, 0x8, 0x1, 0x3, 0x9, 0x0, [0xffffff00, 0x0, 0x1, 0x3, 0xc, 0x100, 0x10, 0xebb, 0x6dce27db, 0x101, 0x7, 0x3, 0x5, 0x4, 0x7, 0x4, 0x8, 0x45, 0x80000000]}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/config.gz\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r6, 0x8004510a, &(0x7f0000000000)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c030800000000"}}}}, 0x3e) read(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="d094000002000000818d8b7ed6e95fddd85b1b55d536b7f2a8521b9a0f560375c1c552"]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0x7, &(0x7f0000000000)) shmctl$SHM_LOCK(0x0, 0xb) recvfrom$inet_nvme(r2, &(0x7f0000000040)=""/2, 0x2, 0x2001, &(0x7f00000000c0)=@l2={0x1f, 0x8, @none, 0x7, 0x2}, 0x80) 10.707287638s ago: executing program 0 (id=1088): r0 = openat$sndtimer(0xffffff9c, 0x0, 0x101000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000080)=[0x7a, 0x5]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0x8, 0x0, 0x200, r1, 0x7, '\x00', r2, r4, 0x4, 0x2, 0x1, 0xf}, 0x50) close(r5) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x2, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x2, 0x0, @empty}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) process_madvise(r8, 0x0, 0x0, 0xf, 0x0) r10 = fsopen(&(0x7f0000000040)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='\x00', 0x0) unshare(0x10020080) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000140)=""/210) 10.57067284s ago: executing program 2 (id=1097): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/wireless\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r3, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='size\x00', &(0x7f00000000c0)='10M\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x3, 0xfa}, 0x2) syz_emit_ethernet(0x3f, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635000000400f22c00f01cfb800008ee0bad004b80b00ef660f70420000baf80c66b8502c238166efbafc0c66b80000000066efba610066b8510000000f01cb66b9800000c00f32c0b89257870f30f2a5660f38814b01", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) 9.550480477s ago: executing program 3 (id=1089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000040)) 9.220549607s ago: executing program 2 (id=1090): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x2, 0x4, 0x5f8f, 0x3, 0x0, 0x8, 0x7}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket(0x28, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) 8.07524026s ago: executing program 2 (id=1091): socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, r2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_open_dev$ublk_bdev(&(0x7f0000000080), 0x0, 0x60580) pwrite64$ublk_bdev(r4, &(0x7f00000001c0)="4f68f338be4843196fb36ec23a8a01dd9c954f91af01ed8adfac15146cf52b81b154", 0x22, 0x1ff) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x20}) 8.07480486s ago: executing program 1 (id=1092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB]) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="3ce2", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) shutdown(r0, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'ip6gretap0\x00', 'bond0\x00', {0x1722a77d736144f5}, {0xff}, 0x8, 0x0, 0x3, 0x14}, 0x0, 0x124, 0x14c, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x22, 0x9, 0x0, 0x1, 0x6, 0xb3c, 0x10, 0x20, 0x20}, {0x6}}}, @common=@unspec=@addrtype1={{0x28}, {0x684, 0x9, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x2}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x4, 0x0, [0x34d, 0x4, 0x3, 0xb, 0x6, 0x2, 0x3da6, 0xd, 0x407, 0x7, 0x5, 0xe420, 0x3, 0x10, 0x7f, 0x2d], 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x60, 0x1, "bf50e684840e31838b38a8722c839ed5aca31d87e30f043f5135ab48dfbc"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x39c) 7.00320883s ago: executing program 3 (id=1094): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000180)) shutdown(0xffffffffffffffff, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040), 0x111, 0x9}}, 0x4c) 7.002807139s ago: executing program 1 (id=1095): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) 6.797825111s ago: executing program 0 (id=1103): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x8) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write(r4, &(0x7f00000000c0), 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x560d, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 6.032160004s ago: executing program 1 (id=1096): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x17b1, &(0x7f0000000100)={0x0, 0xe7b5, 0x80, 0x20011, 0x1}) r4 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xb, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x48}}, 0x800) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @multicast}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000140)) 4.91569096s ago: executing program 3 (id=1098): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) unshare(0x28000600) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_io_uring_setup(0x3acd, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000140)=0x0, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x101, 0x11, 0x5, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="b8", 0x1, 0xfff) ioctl$UFFDIO_ZEROPAGE(r11, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.975969187s ago: executing program 0 (id=1099): socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket(0x2, 0x80805, 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) dup(r8) r9 = dup(r6) syz_ublk_setup_queues(r9, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x77fffa, 0x0, 0x2000, 0x10000000, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35ba, 0x100, 0x0, 0x30b, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x167}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffd9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$KDENABIO(r0, 0x4b36) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000180)={0x1ff, 0x1, 0x2, 0x4, 0x3, 0x3152eb0d, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.975498154s ago: executing program 2 (id=1106): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r7, 0x0, 0x3, 0x1}}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x80a, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000f40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x34, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @remote, @local}, {0x11, 0x7, 0x0, @empty}}}}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x54c, 0x2fc, 0xa, 0x148, 0x2fc, 0x60, 0x4b8, 0x2a8, 0x2a8, 0x4b8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xffffffff, 'bridge0\x00', 'rose0\x00', {0xff}}, 0x0, 0x2a0, 0x2fc, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x9501, 0xa, [0x12, 0x3b, 0x32, 0x5, 0x23, 0x4, 0x3a, 0x25, 0x19, 0x26, 0x2e, 0x3d, 0x3d, 0x1d, 0x28, 0x2f], 0x1, 0x5, 0x80}}}, {{@uncond, 0x0, 0x174, 0x1bc, 0x0, {}, [@common=@inet=@recent1={{0x104}, {0xda10527, 0x323f, 0x1, 0x0, 'syz1\x00', 0x6, [0x0, 0x0, 0xff, 0xff000000]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xde97, 0x4, 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x5a8) 2.734167706s ago: executing program 1 (id=1100): modify_ldt$write2(0x11, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETLED(r0, 0x560c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB="e90c610faca20000000000000800451400780000e0000311907800000000000000000000000000649078020000000200000001100000c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134efeeb6ad324972d996277be1c7919f46f8430f140c019f1953ffa9e47fadca163a3b70439ab82b682a6576c87b"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)=ANY=[], 0x0) socket(0x400000000010, 0x3, 0x0) 2.733887739s ago: executing program 3 (id=1101): mkdir(0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002ea00200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 2.733688425s ago: executing program 2 (id=1102): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r5, 0x2007ffb) close(r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) openat(r5, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1.640006673s ago: executing program 1 (id=1104): socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 1.584244475s ago: executing program 0 (id=1113): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1, 0x800, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) dup3(r2, r6, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xfd, 0x7, 0x4}, 0x9c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0xfff, 0x5, {0xffffffffffffffff}, {}, 0x2, 0x6}) sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x1) 1.141999226s ago: executing program 3 (id=1105): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000009c0), 0x5b0, r1}, 0x38) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) close(r3) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', &(0x7f0000000100), 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', &(0x7f0000000300)=@raw={0x80, 0x0, {'\x00'}}, &(0x7f0000000400), 0x0) close(r4) renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0) umount2(&(0x7f0000000600)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='overlay\x00', 0x0, &(0x7f00000006c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='secure\x00', 0x0) 306.135197ms ago: executing program 0 (id=1107): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x492182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xffff}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xc16}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0xfffffd24) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, &(0x7f0000000500)) write(r5, &(0x7f0000000600)='1', 0x1) 305.903103ms ago: executing program 2 (id=1108): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 296.997872ms ago: executing program 3 (id=1116): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='t', 0x1) close(r1) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58) tkill(r4, 0x34) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000000)='d', 0x1}], 0x1) 0s ago: executing program 1 (id=1109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x800, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) read(r3, &(0x7f00000000c0)=""/131, 0x83) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r4 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, 0x0, 0x18) syslog(0x4, &(0x7f00000001c0)=""/90, 0x5a) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000001080)={0x20000009}) landlock_restrict_self(0xffffffffffffffff, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): f instead [ 294.581120][ T8928] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 294.581143][ T8928] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 294.581185][ T8928] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 294.581208][ T8928] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 294.581230][ T8928] jffs2: Further such events for this erase block will not be printed [ 294.581259][ T8928] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 294.581282][ T8928] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 294.581303][ T8928] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 294.592425][ T8928] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 294.592439][ T8928] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 294.637038][ T8928] tipc: Started in network mode [ 294.637063][ T8928] tipc: Node identity ac14140f, cluster identity 4711 [ 294.637264][ T8928] tipc: New replicast peer: 255.255.255.255 [ 294.638213][ T8928] tipc: Enabled bearer , priority 10 [ 294.686032][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 294.690963][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 294.691309][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 294.691957][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 294.694669][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 295.760560][ T5836] tipc: Node number set to 2886997007 [ 296.227599][ T8941] netlink: 'syz.3.658': attribute type 4 has an invalid length. [ 296.408687][ T8952] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.413366][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.583429][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.590014][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.598248][ T8952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.603715][ T8952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.612226][ T8952] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 296.634985][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.635195][ T55] bridge0: port 1(bridge_slave_0) entered listening state [ 296.643992][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.644200][ T55] bridge0: port 2(bridge_slave_1) entered listening state [ 297.901555][ T43] audit: type=1804 audit(1788437634.200:2600): pid=8963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.664" name="file1" dev="ramfs" ino=25909 res=1 errno=0 [ 300.023287][ T8966] ffs_data_put(): freeing [ 301.086106][ T6715] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 303.553554][ T9028] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 304.371032][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 304.614819][ T43] audit: type=1326 audit(1788437641.150:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 304.626620][ T43] audit: type=1326 audit(1788437641.150:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 304.685751][ T43] audit: type=1326 audit(1788437641.140:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 304.686233][ T43] audit: type=1326 audit(1788437641.170:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70befec code=0x7ffc0000 [ 304.909813][ T43] audit: type=1326 audit(1788437641.400:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 305.235576][ T43] audit: type=1326 audit(1788437641.490:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 305.315900][ T43] audit: type=1326 audit(1788437641.730:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 305.485218][ T43] audit: type=1326 audit(1788437641.910:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf70befec code=0x7ffc0000 [ 305.498284][ T43] audit: type=1326 audit(1788437642.060:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 305.524111][ T43] audit: type=1326 audit(1788437642.060:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 306.061611][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 306.938524][ T9053] /dev/nullb0: Can't open blockdev [ 308.055818][ T9060] Console: switching to colour dummy device 80x25 [ 308.107151][ T9061] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 308.134794][ T9061] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 308.134976][ T9061] pci 0000:00:01.0: BAR 2 [mem 0x80284000-0x80284fff] [ 308.135224][ T9061] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 308.140875][ T9061] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 308.153859][ T9061] pci 0000:00:01.0: Adding to iommu group 1 [ 308.160764][ T9061] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 308.160808][ T9061] pci 0000:00:01.0: vgaarb: bridge control possible [ 308.160818][ T9061] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 308.175182][ T9061] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 308.175760][ T9061] pci 0000:00:01.0: BAR 2 [mem 0x80284000-0x80284fff]: assigned [ 308.181013][ T9061] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 308.207763][ T9061] [drm] Found bochs VGA, ID 0xb0c5. [ 308.207832][ T9061] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80284000. [ 308.227270][ T9061] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 308.244290][ T1041] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 308.399967][ T9061] Console: switching to colour frame buffer device 160x50 [ 308.425294][ T1041] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 308.427197][ T1041] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.427221][ T1041] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 308.428940][ T9061] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 308.430018][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 308.430039][ T1041] usb 8-1: Product: syz [ 308.430052][ T1041] usb 8-1: Manufacturer: syz [ 308.825910][ T854] usb 8-1: USB disconnect, device number 9 [ 309.104852][ T9072] warn_alloc: 1 callbacks suppressed [ 309.104912][ T9072] syz.1.684: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 309.105069][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.1.