last executing test programs: 3m22.262049859s ago: executing program 1 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x2000880}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000340)={0x4, r2, 0x80000}) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000380)=0x40) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x80000004}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1000, 0x4e23, 0xab2, 0xa, 0x0, 0x130, 0x16}, {0xcca, 0x0, 0x0, 0x1, 0x1000000000000, 0x7f, 0x0, 0x100000001}, {0xfffffffffffffffe, 0x1, 0x2000000000000003}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x34fd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2}}, 0xe4) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r8 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff00070581020002"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r9, 0x81, 0x1, &(0x7f0000000280)='\x00') pread64(r10, &(0x7f0000000780)=""/4096, 0x1000, 0xfffffff7) read$char_usb(r10, &(0x7f0000001780)=""/188, 0xbc) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r7, r11, 0x0) connect$inet6(r6, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl(r5, 0x3b8f, 0x0) 3m19.190786061s ago: executing program 1 (id=1161): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000340)={0x4, r0, 0x80000}) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000380)=0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1000, 0x4e23, 0xab2, 0xa, 0x0, 0x130, 0x16}, {0xcca, 0x0, 0x0, 0x1, 0x1000000000000, 0x7f, 0x0, 0x100000001}, {0xfffffffffffffffe, 0x1, 0x2000000000000003}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x34fd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2}}, 0xe4) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f0000000280)='\x00') pread64(r7, &(0x7f0000000780)=""/4096, 0x1000, 0xfffffff7) read$char_usb(r7, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3m17.410603581s ago: executing program 1 (id=1163): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="041817aaaaaaaaaa1011"], 0x1a) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e021004"], 0x7) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) r1 = socket(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000400)=0x7, 0x8, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000000440)=0x7, 0x4, 0x0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x5) setreuid(r3, 0x0) sendmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="17e2ea6eeddb", 0x6}], 0x1, &(0x7f0000000340)=[@cred={{0x18}}], 0x18, 0x20000004}}], 0x1, 0x0) 3m16.86952701s ago: executing program 1 (id=1170): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000140021010000000000000000022000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000340)={0x4, r3, 0x80000}) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000380)=0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1000, 0x4e23, 0xab2, 0xa, 0x0, 0x130, 0x16}, {0xcca, 0x0, 0x0, 0x1, 0x1000000000000, 0x7f, 0x0, 0x100000001}, {0xfffffffffffffffe, 0x1, 0x2000000000000003}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x34fd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2}}, 0xe4) openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r7 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000001780)=""/188, 0xbc) 3m13.759338681s ago: executing program 1 (id=1181): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000017, r0, 0x0) read(r1, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="87", 0x1}], 0x1) 3m13.639694193s ago: executing program 1 (id=1182): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x3}]}}}, @IFLA_XDP={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRES16=r1], 0x30}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000540)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000905000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000a40)={@local, @multicast1, 0x0}, &(0x7f0000000a80)=0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000ac0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xf9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x800) connect$inet(r7, &(0x7f0000000440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r7, &(0x7f0000000480), 0xffffffffffffff94, 0x1, 0x0, 0x55) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000004c0)=0xfffffff4, 0x4) ppoll(&(0x7f0000000500)=[{r7, 0xa23a}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x401, 0x2, 0x5, 0x7, 0x3ce8, 0x8, 0x81, 0x7fffffffffffffff}, &(0x7f00000001c0)={0x66, 0x3, 0x10001, 0x2, 0x7d0, 0x3, 0x8, 0x8000000000000000}, &(0x7f0000000200)={0x3, 0x5, 0x2, 0x0, 0x0, 0x7, 0xf, 0x8}, &(0x7f0000000340)={r5, r6+60000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x5, 0x8]}, 0x8}) 2m58.562796632s ago: executing program 32 (id=1182): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x3}]}}}, @IFLA_XDP={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRES16=r1], 0x30}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000540)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000905000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000a40)={@local, @multicast1, 0x0}, &(0x7f0000000a80)=0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000ac0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xf9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x800) connect$inet(r7, &(0x7f0000000440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r7, &(0x7f0000000480), 0xffffffffffffff94, 0x1, 0x0, 0x55) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000004c0)=0xfffffff4, 0x4) ppoll(&(0x7f0000000500)=[{r7, 0xa23a}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x401, 0x2, 0x5, 0x7, 0x3ce8, 0x8, 0x81, 0x7fffffffffffffff}, &(0x7f00000001c0)={0x66, 0x3, 0x10001, 0x2, 0x7d0, 0x3, 0x8, 0x8000000000000000}, &(0x7f0000000200)={0x3, 0x5, 0x2, 0x0, 0x0, 0x7, 0xf, 0x8}, &(0x7f0000000340)={r5, r6+60000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x5, 0x8]}, 0x8}) 36.529388434s ago: executing program 4 (id=1955): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000040)='\n\x00\x00\x00', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 36.528702699s ago: executing program 4 (id=1956): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./sys\x00', 0x0, 0xc0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x488d0, &(0x7f0000000900)={0xa, 0x0, 0x5, @remote}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f0000000800)=0xc) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r4, {0xee01}}, './sys\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000380)='./sys/file0\x00', &(0x7f0000000500), 0x8050, &(0x7f0000000940)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x7fff}}], [{@euid_lt={'euid<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@smackfshat={'smackfshat', 0x3d, 'veth0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/v4l-subdev#\x00'}}, {@euid_eq={'euid', 0x3d, r8}}]}}) add_key(&(0x7f00000007c0)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r10, {0x7}, {0xd, 0xc}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 36.403642055s ago: executing program 4 (id=1957): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000600)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$make_it_fail(r1, &(0x7f0000000700)='Y\x00', 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000740)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 35.490224986s ago: executing program 4 (id=1962): r0 = syz_open_dev$ndb(0x0, 0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 35.49003518s ago: executing program 4 (id=1964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x34, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) 33.544937562s ago: executing program 4 (id=1973): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10082) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) getrandom(&(0x7f0000000580)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x101) write$cgroup_int(r4, &(0x7f0000000700), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 