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.105099][ T9072] Tainted: [L]=SOFTLOCKUP [ 309.105105][ T9072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.105113][ T9072] Call Trace: [ 309.105168][ T9072] [ 309.105174][ T9072] dump_stack_lvl+0x100/0x190 [ 309.105339][ T9072] warn_alloc.cold+0x9e/0xb2 [ 309.105374][ T9072] ? __pfx_warn_alloc+0x10/0x10 [ 309.105458][ T9072] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.105545][ T9072] ? __pfx_get_page_from_freelist+0x10/0x10 [ 309.105570][ T9072] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 309.105596][ T9072] ? debug_check_no_obj_freed+0x300/0x630 [ 309.105651][ T9072] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 309.105675][ T9072] ? find_held_lock+0x2b/0x80 [ 309.105720][ T9072] ? __free_frozen_pages+0x747/0x10f0 [ 309.105738][ T9072] ? __free_frozen_pages+0x747/0x10f0 [ 309.105758][ T9072] ? _raw_spin_unlock+0x28/0x50 [ 309.105790][ T9072] ? __pfx_alloc_migration_target+0x10/0x10 [ 309.105831][ T9072] __folio_alloc_noprof+0x16/0x260 [ 309.105852][ T9072] alloc_migration_target+0x1d7/0x6d0 [ 309.105870][ T9072] migrate_pages_batch+0x5c4/0x4680 [ 309.105889][ T9072] ? __schedule+0x1230/0x6920 [ 309.105902][ T9072] ? __pfx_alloc_migration_target+0x10/0x10 [ 309.105922][ T9072] ? migrate_pages_sync+0x12c/0x880 [ 309.105940][ T9072] ? migrate_pages_sync+0x588/0x880 [ 309.105957][ T9072] ? __pfx_migrate_pages_batch+0x10/0x10 [ 309.105977][ T9072] ? lock_acquire+0x1d1/0x380 [ 309.105993][ T9072] ? __pfx_migrate_pages_sync+0x10/0x10 [ 309.106014][ T9072] ? __lock_acquire+0x4c5/0x1ec0 [ 309.106030][ T9072] ? __css_rstat_updated+0x1ce/0x590 [ 309.106067][ T9072] migrate_pages+0x1950/0x2850 [ 309.106088][ T9072] ? __pfx_alloc_migration_target+0x10/0x10 [ 309.106109][ T9072] ? __pfx_migrate_pages+0x10/0x10 [ 309.106132][ T9072] ? mtree_load+0x3a4/0xb50 [ 309.106155][ T9072] move_pages_and_store_status+0xf1/0x230 [ 309.106175][ T9072] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 309.106200][ T9072] kernel_move_pages+0xca4/0x14d0 [ 309.106223][ T9072] ? __pfx_kernel_move_pages+0x10/0x10 [ 309.106245][ T9072] ? xfd_validate_state+0x129/0x190 [ 309.106271][ T9072] __ia32_sys_move_pages+0xdd/0x1b0 [ 309.106289][ T9072] ? __do_fast_syscall_32+0xb3/0x8b0 [ 309.106306][ T9072] ? lockdep_hardirqs_on+0x7d/0x110 [ 309.106322][ T9072] __do_fast_syscall_32+0x13a/0x8b0 [ 309.106341][ T9072] do_fast_syscall_32+0x32/0x70 [ 309.106358][ T9072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.106374][ T9072] RIP: 0023:0xf7fd3fec [ 309.106390][ T9072] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 309.106430][ T9072] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 309.106447][ T9072] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 309.106455][ T9072] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 309.106463][ T9072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.106470][ T9072] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 309.106477][ T9072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.106493][ T9072] [ 309.106534][ T9072] Mem-Info: [ 309.106555][ T9072] active_anon:8002 inactive_anon:782 isolated_anon:12 [ 309.106555][ T9072] active_file:7723 inactive_file:11985 isolated_file:0 [ 309.106555][ T9072] unevictable:992 dirty:611 writeback:0 [ 309.106555][ T9072] slab_reclaimable:6493 slab_unreclaimable:57836 [ 309.106555][ T9072] mapped:24003 shmem:6874 pagetables:1223 [ 309.106555][ T9072] sec_pagetables:310 bounce:0 [ 309.106555][ T9072] kernel_misc_reclaimable:0 [ 309.106555][ T9072] free:33342 free_pcp:0 free_cma:0 [ 309.106599][ T9072] Node 0 active_anon:1868kB inactive_anon:356kB active_file:16kB inactive_file:1492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:1436kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 309.106647][ T9072] Node 1 active_anon:30140kB inactive_anon:2772kB active_file:30876kB inactive_file:46448kB unevictable:3968kB isolated(anon):48kB isolated(file):0kB mapped:95984kB dirty:2444kB writeback:0kB shmem:25360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:5244kB pagetables:3456kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 309.106694][ T9072] Node 0 DMA free:2008kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:312kB inactive_anon:292kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.107845][ T9072] lowmem_reserve[]: 0 278 278 278 278 [ 309.110023][ T9072] Node 0 DMA32 free:21400kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1556kB inactive_anon:64kB active_file:16kB inactive_file:1492kB unevictable:0kB writepending:0kB zspages:2040kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.110315][ T9072] lowmem_reserve[]: 0 0 0 0 0 [ 309.110613][ T9072] Node 1 DMA32 free:109960kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30140kB inactive_anon:2772kB active_file:30876kB inactive_file:46448kB unevictable:3968kB writepending:2444kB zspages:5600kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.110800][ T9072] lowmem_reserve[]: 0 0 0 0 0 [ 309.111022][ T9072] Node 0 DMA: 36*4kB (UM) 9*8kB (UM) 4*16kB (UM) 26*32kB (UM) 4*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2008kB [ 309.111955][ T9072] Node 0 DMA32: 216*4kB (UME) 114*8kB (UME) 91*16kB (UME) 168*32kB (UME) 46*64kB (UME) 21*128kB (UME) 14*256kB (M) 5*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 21408kB [ 309.112556][ T9072] Node 1 DMA32: 848*4kB (UME) 1007*8kB (UME) 439*16kB (UME) 578*32kB (UME) 192*64kB (UME) 95*128kB (UME) 46*256kB (UME) 28*512kB (UME) 16*1024kB (UM) 3*2048kB (UM) 0*4096kB = 110056kB [ 309.112963][ T9072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.113005][ T9072] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.113027][ T9072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.113049][ T9072] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.113071][ T9072] 26748 total pagecache pages [ 309.113089][ T9072] 973 pages in swap cache [ 309.113107][ T9072] Free swap = 164kB [ 309.113124][ T9072] Total swap = 124996kB [ 309.113146][ T9072] 524155 pages RAM [ 309.113163][ T9072] 0 pages HighMem/MovableOnly [ 309.113180][ T9072] 212095 pages reserved [ 309.113197][ T9072] 0 pages cma reserved [ 309.927713][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 309.927830][ T43] audit: type=1326 audit(1788437646.320:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.927894][ T43] audit: type=1326 audit(1788437646.320:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.927919][ T43] audit: type=1326 audit(1788437646.340:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.927944][ T43] audit: type=1326 audit(1788437646.340:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.927967][ T43] audit: type=1326 audit(1788437646.340:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.927987][ T43] audit: type=1326 audit(1788437646.340:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.928008][ T43] audit: type=1326 audit(1788437646.340:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.928028][ T43] audit: type=1326 audit(1788437646.340:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.928049][ T43] audit: type=1326 audit(1788437646.340:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70befec code=0x7ffc0000 [ 309.928070][ T43] audit: type=1326 audit(1788437646.360:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.3.686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 310.661577][ T9096] netlink: 'syz.2.696': attribute type 2 has an invalid length. [ 312.693584][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 312.705123][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 312.709882][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 313.428219][ T9121] kAFS: unable to lookup cell '/,c¾ûL' [ 314.071526][ T9131] xt_connbytes: Forcing CT accounting to be enabled [ 314.071861][ T9131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 314.092076][ T35] libceph: connect (1)[c::]:6789 error -101 [ 314.092271][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 314.099122][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 314.130787][ T9131] ceph: No mds server is up or the cluster is laggy [ 314.704140][ T1041] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 314.866049][ T1041] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 314.873492][ T1041] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 314.873556][ T1041] usb 8-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 314.873593][ T1041] usb 8-1: config 0 has no interface number 0 [ 314.873638][ T1041] usb 8-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 314.873748][ T1041] usb 8-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 314.873789][ T1041] usb 8-1: config 0 interface 143 has no altsetting 0 [ 314.876214][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.876237][ T1041] usb 8-1: Product: syz [ 314.876249][ T1041] usb 8-1: Manufacturer: syz [ 314.876262][ T1041] usb 8-1: SerialNumber: syz [ 314.891026][ T1041] usb 8-1: config 0 descriptor?? [ 315.123133][ T1041] usb 8-1: USB disconnect, device number 10 [ 315.424721][ T5822] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 315.579822][ T5822] usb 7-1: Using ep0 maxpacket: 32 [ 315.580441][ T5822] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 315.585641][ T5822] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 315.585663][ T5822] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 315.585681][ T5822] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 315.585695][ T5822] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 315.585708][ T5822] usb 7-1: config 0 interface 0 has no altsetting 0 [ 315.587538][ T5822] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 315.587567][ T5822] usb 7-1: Product: syz [ 315.587578][ T5822] usb 7-1: Manufacturer: syz [ 315.587591][ T5822] usb 7-1: SerialNumber: syz [ 315.588772][ T1041] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 315.589508][ T5822] usb 7-1: config 0 descriptor?? [ 315.592830][ T5822] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 315.595648][ T5822] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 315.774116][ T1041] usb 8-1: Using ep0 maxpacket: 16 [ 315.774929][ T1041] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 315.775913][ T1041] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 315.775926][ T1041] usb 8-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 315.775935][ T1041] usb 8-1: config 0 has no interface number 0 [ 315.775948][ T1041] usb 8-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 315.776033][ T1041] usb 8-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 315.776048][ T1041] usb 8-1: config 0 interface 143 has no altsetting 0 [ 315.777934][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.777949][ T1041] usb 8-1: Product: syz [ 315.777957][ T1041] usb 8-1: Manufacturer: syz [ 315.777965][ T1041] usb 8-1: SerialNumber: syz [ 315.799839][ T5822] usb 7-1: USB disconnect, device number 11 [ 315.799914][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 315.804935][ T1041] usb 8-1: config 0 descriptor?? [ 315.805967][ T5822] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 316.037145][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.037890][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.078457][ T1041] usb 8-1: USB disconnect, device number 11 [ 316.385456][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 316.385542][ T43] audit: type=1326 audit(1788437652.950:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.400478][ T43] audit: type=1326 audit(1788437652.960:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.403926][ T43] audit: type=1326 audit(1788437652.960:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.403955][ T43] audit: type=1326 audit(1788437652.960:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.403980][ T43] audit: type=1326 audit(1788437652.960:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.406781][ T43] audit: type=1326 audit(1788437652.960:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.406871][ T43] audit: type=1326 audit(1788437652.970:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.414559][ T43] audit: type=1326 audit(1788437652.980:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.415040][ T43] audit: type=1326 audit(1788437652.980:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.415067][ T43] audit: type=1326 audit(1788437652.980:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 316.830237][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.830348][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.070065][ T9207] lo speed is unknown, defaulting to 1000 [ 318.073653][ T9207] lo speed is unknown, defaulting to 1000 [ 318.076990][ T9207] lo speed is unknown, defaulting to 1000 [ 318.181685][ T9207] infiniband syz1: set active [ 318.181727][ T2377] lo speed is unknown, defaulting to 1000 [ 318.187047][ T9207] infiniband syz1: added lo [ 318.266319][ T9207] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 318.266407][ T9207] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 318.269839][ T9207] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 318.284673][ T9207] RDS/IB: syz1: added [ 318.284758][ T9207] smc: adding ib device syz1 with port count 1 [ 318.285095][ T9207] smc: ib device syz1 port 1 has no pnetid [ 318.285262][ T9] lo speed is unknown, defaulting to 1000 [ 318.295737][ T9207] lo speed is unknown, defaulting to 1000 [ 318.619283][ T226] IPVS: starting estimator thread 0... [ 318.724211][ T9214] IPVS: using max 44 ests per chain, 105600 per kthread [ 318.754358][ T9207] lo speed is unknown, defaulting to 1000 [ 318.867757][ T9207] lo speed is unknown, defaulting to 1000 [ 318.963786][ T9207] lo speed is unknown, defaulting to 1000 [ 319.286804][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 319.375317][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 319.380466][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 319.561338][ T9227] netlink: 'syz.3.713': attribute type 4 has an invalid length. [ 320.234538][ T9235] netlink: 'syz.0.716': attribute type 10 has an invalid length. [ 320.791780][ T9241] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 320.791860][ T9241] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 321.116498][ T9235] team0 (unregistering): Port device team_slave_0 removed [ 321.141930][ T9235] team0 (unregistering): Port device team_slave_1 removed [ 321.165775][ T9241] udc dummy_udc.0: failed to start g1: -22 [ 321.165848][ T9241] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 321.265896][ T9241] UDC core: g1: couldn't find an available UDC or it's busy [ 321.920015][ T9257] fuse: Bad value for 'fd' [ 321.927795][ T43] kauditd_printk_skb: 255 callbacks suppressed [ 321.927914][ T43] audit: type=1326 audit(1788437658.470:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.928944][ T43] audit: type=1326 audit(1788437658.470:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.928995][ T43] audit: type=1326 audit(1788437658.470:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.929037][ T43] audit: type=1326 audit(1788437658.470:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.929082][ T43] audit: type=1326 audit(1788437658.470:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.929127][ T43] audit: type=1326 audit(1788437658.480:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.929168][ T43] audit: type=1326 audit(1788437658.480:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.929210][ T43] audit: type=1326 audit(1788437658.480:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.929252][ T43] audit: type=1326 audit(1788437658.480:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 321.929291][ T43] audit: type=1326 audit(1788437658.480:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.1.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 322.844170][ T9267] syz.3.727: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 322.850705][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz.3.727 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.850755][ T9267] Tainted: [L]=SOFTLOCKUP [ 322.850761][ T9267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.850771][ T9267] Call Trace: [ 322.850778][ T9267] [ 322.850786][ T9267] dump_stack_lvl+0x100/0x190 [ 322.850814][ T9267] warn_alloc.cold+0x9e/0xb2 [ 322.850832][ T9267] ? __pfx_warn_alloc+0x10/0x10 [ 322.850861][ T9267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.850879][ T9267] ? __pfx_get_page_from_freelist+0x10/0x10 [ 322.850901][ T9267] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 322.850927][ T9267] ? debug_check_no_obj_freed+0x300/0x630 [ 322.850948][ T9267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 322.850970][ T9267] ? find_held_lock+0x2b/0x80 [ 322.850987][ T9267] ? __free_frozen_pages+0x747/0x10f0 [ 322.851004][ T9267] ? __free_frozen_pages+0x747/0x10f0 [ 322.851022][ T9267] ? _raw_spin_unlock+0x28/0x50 [ 322.851036][ T9267] ? irqentry_exit+0x24d/0xa10 [ 322.851058][ T9267] __folio_alloc_noprof+0x16/0x260 [ 322.851077][ T9267] alloc_migration_target+0x1d7/0x6d0 [ 322.851098][ T9267] migrate_pages_batch+0x5c4/0x4680 [ 322.851116][ T9267] ? __pfx_alloc_migration_target+0x10/0x10 [ 322.851134][ T9267] ? migrate_pages_sync+0x12c/0x880 [ 322.851150][ T9267] ? migrate_pages_sync+0x588/0x880 [ 322.851166][ T9267] ? __pfx_migrate_pages_batch+0x10/0x10 [ 322.851186][ T9267] ? __pfx_migrate_pages_sync+0x10/0x10 [ 322.851205][ T9267] ? lock_acquire+0x1d1/0x380 [ 322.851219][ T9267] ? finish_task_switch.isra.0+0x149/0x10d0 [ 322.851237][ T9267] ? find_held_lock+0x2b/0x80 [ 322.851250][ T9267] migrate_pages+0x1950/0x2850 [ 322.851271][ T9267] ? __pfx_alloc_migration_target+0x10/0x10 [ 322.851297][ T9267] ? __pfx_migrate_pages+0x10/0x10 [ 322.851324][ T9267] ? mtree_load+0x3a4/0xb50 [ 322.851345][ T9267] move_pages_and_store_status+0xf1/0x230 [ 322.851367][ T9267] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 322.851393][ T9267] kernel_move_pages+0xca4/0x14d0 [ 322.851417][ T9267] ? __pfx_kernel_move_pages+0x10/0x10 [ 322.851434][ T9267] ? __fget_files+0x215/0x3d0 [ 322.851450][ T9267] ? xfd_validate_state+0x129/0x190 [ 322.851472][ T9267] __ia32_sys_move_pages+0xdd/0x1b0 [ 322.851489][ T9267] ? __do_fast_syscall_32+0xb3/0x8b0 [ 322.851505][ T9267] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.851520][ T9267] __do_fast_syscall_32+0x13a/0x8b0 [ 322.851538][ T9267] do_fast_syscall_32+0x32/0x70 [ 322.851553][ T9267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.851568][ T9267] RIP: 0023:0xf70befec [ 322.851587][ T9267] Code: Unable to access opcode bytes at 0xf70befc2. [ 322.851592][ T9267] RSP: 002b:00000000f546b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 322.851605][ T9267] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 322.851612][ T9267] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 322.851619][ T9267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.851625][ T9267] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.851637][ T9267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.851650][ T9267] [ 322.871797][ T9267] Mem-Info: [ 322.871838][ T9267] active_anon:4841 inactive_anon:6381 isolated_anon:12 [ 322.871838][ T9267] active_file:1707 inactive_file:16191 isolated_file:0 [ 322.871838][ T9267] unevictable:1000 dirty:262 writeback:0 [ 322.871838][ T9267] slab_reclaimable:6500 slab_unreclaimable:59768 [ 322.871838][ T9267] mapped:25663 shmem:9723 pagetables:1252 [ 322.871838][ T9267] sec_pagetables:311 bounce:0 [ 322.871838][ T9267] kernel_misc_reclaimable:0 [ 322.871838][ T9267] free:30087 free_pcp:60 free_cma:0 [ 322.871871][ T9267] Node 0 active_anon:1868kB inactive_anon:356kB active_file:16kB inactive_file:1188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8800kB pagetables:1436kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 322.939050][ T9267] Node 1 active_anon:17496kB inactive_anon:25168kB active_file:6812kB inactive_file:63576kB unevictable:4000kB isolated(anon):48kB isolated(file):0kB mapped:102624kB dirty:1048kB writeback:0kB shmem:36756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5212kB pagetables:3572kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 322.939232][ T9267] Node 0 DMA free:2008kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:312kB inactive_anon:292kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.939288][ T9267] lowmem_reserve[]: 0 278 278 278 278 [ 322.948177][ T9267] Node 0 DMA32 free:21792kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1556kB inactive_anon:64kB active_file:16kB inactive_file:1188kB unevictable:0kB writepending:0kB zspages:2040kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.948212][ T9267] lowmem_reserve[]: 0 0 0 0 0 [ 322.948231][ T9267] Node 1 DMA32 free:96248kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:17496kB inactive_anon:25168kB active_file:6812kB inactive_file:63576kB unevictable:4000kB writepending:1048kB zspages:5600kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:448kB local_pcp:0kB free_cma:0kB [ 322.957755][ T9267] lowmem_reserve[]: 0 0 0 0 0 [ 322.957790][ T9267] Node 0 DMA: 36*4kB (UM) 9*8kB (UM) 4*16kB (UM) 26*32kB (UM) 4*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2008kB [ 322.957896][ T9267] Node 0 DMA32: 211*4kB (UME) 110*8kB (UME) 88*16kB (UME) 168*32kB (UME) 40*64kB (UME) 12*128kB (UME) 6*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 21820kB [ 322.957978][ T9267] Node 1 DMA32: 420*4kB (UME) 358*8kB (UME) 143*16kB (UME) 304*32kB (UME) 181*64kB (UME) 62*128kB (UME) 51*256kB (UME) 30*512kB (UME) 21*1024kB (UM) 5*2048kB (UM) 0*4096kB = 96240kB [ 322.958059][ T9267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.958069][ T9267] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 322.958077][ T9267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.958086][ T9267] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 322.958094][ T9267] 27821 total pagecache pages [ 322.958098][ T9267] 1007 pages in swap cache [ 322.958103][ T9267] Free swap = 172kB [ 322.958106][ T9267] Total swap = 124996kB [ 322.958110][ T9267] 524155 pages RAM [ 322.958129][ T9267] 0 pages HighMem/MovableOnly [ 322.958134][ T9267] 212095 pages reserved [ 322.958138][ T9267] 0 pages cma reserved [ 323.419059][ T9269] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 323.476468][ T9271] batman_adv: batadv0: Adding interface: veth0 [ 323.476524][ T9271] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.476751][ T9271] batman_adv: batadv0: Interface activated: veth0 [ 323.500089][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.500186][ T9271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.766068][ T9276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.731'. [ 323.766585][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.766607][ T9271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.813688][ T9271] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 323.813773][ T9271] batman_adv: batadv0: Removing interface: ip6gretap1 [ 323.825613][ T9271] batman_adv: batadv0: Interface deactivated: veth0 [ 323.825691][ T9271] batman_adv: batadv0: Removing interface: veth0 [ 323.860395][ T9271] batadv0 (unregistering): left promiscuous mode [ 324.416939][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 324.417093][ T9276] bond_slave_0: entered allmulticast mode [ 324.917855][ T9285] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 325.011388][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.024134][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 326.111665][ T9306] overlayfs: failed to clone upperpath [ 326.547592][ T9304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.066598][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 327.067400][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 327.367115][ T9326] Console: switching to colour dummy device 80x25 [ 328.273113][ T9333] bridge2: entered promiscuous mode [ 328.273164][ T9333] bridge2: entered allmulticast mode [ 328.334413][ T9327] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 328.370446][ T9327] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 328.370941][ T9327] pci 0000:00:01.0: BAR 2 [mem 0x80284000-0x80284fff] [ 328.372215][ T9327] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 328.374871][ T9327] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 328.461973][ T9327] pci 0000:00:01.0: Adding to iommu group 1 [ 328.489532][ T9327] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 328.489590][ T9327] pci 0000:00:01.0: vgaarb: bridge control possible [ 328.489605][ T9327] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 328.506577][ T9327] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 328.506885][ T9327] pci 0000:00:01.0: BAR 2 [mem 0x80284000-0x80284fff]: assigned [ 328.519005][ T9327] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 328.604685][ T9327] [drm] Found bochs VGA, ID 0xb0c5. [ 328.604760][ T9327] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80284000. [ 328.680094][ T9327] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 329.201821][ T9327] Console: switching to colour frame buffer device 160x50 [ 329.260408][ T9327] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 329.342226][ T9340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 329.351619][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'. [ 329.567122][ T9330] netlink: 14 bytes leftover after parsing attributes in process `syz.1.745'. [ 330.142733][ T9346] bridge1: entered promiscuous mode [ 330.142956][ T9346] bridge1: entered allmulticast mode [ 330.758254][ T9356] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 331.052467][ T9365] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 331.052547][ T9365] md: pers->run() failed ... [ 332.245522][ T9363] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 332.245588][ T9363] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 332.245761][ T9363] vhci_hcd vhci_hcd.0: Device attached [ 332.566824][ T5836] usb 38-1: SetAddress Request (6) to port 0 [ 332.569097][ T5836] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 332.709473][ T9372] vhci_hcd: connection reset by peer [ 332.718933][ T5615] vhci_hcd vhci_hcd.0: stop threads [ 332.721919][ T5615] vhci_hcd vhci_hcd.0: release socket [ 332.983977][ T5615] vhci_hcd vhci_hcd.0: disconnect device [ 333.093487][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 333.093593][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 333.095292][ T9379] netlink: 96 bytes leftover after parsing attributes in process `syz.2.755'. [ 336.124895][ T9428] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 336.124925][ T9428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 336.126009][ T9428] vhci_hcd vhci_hcd.0: Device attached [ 336.907788][ T9428] rdma_rxe: rxe_newlink: failed to add wg2 [ 337.102298][ T9443] pim6reg: entered allmulticast mode [ 337.130044][ T9443] pim6reg: left allmulticast mode [ 337.217371][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 338.054188][ T1356] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 338.069967][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 338.214346][ T1356] usb 8-1: Using ep0 maxpacket: 32 [ 338.215165][ T1356] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 338.222778][ T1356] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.222847][ T1356] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.242946][ T1356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.246973][ T1356] usb 8-1: Product: syz [ 338.247346][ T1356] usb 8-1: Manufacturer: syz [ 338.247360][ T1356] usb 8-1: SerialNumber: syz [ 338.466809][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 339.313059][ T1356] usb 