18.40207661s ago: executing program 33 (id=1973): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10082) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) getrandom(&(0x7f0000000580)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x101) write$cgroup_int(r4, &(0x7f0000000700), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 10.698889123s ago: executing program 0 (id=2056): r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000019080)={0x0, 0x0, "2734fd0396f1820c0dad7f222ce140f5f2724f8a424a586f443cb62d01000080ff5a483676cb5edeb06c9500cfbf27b503fb56f886d7ddb0172c647d97d957e53885ba7394ccf32ea2024e726436025758fd796ad6f5971a64e69ef431ead7fbcb45eb4e8e0a442e0048e8d6eca35ee858e0a562078252f3ac1a820df4948845455ab082544c93f2d5173b1770080012f165fddaf20cd03f6c66fda6ef37e1a3df106e346a90e052c3cab743dbb1b604e69c6f7c8b504ea5eadb60695c296afc02a77b26ed66c954de07cccaf090fd14410100000031d05e0d33060d2e9595085c60fff54ae872d9360a4200", "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"}) (async, rerun: 32) socket$inet6(0xa, 0x80003, 0x6) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async, rerun: 64) io_uring_setup(0xe02, 0x0) (async, rerun: 64) r3 = getuid() (async) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) lchown(&(0x7f0000000500)='./file0\x00', r3, r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001cc0)=@filter={'filter\x00', 0x42, 0x4, 0x314, 0xffffffff, 0x0, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x33, {0xd4e}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[]) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000300000000000000", @ANYRES32=r10, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="60040000", @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381"], 0x460}}, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) (rerun: 64) 10.204837463s ago: executing program 0 (id=2066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f00)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffffcb0000000000000000000a000000de1c000000000000000007000000000000000000000000000000000000000200000000000000020004000000000048000200656362286369706865725f6e756c6c2900000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000d2bd20f5c2ffd317a4da2c668fe56315000000"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x154, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x154}}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000940)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000980)=[{{&(0x7f00000009c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/100, 0x321}, {&(0x7f0000000b00)=""/85, 0x21}, {&(0x7f0000000b80)=""/4096, 0x197}, {&(0x7f0000001b80)=""/106, 0x659}, {&(0x7f0000001c00)=""/73, 0xd}, {&(0x7f0000001c80)=""/77, 0x69}, {&(0x7f0000001d00)=""/141, 0xc4}, {&(0x7f0000001dc0)=""/17, 0x1d8}], 0x21, &(0x7f0000001e00)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000001ec0)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getnexthop={0x17, 0x76, 0xb0d, 0x4, 0x25dfdbfd, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', 0x0}) 10.019578759s ago: executing program 0 (id=2059): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040203, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000005, 0x0, 0x2, 0x0) timer_create(0x4, 0x0, &(0x7f0000000300)) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) (async, rerun: 64) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) rseq(0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32, @ANYBLOB="000000000000000000c300"/20, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r2}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x80) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472516eb9a30000007266643dda0cc0c0648417bf092137a1e9d95b1ba7d9a444f89488fc99d7448e40816b22a643e26d76a70800f875c8ba22e677332c779f8b431fbee4a15474", @ANYRES64=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,\x00']) (async) write$P9_RVERSION(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x10000, 