8-1: USB disconnect, device number 12 [ 339.686009][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 339.686105][ T43] audit: type=1800 audit(1788437675.243:2999): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.776" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 339.890712][ T9429] vhci_hcd: connection reset by peer [ 339.891213][ T5615] vhci_hcd vhci_hcd.0: stop threads [ 339.891276][ T5615] vhci_hcd vhci_hcd.0: release socket [ 339.894475][ T5615] vhci_hcd vhci_hcd.0: disconnect device [ 339.899354][ T5836] usb 38-1: device descriptor read/8, error -110 [ 340.285778][ T5836] usb usb38-port1: attempt power cycle [ 340.647952][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 340.745904][ T9483] hpfs: hpfs_map_sector(): read error [ 340.962068][ T5836] usb usb38-port1: unable to enumerate USB device [ 341.121197][ T9483] /dev/nullb0: Can't open blockdev [ 344.865274][ T9540] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 345.096026][ T9543] bond1: (slave gretap1): making interface the new active one [ 345.103032][ T9543] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 345.482441][ T9541] Console: switching to colour dummy device 80x25 [ 346.168646][ T9552] ªªªªªª: renamed from vlan0 [ 346.921979][ T9560] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 346.922021][ T9560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 346.929313][ T9560] vhci_hcd vhci_hcd.0: Device attached [ 347.274852][ T30] usb 42-1: SetAddress Request (14) to port 0 [ 347.275051][ T30] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 347.352178][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 347.352249][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 347.388203][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 347.394566][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.394754][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.395281][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.395792][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.444960][ T9566] syz2: rxe_newlink: already configured on wg2 [ 347.522234][ T9561] vhci_hcd: connection reset by peer [ 347.532015][ T5615] vhci_hcd vhci_hcd.2: stop threads [ 347.532338][ T5615] vhci_hcd vhci_hcd.2: release socket [ 347.537679][ T5615] vhci_hcd vhci_hcd.2: disconnect device [ 349.111626][ T9585] wg2 speed is unknown, defaulting to 1000 [ 349.930723][ T9585] lo speed is unknown, defaulting to 1000 [ 351.654490][ T5836] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 351.813110][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806073c000: rx timeout, send abort [ 351.824434][ T5836] usb 8-1: Using ep0 maxpacket: 16 [ 351.825570][ T5836] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 351.832561][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.832631][ T5836] usb 8-1: Product: syz [ 351.832654][ T5836] usb 8-1: Manufacturer: syz [ 351.832678][ T5836] usb 8-1: SerialNumber: syz [ 352.313870][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055a23800: rx timeout, send abort [ 352.315307][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806073c000: abort rx timeout. Force session deactivation [ 352.344996][ T30] usb 42-1: device descriptor read/8, error -110 [ 352.702314][ T9621] overlayfs: conflicting options: nfs_export=on,index=off [ 352.814179][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055a23800: abort rx timeout. Force session deactivation [ 352.914167][ T30] usb usb42-port1: attempt power cycle [ 352.957043][ T5836] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 352.970794][ T5836] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 352.971081][ T5836] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 352.971118][ T5836] usb 8-1: media controller created [ 352.981604][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.231231][ T9625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 353.231300][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 353.231857][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 353.284145][ T5836] zl10353_read_register: readreg error (reg=127, ret==-110) [ 353.358118][ T9612] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 353.414629][ T9612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.446318][ T9635] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 353.448976][ T9635] bond1: (slave batadv1): making interface the new active one [ 353.492215][ T30] usb usb42-port1: unable to enumerate USB device [ 353.504605][ T5822] usb 38-1: SetAddress Request (10) to port 0 [ 353.504708][ T5822] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 353.512762][ T9635] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 353.658831][ T9612] bond1 (unregistering): (slave batadv1): Releasing active interface [ 353.668243][ T9628] vhci_hcd: connection reset by peer [ 353.671064][ T5615] vhci_hcd vhci_hcd.0: stop threads [ 353.671099][ T5615] vhci_hcd vhci_hcd.0: release socket [ 353.671156][ T5615] vhci_hcd vhci_hcd.0: disconnect device [ 353.674596][ T9612] bond1 (unregistering): Released all slaves [ 353.775812][ T5836] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 353.781963][ T5836] usb 8-1: USB disconnect, device number 13 [ 354.682985][ T43] audit: type=1800 audit(1788437689.242:3000): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.815" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1197 res=0 errno=0 [ 354.729255][ T9653] netlink: 'syz.3.815': attribute type 8 has an invalid length. [ 354.729445][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 354.931164][ T9653] bond0: entered promiscuous mode [ 354.931340][ T9653] gretap1: entered promiscuous mode [ 354.943612][ T9653] gretap0: entered promiscuous mode [ 354.960210][ T9653] team0: entered promiscuous mode [ 354.960568][ T9653] team_slave_0: entered promiscuous mode [ 354.962355][ T9653] team_slave_1: entered promiscuous mode [ 354.981307][ T9653] debugfs: 'hsr1' already exists in 'hsr' [ 354.981438][ T9653] Cannot create hsr debugfs directory [ 354.983768][ T9653] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 354.989676][ T9653] hsr1: entered promiscuous mode [ 355.767283][ T9676] overlayfs: failed to resolve '/ile0': -2 [ 355.804753][ T30] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 355.864346][ T9680] syzkaller1: left promiscuous mode [ 355.864387][ T9680] syzkaller1: left allmulticast mode [ 355.974987][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 357.144313][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.144372][ C3] bridge0: topology change detected, propagating [ 357.144805][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.144850][ C3] bridge0: topology change detected, propagating [ 357.350717][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 357.351037][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 357.351831][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 357.351932][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 357.352030][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 357.352357][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 357.352487][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 357.352586][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 357.353474][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 357.353571][ T9686] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 357.353765][ T9686] jffs2: Further such events for this erase block will not be printed [ 357.353933][ T9686] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 357.361237][ T9686] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 357.361596][ T9686] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 357.470066][ T9686] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 357.470223][ T9686] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 358.519262][ T9693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.586097][ T5822] usb 38-1: device descriptor read/8, error -110 [ 358.600503][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 358.600611][ T30] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 358.600643][ T30] usb 7-1: no configurations [ 358.600654][ T30] usb 7-1: can't read configurations, error -22 [ 358.886186][ T9707] wg2 speed is unknown, defaulting to 1000 [ 358.986129][ T5822] usb usb38-port1: attempt power cycle [ 359.008872][ T9710] netlink: 'syz.2.830': attribute type 1 has an invalid length. [ 359.136695][ T9712] bond1: (slave gretap1): making interface the new active one [ 359.141374][ T9712] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 359.200053][ T9707] lo speed is unknown, defaulting to 1000 [ 359.545918][ T5822] usb usb38-port1: unable to enumerate USB device [ 359.822736][ T9727] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 359.822878][ T9727] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 359.833626][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 359.838344][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 359.842289][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 359.845521][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 359.845546][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 359.845584][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 359.845604][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 359.845622][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 359.845674][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 359.845691][ T9725] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 359.845707][ T9725] jffs2: Further such events for this erase block will not be printed [ 359.845732][ T9725] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 359.845749][ T9725] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 359.845765][ T9725] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 359.911467][ T9725] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 359.914456][ T9725] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 359.974757][ T30] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 360.124936][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 360.125945][ T30] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 360.126909][ T30] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.126929][ T30] usb 8-1: config 0 has no interface number 0 [ 360.128931][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.128952][ T30] usb 8-1: Product: syz [ 360.128965][ T30] usb 8-1: Manufacturer: syz [ 360.128981][ T30] usb 8-1: SerialNumber: syz [ 360.141968][ T30] usb 8-1: config 0 descriptor?? [ 360.163251][ T30] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 360.163339][ T30] usb 8-1: selecting invalid altsetting 1 [ 360.163394][ T30] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 360.175926][ T30] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.176287][ T30] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 360.176338][ T30] usb 8-1: media controller created [ 360.191080][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.337833][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 360.845859][ T9741] kvm: apic: phys broadcast and lowest prio [ 360.878987][ T9741] e1000e 0000:00:02.0 eth1: removed PHC [ 361.033648][ T9741] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 361.317739][ T30] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 361.317835][ T30] zl10353_read_register: readreg error (reg=127, ret==-110) [ 361.565832][ T9760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 361.653759][ T9760] md: invalid raid superblock magic on ram0 [ 361.653884][ T9760] md: ram0 does not have a valid v0.90 superblock, not importing! [ 361.704866][ T9766] md: invalid raid superblock magic on ram3 [ 361.704902][ T9766] md: ram3 does not have a valid v0.90 superblock, not importing! [ 361.747021][ T9760] md/raid10:md0: unsupported raid10 layout: 0x 2c [ 361.748830][ T9760] md: pers->run() failed ... [ 361.809060][ T30] usb 8-1: USB disconnect, device number 14 [ 362.800506][ T9804] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 363.086703][ T9813] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 363.182161][ T9813] bond0: (slave gretap1): making interface the new active one [ 363.187815][ T9813] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 363.294823][ T9810] kAFS: No cell specified qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 366.074652][ T5836] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 366.117823][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'. [ 366.117894][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'. [ 366.118576][ T9849] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 366.224832][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 366.365478][ T5836] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 366.371905][ T5836] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.376416][ T5836] usb 8-1: config 0 has no interfaces? [ 366.425510][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 366.428580][ T5836] usb 8-1: Product: syz [ 366.430254][ T5836] usb 8-1: Manufacturer: syz [ 366.430313][ T5836] usb 8-1: SerialNumber: syz [ 366.436106][ T5836] usb 8-1: config 0 descriptor?? [ 368.657242][ T35] usb 8-1: USB disconnect, device number 15 [ 368.708355][ T9873] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 371.602513][ T9891] 9p: Bad value for 'rfdno' [ 371.618267][ T9891] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 371.683413][ T9891] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 371.687847][ T9891] pci 0000:00:01.0: BAR 2 [mem 0x80284000-0x80284fff] [ 371.698827][ T9891] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 371.800551][ T9891] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 372.654496][ T9891] pci 0000:00:01.0: Adding to iommu group 1 [ 372.656914][ T9891] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 372.656952][ T9891] pci 0000:00:01.0: vgaarb: bridge control possible [ 372.656961][ T9891] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 372.658945][ T9891] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 372.704906][ T9891] pci 0000:00:02.0: BAR 0 [mem 0x80240000-0x8025ffff] [ 372.705013][ T9891] pci 0000:00:02.0: BAR 1 [mem 0x80260000-0x8027ffff] [ 372.705392][ T9891] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 372.705470][ T9891] pci 0000:00:02.0: BAR 3 [mem 0x80280000-0x80283fff] [ 372.705697][ T9891] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 372.706088][ T9891] pci 0000:00:02.0: enabling Extended Tags [ 372.752963][ T9891] pci 0000:00:02.0: Adding to iommu group 2 [ 372.768497][ T9891] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 372.769693][ T9898] wg2 speed is unknown, defaulting to 1000 [ 372.775499][ T9891] pci 0000:00:02.0: ROM [mem 0x80200000-0x8023ffff pref]: assigned [ 372.775570][ T9891] pci 0000:00:02.0: BAR 0 [mem 0x80240000-0x8025ffff]: assigned [ 372.782720][ T9891] pci 0000:00:02.0: BAR 1 [mem 0x80260000-0x8027ffff]: assigned [ 372.786281][ T9891] pci 0000:00:02.0: BAR 3 [mem 0x80280000-0x80283fff]: assigned [ 372.790016][ T9891] pci 0000:00:01.0: BAR 2 [mem 0x80284000-0x80284fff]: assigned [ 372.793959][ T9891] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 372.799102][ T9891] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 372.810004][ T9891] [drm] Found bochs VGA, ID 0xb0c5. [ 372.810100][ T9891] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80284000. [ 372.851614][ T9891] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 372.936150][ T9904] overlayfs: failed to resolve './file0': -2 [ 373.117251][ T9898] lo speed is unknown, defaulting to 1000 [ 373.176134][ T9891] Console: switching to colour frame buffer device 160x50 [ 373.275747][ T9891] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 373.528464][ T9891] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 373.747969][ T9891] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 373.946299][ T9891] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 373.956286][ T9891] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 373.968052][ T9891] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 374.064610][ T30] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 374.215294][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 374.218144][ T30] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 374.218956][ T30] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 374.218970][ T30] usb 8-1: config 0 has no interface number 0 [ 374.218989][ T30] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.219002][ T30] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 374.219015][ T30] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.219028][ T30] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.219069][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.231228][ T30] usb 8-1: config 0 descriptor?? [ 374.243027][ T30] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 374.583418][ T5455] 8021q: adding VLAN 0 to HW filter on device eth1 [ 374.813318][ T9931] wg2 speed is unknown, defaulting to 1000 [ 374.879242][ T9933] overlayfs: failed to clone upperpath [ 374.980268][ T35] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 375.078126][ T30] usb 8-1: USB disconnect, device number 16 [ 375.078199][ C1] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 375.409596][ T30] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 375.409907][ T9917] ldusb: No device or device unplugged -19 [ 375.447648][ T9931] lo speed is unknown, defaulting to 1000 [ 375.649179][ T9947] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 375.877385][ T9947] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 375.877696][ T9947] overlayfs: failed to look up (tracing) for ino (-66) [ 376.164094][ T43] audit: type=1400 audit(1788437709.721:3001): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9943 comm="syz.1.870" [ 376.166338][ T9951] 9p: Bad value for 'rfdno' [ 378.279664][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.279735][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.644982][ T30] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 378.794954][ T30] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 378.798833][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.802905][ T30] usb 8-1: config 0 has no interfaces? [ 378.805601][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.810089][ T30] usb 8-1: config 0 descriptor?? [ 380.151982][ T35] usb 8-1: USB disconnect, device number 17 [ 381.675280][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 381.826408][ T30] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.828927][ T30] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.828997][ T30] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.829161][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.218369][ T9996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 382.541856][T10007] pim6reg: entered allmulticast mode [ 382.565572][T10007] pim6reg: left allmulticast mode [ 382.997133][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.165805][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.884'. [ 383.167492][T10021] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 383.182686][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.273155][ T30] usb 7-1: USB disconnect, device number 14 [ 383.288877][T10023] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 383.751740][T10040] fuse: fd is not a fuse device [ 383.947367][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 384.277142][T10047] random: crng reseeded on system resumption [ 384.750944][T10055] kAFS: No cell specified [ 386.411859][T10070] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 388.206339][T10102] input: syz0 as /devices/virtual/input/input15 [ 390.329033][T10120] syzkaller0: entered promiscuous mode [ 390.331988][T10120] syzkaller0: entered allmulticast mode [ 390.570279][T10129] overlayfs: failed to clone upperpath [ 390.658151][ T43] audit: type=1804 audit(1788437724.221:3002): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.904" name="/newroot/216/mnt/syzkaller0" dev="sda1" ino=2039 res=1 errno=0 [ 391.055176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013cd3c00: rx timeout, send abort [ 391.327044][T10143] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 391.557770][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013cd3c00: abort rx timeout. Force session deactivation [ 391.557986][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880270fec00: rx timeout, send abort [ 392.058093][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880270fec00: abort rx timeout. Force session deactivation [ 392.082974][ T1165] IPVS: starting estimator thread 0... [ 392.164755][T10162] IPVS: using max 43 ests per chain, 103200 per kthread [ 392.473758][T10170] 9p: Bad value for 'wfdno' [ 395.354296][T10180] 9pnet_virtio: no channels available for device syz [ 395.355308][T10180] overlay: ./file0 is not a directory [ 397.062905][ T43] audit: type=1800 audit(1788437730.611:3003): pid=10200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.921" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 398.893575][T10204] fuse: Unknown parameter '0x0000000000000005' [ 399.705117][T10210] syz_tun: entered allmulticast mode [ 399.970178][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.924'. [ 400.121831][ T9487] udevd[9487]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 400.433092][T10226] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.677118][T10209] syz_tun: left allmulticast mode [ 401.110853][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 401.110916][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 401.110974][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 401.110997][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 401.111020][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 401.111054][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 401.111077][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 401.111100][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 401.111140][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 401.111163][T10238] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 401.111185][T10238] jffs2: Further such events for this erase block will not be printed [ 401.111213][T10238] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 401.111235][T10238] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 401.111256][T10238] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 401.122850][T10238] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 401.122861][T10238] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 401.172526][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 401.313263][T10252] ip6t_rt: too many addresses specified [ 402.548848][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 402.549066][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 402.549119][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 402.549153][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 402.549301][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 402.549333][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 402.549617][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 402.549634][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 402.549776][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 402.549794][T10263] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 402.549811][T10263] jffs2: Further such events for this erase block will not be printed [ 402.549836][T10263] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 402.549853][T10263] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 402.549867][T10263] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 402.604382][T10263] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 402.604438][T10263] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 403.977009][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 404.046608][T10280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.941'. [ 404.066364][T10280] bond_slave_0: entered allmulticast mode [ 404.362796][T10284] wg2 speed is unknown, defaulting to 1000 [ 404.720510][T10284] lo speed is unknown, defaulting to 1000 [ 404.979160][ T43] audit: type=1326 audit(1788437738.541:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 404.980346][ T43] audit: type=1326 audit(1788437738.541:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 404.987176][ T43] audit: type=1326 audit(1788437738.551:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 404.987320][ T43] audit: type=1326 audit(1788437738.551:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 404.987429][ T43] audit: type=1326 audit(1788437738.551:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 405.018592][ T43] audit: type=1326 audit(1788437738.581:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 405.026907][ T43] audit: type=1326 audit(1788437738.591:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 405.027028][ T43] audit: type=1326 audit(1788437738.591:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 405.042082][ T43] audit: type=1326 audit(1788437738.601:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 405.102879][ T43] audit: type=1326 audit(1788437738.661:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.2.944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 405.758682][T10305] wg2 speed is unknown, defaulting to 1000 [ 405.964240][ T9] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 405.998241][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 406.145181][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.150490][ T9] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 4 [ 406.150592][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 406.161431][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 406.167319][ T9] usb 7-1: Product: syz [ 406.168954][ T9] usb 7-1: Manufacturer: syz [ 406.171545][ T9] usb 7-1: SerialNumber: syz [ 406.186172][ T9] usb 7-1: config 0 descriptor?? [ 406.192312][ T9] usb 7-1: selecting invalid altsetting 0 [ 406.557536][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.558378][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.558771][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.559252][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.559548][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.559905][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.560417][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.560740][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.561043][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.561525][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.561876][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.562185][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.562658][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.563008][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.563307][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.563839][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.567718][T10305] lo speed is unknown, defaulting to 1000 [ 406.571441][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.573608][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.575585][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.575870][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.576180][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.576913][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 