0x0) 5.183213506s ago: executing program 3 (id=2087): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @f={0x8, 0x3, 0x2, 0x2, 0x40, 0x20, 0x3, {0xa6}, 0x6, 0x4, 0x9, 0x5, 0x4, "de50b566"}}, 0x15) 4.903789113s ago: executing program 3 (id=2088): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xba, &(0x7f0000000340)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sched_setaffinity(r3, 0x8, &(0x7f0000000600)=0x2) recvmmsg(r4, &(0x7f0000000640), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000700)={0x0, 0x0, 0x100}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) r12 = syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000840)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f0000000900)=0x0) r15 = syz_open_dev$ublk_chdev(&(0x7f0000000940), r12, 0x2) syz_ublk_setup_queues(r15, r14, &(0x7f0000000980)={0x0, 0x3e0e, 0x1, 0x1, 0x1a1, 0x0, r8}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000000f00)={0x2e, 0x0, 0x0, r15, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r13, '\x00', {0x3, 0xee5, 0x100104, 0x0}}, &(0x7f0000000f80)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x4, {0x0, 0x0, 0x0, r16, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 4.842806293s ago: executing program 2 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x2000000000000216, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000340)={0x0, 0x1d30, 0x13500}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000480), 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 4.630185696s ago: executing program 2 (id=2090): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000340)={0x4, r3, 0x80000}) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000380)=0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1000, 0x4e23, 0xab2, 0xa, 0x0, 0x130, 0x16}, {0xcca, 0x0, 0x0, 0x1, 0x1000000000000, 0x7f, 0x0, 0x100000001}, {0xfffffffffffffffe, 0x1, 0x2000000000000003}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x34fd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2}}, 0xe4) openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r7 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000001780)=""/188, 0xbc) 4.299117455s ago: executing program 5 (id=2091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x3, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003380)='syzkaller\x00'}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003440)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f00000034c0)="b9ff0b078059268cb89e14f086dd2de0ffff20200000ff02000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) 4.058475111s ago: executing program 5 (id=2092): r0 = socket(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0xc0) write(r1, &(0x7f0000000100)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x0, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[{0xc, 0x29, 0x3}], 0xc}}], 0x2, 0x1000) 3.77720302s ago: executing program 0 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x2000880}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000340)={0x4, r2, 0x80000}) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000380)=0x40) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x80000004}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1000, 0x4e23, 0xab2, 0xa, 0x0, 0x130, 0x16}, {0xcca, 0x0, 0x0, 0x1, 0x1000000000000, 0x7f, 0x0, 0x100000001}, {0xfffffffffffffffe, 0x1, 0x2000000000000003}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x34fd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2}}, 0xe4) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r8 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r9, 0x81, 0x1, &(0x7f0000000280)='\x00') pread64(r10, &(0x7f0000000780)=""/4096, 