406.577797][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.578063][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.578334][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.578685][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.580503][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.580770][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.582366][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.582650][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.582993][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.583272][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.588623][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.589054][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.589410][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.591072][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.591521][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.591851][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.593405][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.593749][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.597032][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.597319][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.597668][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.597950][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.614195][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.614373][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.615284][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.615519][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.616955][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.617121][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.617326][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.617496][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.617659][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.619180][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.619347][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.620347][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.620517][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.620736][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.621084][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.622597][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.622784][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.623091][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.623279][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.623466][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.631750][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.631923][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.632243][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.632453][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.633871][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.634948][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.635115][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.635280][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.638211][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.638378][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.638539][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.638746][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.638907][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.640377][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.640557][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.640811][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.641152][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.645619][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.647498][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.656451][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.656732][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.657012][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.661866][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.662162][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.663756][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.668915][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.669236][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.672370][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.672666][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.674754][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.676075][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.676240][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.676507][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.677967][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.678145][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.679233][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.679409][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.679588][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.679809][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.680089][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.680279][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.680518][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.680777][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.681087][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.689085][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.689265][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.689483][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.689648][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.689810][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.692533][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.692800][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.693068][T10304] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 406.711087][ T5822] usb 7-1: USB disconnect, device number 15 [ 406.889752][T10315] batman_adv: batadv0: Adding interface: ip6gretap1 [ 406.889825][T10315] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.890140][T10315] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 407.104831][T10324] CIFS: Attempting to mount //127.0.0.1/share [ 407.141724][T10324] CIFS: VFS: Error connecting to socket. Aborting operation. [ 407.145526][T10324] CIFS: VFS: cifs_mount failed w/return code = -101 [ 409.250783][T10332] random: crng reseeded on system resumption [ 410.539642][T10360] IPVS: ip_vs_add_dest(): server weight less than zero [ 410.595360][ T43] kauditd_printk_skb: 64 callbacks suppressed [ 410.595498][ T43] audit: type=1326 audit(1788437744.061:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.595663][ T43] audit: type=1326 audit(1788437744.061:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.595827][ T43] audit: type=1326 audit(1788437744.071:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71075ab code=0x7ffc0000 [ 410.595991][ T43] audit: type=1326 audit(1788437744.071:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.596143][ T43] audit: type=1326 audit(1788437744.071:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.596270][ T43] audit: type=1326 audit(1788437744.081:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.596411][ T43] audit: type=1326 audit(1788437744.081:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.596540][ T43] audit: type=1326 audit(1788437744.081:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.596685][ T43] audit: type=1326 audit(1788437744.081:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.596793][ T43] audit: type=1326 audit(1788437744.081:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 410.942382][T10370] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 410.988096][T10369] ima: Unable to open file: /e (-2) [ 411.647479][T10366] ima: policy update failed [ 412.091083][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'. [ 412.446602][T10375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.844566][T10385] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 412.882377][T10386] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 413.340855][T10384] tipc: Enabling of bearer rejected, already enabled [ 413.395842][T10386] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 413.759588][T10375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.832633][T10389] sctp_transport_update_pmtu: 44 callbacks suppressed [ 413.832826][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.845773][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.849902][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.852918][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.876998][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.885625][T10375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.902854][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.910884][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.930909][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.940244][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 413.954662][T10389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 414.056129][T10375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.506415][ T5615] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.535305][ T5821] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.535375][ T5821] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.535406][ T5821] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.837165][T10415] siw: device registration error -23 [ 415.406805][T10415] nvmet: adding nsid 1 to subsystem testnqn [ 415.477603][T10415] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 415.547085][T10424] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 415.701256][T10415] nvme nvme0: rdma connection establishment failed (-104) [ 415.913615][ T5822] lo speed is unknown, defaulting to 1000 [ 416.307965][T10436] wg2 speed is unknown, defaulting to 1000 [ 416.401362][T10436] lo speed is unknown, defaulting to 1000 [ 416.557255][T10445] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 416.870674][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 416.870748][ T43] audit: type=1326 audit(1788437750.431:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.886569][ T43] audit: type=1326 audit(1788437750.451:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.897749][ T43] audit: type=1326 audit(1788437750.461:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.908851][ T43] audit: type=1326 audit(1788437750.471:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.918902][ T43] audit: type=1326 audit(1788437750.471:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.930600][ T43] audit: type=1326 audit(1788437750.491:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.940744][ T43] audit: type=1326 audit(1788437750.501:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.996852][ T43] audit: type=1326 audit(1788437750.561:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.996927][ T43] audit: type=1326 audit(1788437750.561:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 416.997007][ T43] audit: type=1326 audit(1788437750.561:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 419.762309][T10485] syzkaller0: entered promiscuous mode [ 419.766613][T10485] syzkaller0: entered allmulticast mode [ 419.779643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.783249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.953755][T10483] wg2 speed is unknown, defaulting to 1000 [ 420.355622][ T5822] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 420.370882][T10483] lo speed is unknown, defaulting to 1000 [ 420.506181][ T5822] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 420.577258][ T5822] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.577351][ T5822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 420.577407][ T5822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 420.595538][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.595643][ T5822] usb 7-1: Product: syz [ 420.596057][ T5822] usb 7-1: Manufacturer: syz [ 420.596075][ T5822] usb 7-1: SerialNumber: syz [ 420.612790][ T5822] usb 7-1: config 0 descriptor?? [ 420.615540][T10494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.724764][ T5822] rc_core: IR keymap rc-streamzap not found [ 420.724829][ T5822] Registered IR keymap rc-empty [ 420.727020][ T5822] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 420.729361][ T5822] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 420.954915][T10506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.979'. [ 421.347682][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.360146][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.920917][T10516] ip6t_rt: too many addresses specified [ 423.913274][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 423.952026][ T10] usb 7-1: USB disconnect, device number 16 [ 424.316299][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 424.564498][T10543] Console: switching to colour dummy device 80x25 [ 424.635509][T10548] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 424.669518][T10548] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 424.669897][T10548] pci 0000:00:01.0: BAR 2 [mem 0x80284000-0x80284fff] [ 424.670189][T10548] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 424.672522][T10548] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 424.720394][T10548] pci 0000:00:01.0: Adding to iommu group 1 [ 424.739714][T10548] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 424.739768][T10548] pci 0000:00:01.0: vgaarb: bridge control possible [ 424.739783][T10548] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 424.766110][T10547] 9p: Bad value for 'rfdno' [ 424.781398][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 424.781461][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 424.781507][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 424.781519][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 424.781529][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 424.781551][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 424.781562][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 424.781572][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 424.781602][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 424.781611][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 424.781622][T10547] jffs2: Further such events for this erase block will not be printed [ 424.781638][T10547] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 424.781648][T10547] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 424.781657][T10547] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 424.808300][T10547] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 424.808313][T10547] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 424.838590][T10548] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 424.838723][T10548] pci 0000:00:01.0: BAR 2 [mem 0x80284000-0x80284fff]: assigned [ 424.843978][T10548] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 424.891043][T10548] [drm] Found bochs VGA, ID 0xb0c5. [ 424.891090][T10548] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80284000. [ 424.930826][T10548] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 425.195036][T10548] Console: switching to colour frame buffer device 160x50 [ 425.263209][T10548] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 426.346459][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 426.361374][T10566] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 426.372169][T10566] fuse: Bad value for 'fd' [ 426.433408][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 426.433539][ T43] audit: type=1326 audit(1788437759.991:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 426.433594][ T43] audit: type=1326 audit(1788437759.991:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 426.451580][ T43] audit: type=1326 audit(1788437760.011:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf70befec code=0x7ffc0000 [ 426.593004][ T43] audit: type=1326 audit(1788437760.151:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bf008 code=0x7ffc0000 [ 426.602133][ T43] audit: type=1326 audit(1788437760.161:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 426.612233][ T43] audit: type=1326 audit(1788437760.171:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 426.824243][ T1041] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 426.843534][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.997'. [ 426.943364][T10580] sctp_transport_update_pmtu: 41 callbacks suppressed [ 426.943450][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.943738][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.944198][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.945534][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.945922][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.946233][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.946561][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.947002][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.947349][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 426.947673][T10580] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.048100][ T1041] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.141502][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.145469][ T1041] usb 8-1: Product: syz [ 427.147694][ T1041] usb 8-1: Manufacturer: syz [ 427.150091][ T1041] usb 8-1: SerialNumber: syz [ 427.298674][ T1041] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.511976][ T43] audit: type=1326 audit(1788437761.071:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 427.521853][ T43] audit: type=1326 audit(1788437761.081:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71f75ab code=0x7ffc0000 [ 427.736167][ T43] audit: type=1326 audit(1788437761.301:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 427.744393][ T43] audit: type=1326 audit(1788437761.301:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 428.354158][ T1041] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 428.359549][ T1041] ath9k_htc: Failed to initialize the device [ 429.424923][ T1041] usb 8-1: ath9k_htc: USB layer deinitialized [ 429.704570][ T2377] usb 8-1: USB disconnect, device number 18 [ 431.098405][T10635] Cannot find set identified by id 2 to match [ 431.344646][ T1356] libceph: connect (1)[c::]:6789 error -22 [ 431.344849][ T1356] libceph: mon0 (1)[c::]:6789 connect error [ 431.635262][ T1356] libceph: connect (1)[c::]:6789 error -22 [ 431.635483][ T1356] libceph: mon0 (1)[c::]:6789 connect error [ 431.704905][T10635] ceph: No mds server is up or the cluster is laggy [ 432.333608][ T1356] libceph: connect (1)[c::]:6789 error -22 [ 432.333767][ T1356] libceph: mon0 (1)[c::]:6789 connect error [ 432.333792][T10648] fuse: fd is not a fuse device [ 433.475704][ T1356] libceph: connect (1)[c::]:6789 error -22 [ 433.479991][ T1356] libceph: mon0 (1)[c::]:6789 connect error [ 433.481275][T10657] netlink: 'syz.1.1014': attribute type 11 has an invalid length. [ 433.534796][T10645] loop5: detected capacity change from 0 to 6 [ 433.551297][T10645] Dev loop5: unable to read RDB block 6 [ 433.551355][T10645] loop5: unable to read partition table [ 433.551511][T10645] loop5: partition table beyond EOD, truncated [ 433.551553][T10645] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.736324][T10657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.740538][T10657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.750028][T10657] 8021q: adding VLAN 0 to HW filter on device eth0 [ 433.753185][T10657] 8021q: adding VLAN 0 to HW filter on device eth1 [ 433.756894][T10657] 8021q: adding VLAN 0 to HW filter on device eth2 [ 433.758055][T10657] 8021q: adding VLAN 0 to HW filter on device eth3 [ 433.764516][ T5821] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.764574][ T5821] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.764645][ T5821] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.764686][ T5821] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.772562][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 433.772618][T10657] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 434.174659][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 434.174739][ T43] audit: type=1326 audit(1788437767.691:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.3.1017" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 434.192117][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.256018][T10668] input: syz0 as /devices/virtual/input/input17 [ 434.280153][T10658] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 434.281127][T10658] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 434.665283][T10646] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 435.381592][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.381644][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.411190][T10690] No control pipe specified [ 435.523277][ T2377] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 435.694834][ T2377] usb 8-1: Using ep0 maxpacket: 32 [ 435.708088][ T2377] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 435.712380][ T2377] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.712414][ T2377] usb 8-1: config 0 has no interfaces? [ 435.727269][ T2377] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 435.727598][ T2377] usb 8-1: Product: syz [ 435.727715][ T2377] usb 8-1: Manufacturer: syz [ 435.727860][ T2377] usb 8-1: SerialNumber: syz [ 435.840316][ T2377] usb 8-1: config 0 descriptor?? [ 438.264244][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 438.629736][T10731] wg2 speed is unknown, defaulting to 1000 [ 438.667355][ T2377] usb 8-1: USB disconnect, device number 19 [ 438.966648][T10737] qrtr: Invalid version 0 [ 439.025668][T10737] syzkaller1: entered promiscuous mode [ 439.025721][T10737] syzkaller1: entered allmulticast mode [ 439.160651][T10731] lo speed is unknown, defaulting to 1000 [ 439.562452][T10739] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 439.562544][T10739] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 439.603377][T10739] udc dummy_udc.0: failed to start g1: -22 [ 439.603439][T10739] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 439.610347][T10739] UDC core: g1: couldn't find an available UDC or it's busy [ 439.711514][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.711669][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.458792][T10753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.941776][T10766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.198430][T10775] ima: policy update failed [ 442.200359][ T43] audit: type=1802 audit(1788437775.761:3157): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1036" res=0 errno=0 [ 442.645699][T10783] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 442.645730][T10783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 442.653264][T10783] vhci_hcd vhci_hcd.0: Device attached [ 442.791210][T10783] rdma_rxe: rxe_newlink: failed to add wg2 [ 442.914965][T10524] usb 42-1: SetAddress Request (18) to port 0 [ 442.915091][T10524] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 443.186607][T10784] vhci_hcd: connection reset by peer [ 443.187158][ T5615] vhci_hcd vhci_hcd.2: stop threads [ 443.187176][ T5615] vhci_hcd vhci_hcd.2: release socket [ 443.187231][ T5615] vhci_hcd vhci_hcd.2: disconnect device [ 443.634533][T10793] dvmrp0: entered allmulticast mode [ 443.642507][T10793] netlink: 'syz.1.1040': attribute type 10 has an invalid length. [ 446.744207][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.068984][T10828] input: syz1 as /devices/virtual/input/input18 [ 447.374254][ T35] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 447.536917][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 447.540349][ T35] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 447.547218][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.551890][ T35] usb 8-1: config 0 has no interfaces? [ 447.565360][ T35] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 447.565414][ T35] usb 8-1: Product: syz [ 447.565451][ T35] usb 8-1: Manufacturer: syz [ 447.565485][ T35] usb 8-1: SerialNumber: syz [ 447.583583][ T35] usb 8-1: config 0 descriptor?? [ 447.806220][ T2153] usb 8-1: USB disconnect, device number 20 [ 447.921759][T10836] atomic_op ffff888021bf61e0 conn xmit_atomic 0000000000000000 [ 447.922801][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1049'. [ 447.922886][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1049'. [ 447.951781][T10524] usb 42-1: device descriptor read/8, error -110 [ 448.470754][T10524] usb usb42-port1: attempt power cycle [ 448.519985][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 448.520035][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 448.520072][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 448.520095][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 448.520118][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 448.520144][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 448.520158][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 448.520171][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 448.520210][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 448.520225][T10855] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 448.520238][T10855] jffs2: Further such events for this erase block will not be printed [ 448.520259][T10855] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 448.520270][T10855] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 448.520277][T10855] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 448.589463][T10855] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 448.593153][T10855] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 449.185385][T10524] usb usb42-port1: unable to enumerate USB device [ 449.713315][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 451.396561][T10908] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 453.445944][T10936] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 453.538827][T10926] LUN: removable file: (no medium) [ 453.547575][ T43] audit: type=1400 audit(1788437787.111:3158): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 4, id = 0 [ 455.004996][T10956] Cannot find add_set index 2 as target [ 455.439732][T10963] kAFS: unable to lookup cell '/,c¾ûL' [ 455.458278][T10963] binder: BINDER_SET_CONTEXT_MGR already set [ 455.461462][T10963] binder: 10960:10963 ioctl 4018620d 80004a80 returned -16 [ 455.569320][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 456.533715][T10972] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.536370][T10972] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.689783][ T2377] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 456.692200][ T2377] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 456.694694][ T2377] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 456.697355][ T2377] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 456.699771][ T2377] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 456.705558][ T2377] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 456.709071][ T2377] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 456.712559][ T2377] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 456.763071][ T2377] hid-generic 0000:0000:0001.0004: hidraw1: HID v0.10 Device [syz0] on syz1 [ 457.100668][T10979] fido_id[10979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 457.784229][ T2377] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 457.895951][T10993] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request [ 458.854253][ T2377] usb 8-1: Using ep0 maxpacket: 8 [ 458.857542][ T2377] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 458.862238][ T2377] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 458.865440][ T2377] usb 8-1: config 0 has no interface number 0 [ 458.870326][ T2377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.876397][ T2377] usb 8-1: Product: syz [ 458.876440][ T2377] usb 8-1: Manufacturer: syz [ 458.876463][ T2377] usb 8-1: SerialNumber: syz [ 458.889381][ T2377] usb 8-1: config 0 descriptor?? [ 461.075388][T11011] random: crng reseeded on system resumption [ 461.215104][T10988] netlink: 'syz.3.1076': attribute type 1 has an invalid length. [ 461.697161][T10988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.192322][T11025] Invalid ELF header magic: != ELF [ 462.237079][T11025] overlayfs: failed to clone lowerpath [ 462.939577][T11020] sctp_transport_update_pmtu: 41 callbacks suppressed [ 462.939638][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.940265][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.959278][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.959828][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.972569][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.972990][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.973429][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.985554][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.989325][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 462.993202][T11020] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 463.394175][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.957071][ T2377] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 463.957198][ T2377] uvcvideo 8-1:0.31: No valid video chain found. [ 464.634582][ T2377] usb 8-1: USB disconnect, device number 21 [ 464.906963][ T43] audit: type=1800 audit(1788437798.471:3159): pid=11035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1085" name="westwood" dev="sda1" ino=2038 res=0 errno=0 [ 465.164456][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 465.234157][ T2377] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 465.401754][T11046] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1087'. [ 465.404072][ T2377] usb 8-1: Using ep0 maxpacket: 16 [ 465.404545][ T2377] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 465.407168][ T2377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.407197][ T2377] usb 8-1: Product: syz [ 465.407240][ T2377] usb 8-1: Manufacturer: syz [ 465.407262][ T2377] usb 8-1: SerialNumber: syz [ 465.417026][T11046] syzkaller1: entered promiscuous mode [ 465.417073][T11046] syzkaller1: entered allmulticast mode [ 465.645484][ T2377] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 465.653971][ T2377] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 465.656263][ T2377] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 465.656311][ T2377] usb 8-1: media controller created [ 465.666152][ T2377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.921040][T11047] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 465.942453][T11047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.972067][T11047] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 465.979047][T11047] bond2: (slave batadv2): making interface the new active one [ 465.987050][T11047] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 466.014253][ T2377] zl10353_read_register: readreg error (reg=127, ret==-110) [ 466.178293][ T43] audit: type=1326 audit(1788437799.741:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.2.1097" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 466.254861][T11041] bond2 (unregistering): (slave batadv2): Releasing active interface [ 