0x1000, 0xfffffff7) read$char_usb(r10, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r7, r11, 0x0) connect$inet6(r6, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl(r5, 0x3b8f, 0x0) 3.492217578s ago: executing program 3 (id=2094): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x4000c051) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005"], 0x50) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, 'mtd0\x00'}) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000340)='bpf_lsm_inode_getsecurity\x00') getsockname$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4b0942, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)="67611ec496a56cbc1c7b579ff35bf24af26d973b6172505e62f98472ffaf9441e8e3507acca2f967a887377287e7c4456b8a7153cf793b9f0849a820c51314e7f27286c570f246534311a266563c0128bb3240b663a6d3ddadf8f09d73713957e48fca21ec81163cdf05cdf069d9da23b71fb8fea2c4995d63b05ba86cedd2f87ad1b44b40aaf2f50c7bd5b11dd7c31019e2902d9368caa6295c984d68af76bdd0665f0d1367bbc0dd754bf5187dad96c0c6cab61bfa94268fa34b9dfa13b97421ac0f066c43e97bb72072e38f4aad2363ad3fb1c7cff01772e534524e11c3e937d5aaf7cf751c651fbc", &(0x7f0000001c00)="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"/310, 0x8, r0}, 0x38) socket$igmp6(0xa, 0x3, 0x2) openat2$dir(0xffffff9c, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)={0x6be340, 0x60, 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) futex(0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x178) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000740)='./file0\x00', &(0x7f00000002c0)='mqueue\x00', 0xa02080, 0x0) gettid() chdir(&(0x7f00000007c0)='./file0\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x200) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @remote, 0x8}}}, &(0x7f0000000700)=0x90) write$dsp(r3, &(0x7f0000000080)="5cba91a4", 0xffffffd9) write$dsp(r2, &(0x7f00000000c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r3, &(0x7f0000000140)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) setxattr$incfs_metadata(&(0x7f0000000280)='./mnt\x00', &(0x7f0000000940), &(0x7f0000000c80)="d08908650d2277752b4a3739e546738d772937af35eacb91ffb40a9a68517e24fa2c8a3b6aa0b72db5365ee0942eb7f133dc0a395491bb95b339d8e41d21787a8e83c362a07e74198b7a512220bbab4d4388cf2cc9380ef046be806d7e3c7422e43e3b39d94bef57634b702468e60c29029eba5a05a3ad6b744e211435a90dfffe873e1fd4b6e5e93d8abf51f3e70566b3d638e6cf0d61298699dcc0763a9438d05b50604d21eabce341b22b119cef38064f4a93fdd724e25d76f8fe3c0e9419b7db6a3dfaab481e076486349f767b63e9b00e5553e308d0c535734cde604ee4958d84cc5cb07a01ce24db10aa26da756891443d86f89479da5a826460f62144c7866eaadc2a7b7ffb7fd7fd7752d30bccc57075c5a9a484e4eb93c54b1bb07b588adfdccad44691899f3d6970aa668258cc9f16343abc30c862d80bbfac5840e1f505d9dbdd952355f59d4984dad7c3572999a02d6cddde04f2af5114fd110d62d0f655dc9120424db6cba753cad330ad192bb6466492fc148c1ebfe2144e708c405d4c5eeac28ea69ca11ff1d606af8d1cf282098de8260548f19465a292b77c1ec178f7f4160b35b593fb684b5c5872c0debbe3790e62c1c0b2252d51b04f9f5133585dc4f1c1638c23c7376ab619319d4cb7ac37116a943bc7d9a2fe696d7deebc39d454789bcdacb948402b9c6fb1298e34b67d1765caf51f00fe253520d7ce80bc8c04e4067156baf4a679855b2e2489a838eb3320cbf6d82cd1b71812fd4e65cca2f1a31d72209f4d9a42060faca011cc05b605919df055b81fb3f2cf309b44b44250fc1e280ac5025bde97469068c027a4d2e1b4ba1cdd6daec1c7a74d608fa7c2a4e208283c2c9598878b88379a7f2b40a82320f7575033f8d1efce5d38549656fd914732726cb2ed9905814d967ab2de197f75c87f80be4069509532517f93007da774a0566b115011f0d6404b4a8bb105e55ccab6231137dc6d4097aefab807d3d171ae31e41b0b3a7bb2ed59ab38fb0a30660f84a158714469b5a16fbd216d91214ff5548cbbc1a8651d44b6d48b47367efe35a96c3083d5636cca0289db56a139fba77d20319dee5e3c7021627e93b1e7427d6954f7033a923d369961835480093a84522a78a24d1b01c30ba4b9afaac16953e56c7eade9269c9d306d6d7d7fb8d4b67801ffdff9285a6075d8caacd7cad679aa6f25f97c235fcdff129c521f52dd33911a55bf81cd946dbed554506729c6f4bc0178b04803e41317764aff863aacbf34c0c1dd5f53479