466.262488][T11041] bond2 (unregistering): Released all slaves [ 466.341383][ T2377] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 466.350595][ T2377] usb 8-1: USB disconnect, device number 22 [ 467.250682][T11059] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 467.250728][T11059] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 467.252588][T11059] vhci_hcd vhci_hcd.0: Device attached [ 467.339323][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.339512][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.440980][T11063] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 467.634859][T10524] usb 44-1: SetAddress Request (10) to port 0 [ 467.635005][T10524] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 468.219155][T11060] vhci_hcd: connection reset by peer [ 468.219498][ T13] vhci_hcd vhci_hcd.3: stop threads [ 468.219520][ T13] vhci_hcd vhci_hcd.3: release socket [ 468.219857][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 468.770008][T11076] 9pnet_virtio: no channels available for device 127.0.0.1 [ 468.789036][T11076] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 469.681350][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 469.723391][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 469.723787][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 469.724079][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 469.724343][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 469.724462][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 469.965254][T11082] bridge1: entered promiscuous mode [ 469.968399][T11082] bridge1: entered allmulticast mode [ 470.502993][ T43] audit: type=1326 audit(1788437804.061:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 470.503290][ T43] audit: type=1326 audit(1788437804.061:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 470.504733][ T43] audit: type=1326 audit(1788437804.061:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 470.591984][ T43] audit: type=1326 audit(1788437804.151:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4008 code=0x7ffc0000 [ 470.592056][ T43] audit: type=1326 audit(1788437804.151:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 470.592099][ T43] audit: type=1326 audit(1788437804.151:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 470.593255][ T43] audit: type=1326 audit(1788437804.151:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 470.593279][ T43] audit: type=1326 audit(1788437804.151:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 470.593300][ T43] audit: type=1326 audit(1788437804.151:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 470.593586][ T43] audit: type=1326 audit(1788437804.151:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.1.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 471.064203][T10646] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 471.227756][T10646] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 471.231406][T10646] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.235542][T10646] usb 8-1: config 0 has no interface number 0 [ 471.238602][T10646] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 471.245968][T10646] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 471.251974][T10646] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.258231][T10646] usb 8-1: config 0 descriptor?? [ 471.264394][T11095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 471.297610][T10646] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 471.350076][T11099] netlink: 'syz.2.1106': attribute type 11 has an invalid length. [ 471.458106][T11101] netlink: 'syz.2.1106': attribute type 10 has an invalid length. [ 471.516708][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 472.664801][T10524] usb 44-1: device descriptor read/8, error -110 [ 472.753138][ T5822] usb 8-1: USB disconnect, device number 23 [ 473.068454][T10524] usb usb44-port1: attempt power cycle [ 473.133649][T11101] syz_tun: entered promiscuous mode [ 473.148402][T11101] syz_tun: entered allmulticast mode [ 473.148838][T11101] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 473.632341][T10524] usb usb44-port1: unable to enumerate USB device [ 476.786141][T11153] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 476.786206][T11153] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 477.158573][T11150] ------------[ cut here ]------------ [ 477.158625][T11150] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'pc212e' [ 477.158657][T11150] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#0: syz.0.1107/11150 [ 477.172411][T11150] Modules linked in: [ 477.173833][T11150] CPU: 0 UID: 0 PID: 11150 Comm: syz.0.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.177630][T11150] Tainted: [L]=SOFTLOCKUP [ 477.179014][T11150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.182496][T11150] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 477.184761][T11150] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d c9 4b 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 65 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 ec 1f 4b ff 48 8d 7d 18 48 b8 00 [ 477.191360][T11150] RSP: 0000:ffffc90004c776a0 EFLAGS: 00010246 [ 477.193718][T11150] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88807122ae9c [ 477.196997][T11150] RDX: ffff88801e2baadc RSI: ffffffff8c0b6540 RDI: ffffffff914b67f0 [ 477.200208][T11150] RBP: ffff88807122ae78 R08: ffff88807122a49c R09: ffffed100e2455bb [ 477.203460][T11150] R10: ffff88807122addb R11: 0000000000000000 R12: ffff88807122adc0 [ 477.206542][T11150] R13: ffff88801e2baa00 R14: ffff88807122a478 R15: dffffc0000000000 [ 477.209215][T11150] FS: 0000000000000000(0000) GS:ffff888096967000(0063) knlGS:00000000f53a5b40 [ 477.213451][T11150] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 477.216704][T11150] CR2: 0000564151455790 CR3: 000000006dabc000 CR4: 0000000000352ef0 [ 477.219386][T11150] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.221923][T11150] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 477.224589][T11150] Call Trace: [ 477.225692][T11150] [ 477.226634][T11150] ? __pfx_remove_proc_entry+0x10/0x10 [ 477.228363][T11150] ? mtree_load+0x3a4/0xb50 [ 477.229942][T11150] ? __pfx_mtree_load+0x10/0x10 [ 477.231884][T11150] ? rcu_is_watching+0x13/0xc0 [ 477.233777][T11150] unregister_irq_proc+0x206/0x2a0 [ 477.235934][T11150] ? __pfx_unregister_irq_proc+0x10/0x10 [ 477.237983][T11150] free_desc+0x89/0x330 [ 477.239392][T11150] ? __pfx_free_desc+0x10/0x10 [ 477.241030][T11150] ? kasan_quarantine_put+0x104/0x240 [ 477.242735][T11150] ? lockdep_hardirqs_on+0x7d/0x110 [ 477.244485][T11150] ? irq_domain_free_irqs+0x3d0/0x5c0 [ 477.246234][T11150] irq_free_descs+0x84/0xc0 [ 477.247738][T11150] irq_domain_free_irqs+0x46a/0x5c0 [ 477.249372][T11150] mp_unmap_irq+0xf8/0x130 [ 477.250869][T11150] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 477.253113][T11150] acpi_unregister_gsi_ioapic+0x40/0x60 [ 477.255448][T11150] acpi_unregister_gsi+0x25/0x40 [ 477.258084][T11150] acpi_pci_irq_disable+0x275/0x360 [ 477.260460][T11150] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 477.262702][T11150] pcibios_disable_device+0x89/0xb0 [ 477.264511][T11150] do_pci_disable_device+0x9f/0x100 [ 477.266787][T11150] ? __pfx_do_pci_disable_device+0x10/0x10 [ 477.269220][T11150] pci_disable_device+0x130/0x270 [ 477.271513][T11150] pci_device_remove+0xb2/0x1d0 [ 477.274223][T11150] ? __pfx_pci_device_remove+0x10/0x10 [ 477.277056][T11150] device_remove+0xcb/0x180 [ 477.279134][T11150] device_release_driver_internal+0x44e/0x620 [ 477.281795][T11150] pci_stop_bus_device+0x120/0x160 [ 477.286317][T11150] pci_stop_and_remove_bus_device+0x58/0xa0 [ 477.289002][T11150] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 477.292170][T11150] remove_store+0x123/0x140 [ 477.295502][T11150] ? __pfx_remove_store+0x10/0x10 [ 477.298124][T11150] ? dev_attr_store+0x1d/0x80 [ 477.300830][T11150] ? __pfx_remove_store+0x10/0x10 [ 477.303243][T11150] dev_attr_store+0x58/0x80 [ 477.305604][T11150] ? __pfx_dev_attr_store+0x10/0x10 [ 477.307840][T11150] sysfs_kf_write+0xf2/0x150 [ 477.309867][T11150] kernfs_fop_write_iter+0x3e0/0x5f0 [ 477.312222][T11150] ? __pfx_sysfs_kf_write+0x10/0x10 [ 477.315314][T11150] vfs_write+0x6af/0x1050 [ 477.317552][T11150] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 477.319632][T11150] ? __pfx_vfs_write+0x10/0x10 [ 477.321203][T11150] ? find_held_lock+0x2b/0x80 [ 477.322736][T11150] ksys_write+0x12a/0x250 [ 477.324793][T11150] ? __pfx_ksys_write+0x10/0x10 [ 477.326754][T11150] __do_fast_syscall_32+0x13a/0x8b0 [ 477.328517][T11150] do_fast_syscall_32+0x32/0x70 [ 477.330143][T11150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.332715][T11150] RIP: 0023:0xf7f06fec [ 477.334621][T11150] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 477.337333][T11150] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 477.340203][T11150] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 477.342843][T11150] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.345615][T11150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.348227][T11150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 477.350861][T11150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.353695][T11150] [ 477.355058][T11150] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 477.358211][T11150] CPU: 0 UID: 0 PID: 11150 Comm: syz.0.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.362338][T11150] Tainted: [L]=SOFTLOCKUP [ 477.363924][T11150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.367666][T11150] Call Trace: [ 477.369032][T11150] [ 477.370298][T11150] dump_stack_lvl+0x100/0x190 [ 477.372318][T11150] vpanic+0x553/0x970 [ 477.373989][T11150] ? __pfx_vpanic+0x10/0x10 [ 477.376375][T11150] panic+0xd1/0xe0 [ 477.378590][T11150] ? __pfx_panic+0x10/0x10 [ 477.380601][T11150] check_panic_on_warn.cold+0x19/0x34 [ 477.382888][T11150] ? remove_proc_entry+0x4e7/0x610 [ 477.385037][T11150] __warn.cold+0x191/0x318 [ 477.386910][T11150] __report_bug+0x30f/0x440 [ 477.388804][T11150] ? remove_proc_entry+0x4e7/0x610 [ 477.390944][T11150] ? __pfx___report_bug+0x10/0x10 [ 477.393310][T11150] ? __do_fast_syscall_32+0x13a/0x8b0 [ 477.395925][T11150] ? do_raw_spin_lock+0x128/0x260 [ 477.397808][T11150] ? find_held_lock+0x2b/0x80 [ 477.399581][T11150] ? proc_entry_rundown+0x158/0x1e0 [ 477.401271][T11150] ? proc_entry_rundown+0x158/0x1e0 [ 477.403101][T11150] report_bug_entry+0xe2/0x290 [ 477.405161][T11150] ? remove_proc_entry+0x4f5/0x610 [ 477.407156][T11150] handle_bug+0x1cd/0x2a0 [ 477.408819][T11150] exc_invalid_op+0x17/0x50 [ 477.410369][T11150] asm_exc_invalid_op+0x1a/0x20 [ 477.412026][T11150] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 477.413878][T11150] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d c9 4b 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 65 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 ec 1f 4b ff 48 8d 7d 18 48 b8 00 [ 477.420627][T11150] RSP: 0000:ffffc90004c776a0 EFLAGS: 00010246 [ 477.422701][T11150] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88807122ae9c [ 477.425946][T11150] RDX: ffff88801e2baadc RSI: ffffffff8c0b6540 RDI: ffffffff914b67f0 [ 477.428916][T11150] RBP: ffff88807122ae78 R08: ffff88807122a49c R09: ffffed100e2455bb [ 477.431482][T11150] R10: ffff88807122addb R11: 0000000000000000 R12: ffff88807122adc0 [ 477.434087][T11150] R13: ffff88801e2baa00 R14: ffff88807122a478 R15: dffffc0000000000 [ 477.436792][T11150] ? __pfx_remove_proc_entry+0x10/0x10 [ 477.438647][T11150] ? mtree_load+0x3a4/0xb50 [ 477.440267][T11150] ? __pfx_mtree_load+0x10/0x10 [ 477.442063][T11150] ? rcu_is_watching+0x13/0xc0 [ 477.443953][T11150] unregister_irq_proc+0x206/0x2a0 [ 477.446102][T11150] ? __pfx_unregister_irq_proc+0x10/0x10 [ 477.448139][T11150] free_desc+0x89/0x330 [ 477.449523][T11150] ? __pfx_free_desc+0x10/0x10 [ 477.451206][T11150] ? kasan_quarantine_put+0x104/0x240 [ 477.453061][T11150] ? lockdep_hardirqs_on+0x7d/0x110 [ 477.454954][T11150] ? irq_domain_free_irqs+0x3d0/0x5c0 [ 477.456785][T11150] irq_free_descs+0x84/0xc0 [ 477.458470][T11150] irq_domain_free_irqs+0x46a/0x5c0 [ 477.460631][T11150] mp_unmap_irq+0xf8/0x130 [ 477.462216][T11150] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 477.464633][T11150] acpi_unregister_gsi_ioapic+0x40/0x60 [ 477.467081][T11150] acpi_unregister_gsi+0x25/0x40 [ 477.469309][T11150] acpi_pci_irq_disable+0x275/0x360 [ 477.471567][T11150] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 477.473954][T11150] pcibios_disable_device+0x89/0xb0 [ 477.476216][T11150] do_pci_disable_device+0x9f/0x100 [ 477.478920][T11150] ? __pfx_do_pci_disable_device+0x10/0x10 [ 477.481847][T11150] pci_disable_device+0x130/0x270 [ 477.484151][T11150] pci_device_remove+0xb2/0x1d0 [ 477.486336][T11150] ? __pfx_pci_device_remove+0x10/0x10 [ 477.488163][T11150] device_remove+0xcb/0x180 [ 477.489683][T11150] device_release_driver_internal+0x44e/0x620 [ 477.491642][T11150] pci_stop_bus_device+0x120/0x160 [ 477.493655][T11150] pci_stop_and_remove_bus_device+0x58/0xa0 [ 477.496128][T11150] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 477.498401][T11150] remove_store+0x123/0x140 [ 477.499877][T11150] ? __pfx_remove_store+0x10/0x10 [ 477.501391][T11150] ? dev_attr_store+0x1d/0x80 [ 477.502956][T11150] ? __pfx_remove_store+0x10/0x10 [ 477.505109][T11150] dev_attr_store+0x58/0x80 [ 477.507086][T11150] ? __pfx_dev_attr_store+0x10/0x10 [ 477.508861][T11150] sysfs_kf_write+0xf2/0x150 [ 477.510256][T11150] kernfs_fop_write_iter+0x3e0/0x5f0 [ 477.512001][T11150] ? __pfx_sysfs_kf_write+0x10/0x10 [ 477.513681][T11150] vfs_write+0x6af/0x1050 [ 477.515269][T11150] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 477.517278][T11150] ? __pfx_vfs_write+0x10/0x10 [ 477.518804][T11150] ? find_held_lock+0x2b/0x80 [ 477.520460][T11150] ksys_write+0x12a/0x250 [ 477.522120][T11150] ? __pfx_ksys_write+0x10/0x10 [ 477.523745][T11150] __do_fast_syscall_32+0x13a/0x8b0 [ 477.525644][T11150] do_fast_syscall_32+0x32/0x70 [ 477.527363][T11150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.529577][T11150] RIP: 0023:0xf7f06fec [ 477.530963][T11150] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 477.533185][T11150] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 477.536230][T11150] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 477.539004][T11150] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.541672][T11150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.544759][T11150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 477.547645][T11150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.550274][T11150] [ 477.552136][T11150] Kernel Offset: disabled [ 477.553569][T11150] Rebooting in 86400 seconds..