bfc4f89d1132e5aaa0b7e2b5e46dae77752705590743dd56b65c80498182da8beccf2adffdd5cab674fa77f0f611f53a636a1261dd2483212955d76db0b0d1b59c364401c99cfe5feccf0c62f59aa07f34ba60a23bd99d702b0a4922e77f3f7d293f2c6af55b72697e7e8f25d545fe13c052fcc805d42b4b4c8a5d47bdf2ed52da9bd6d556503fabb59a24e834d3efd8da37abf4385724acfa0318b61b954c3db83500ebb66eb9e764c2bcd770cba99ef7f45780d28468e150c2eada94a58d7c62b6423eb95e583c9d6790025151a0029e13264cf91de3b2d349e169e7fd7528356a84a8786401dd30cbeeb0dd894cbe2d38a7846f4859be693099cbab757af8524e47b000518d79d15ede075d02e84e3dfb092d9cd3156656f0ed90af68d6b50377a15277128f7f249d377c560bf7a094d73b552e2e685e793e440079aea56ed2661e1cf40f23f8a63c85648cad96b54ae59ba3eaee102586b7ede6035dbf89e6dfd8524a2336156826fe4fc7f0c26495226f24456ca577d03f938034e2a9f2d8691e0d166ba0c6bd7daddb1e920c6842761c54126d7b12ca074ad89ff002b5738dc75ca73eb81cf70f9a2d0cb6ff53398a5bd9fddb5e1f20207ec75dc2afe4fc40a8cae8c267c38823db2820db622da5007bbc424908d00ea0716ef83518b218b60c615b6d35ca4812ba25130bc0eebe4dafccb90c0c56ffe84643828d957d6878c3a23085ed8815212b785e054f4dff29262fbb9d9ce509f14cdda9d2b8ffabbaa5d6aa3a4ab01d59408552e555a6b62d4cd35794e5c890c9f93f993f42d38dea2c41c7ba8db41e90b95880b7ffd6d6370616809edb2744b24a6b59c127467a3372bcd6c088b0ed697dd243b1d534a0fc28ef961779ec71f8707fd2928cbf23bff26d0a00231a72583089a22a1d0d6cfadaeb31a98cda1c84eb5e8bf047a89e8687e5f100bd57d1d67a4073306f377fe43ff33634aee3173032719c4c34189265f541357044dc8dbf56540d5be66047f908beaf040db44dd57b891b1e3e4cc98be5c20c81f4be6a2398b642d81de2e9c4ba34b8801a2fcd50d8d5ba6f497923bf29662b62f36119bcbfb6df3c1c8d61cff9962699673e5b0ffbb01deb81b2044157df7e03ca3a4c9a03ae2f59e55702c2079ee48ded1dfa0eb32872d80d9b113ad5b537597226948f8ac6b8d5ed700c357e8b9a1178e6f4b86c64ce0ba042152df716681e08bc7622b9977e421f554183611f8ffc36dfa1daf22d4b2a76d8bc524e9ff22596ae79a964c67bca4311966f05208b626eac58c658aa384798ef738b17cefa55923316a1f9780c22a5828e3a2a62c40136341fcfbc8dae32ca560758467a266c5a170a05800a726ea0d93af19a4aaddaf8150c214f8b36b75ebec966062f1a4fdabb31eba08a1b277670b2e5dff82f77a4bec5b50c28a6459d9170b1115173709d113f677de59cb9b283037f8927317972139198841d798f2118de1a8ae2689e5cff6226282c8b801936b27ffdaa2876e3d8eace08fbd3380c0e0d0f33630c1a483520b423c63443c6bbe8c0f78ec143a0721eda931d444e5355e8cfd7af0177a98e181020ca7a0d59af6b4b4da2b404f302adc2f0537a2731bb1fe76a0b49caac4428e2504d02a0d12d05f935a634e7fe376872d90df5ceadd10bb2b0dcdb09167d3d021ee952381e7f267991985dc58ce6e5510d434933792fc600e701334cc223ad8da2004f83776b423037dc91a048cc1f7a85529d0f1dd4893d6e945ac0e57a6d3caae1b553c4bbb9a45137c8a729e7402d4a3c7a62c004f73acbc108ecdf868540058f69058d0d85a0b447861253b45161d91a21d0c254e908b0be9776560fd2e7fc91696fef7911d6c929f66642aad4ddbf434ab9ccd2b2a8320a3c1d355e0c73744bc3f12af5c2b743fbe3264a1585f999ee258dccea6b022722f1c4b4ca2ede91724960dbb515d2660e3878b6049e13c04ea60bbf5de0c31abbb67e4f4faca1611fad5f8e448d27864e9926d8a642dc1ad325003bf257dbbe6cffb71e82b6e33991d3e33eaa067a3e4aee53f01b25a976ece5027a339d1d9009a656820319aef88b955898bab3271066fd7a1c73fe97aaed2ab65c23cd90c039f2284ec2757441012ce010a4338e5dea06b96d3e30c5eb90632f9043bc9ac455564bb6e3395e433836c1634b9d6ada30893995565f1ff55e4f21ad8fd24f20ef4641cdb3c2235b9465cc2adaa3d0396dc9d16c5b78d2aa0d4673436e899f9b522112733348c81ea8df1805d379c12174967567da6ab12a8fb892a06171d0dc0b0308ac1a9151929ba6d408b76c8047798d03ef2697e800d069e43968ac73d85652b2ec1af17a89a9cf90c4ce9c9578283ab6405bdebf3271cdee7d33329a572a1da59d4457b95d8b43c09a9268e16c095a76a24f16ebcc14b35f6a7fa0a0292d5d49f08dd027391769ee294fc297e2082b5663e0fa4ea1d57eeac0440ea9692fc609f272b2c713b8a21d326a31a9be45664ee4bd9dfbe3521cf3470521e05fa7355e8246cfcab12c56f45b38f32d26aa405faf491b47cd69b1d869c1111a51cf91968cde89c83fbb6f2622e0cca462ce6cf8420d37399eadc4ad98bc7afcac48e84f34095a96a7233aa5179e2f7f09f88edbf438871d73d85d304fce8a93b87191e0b1d24d3ab621ba8463a94e4157614b189805202e6f183c5b2b9ed9c03498eb661e01075a3cf9d92aa2d0def273ab4e4f44557ad0e39b8098cabb34df304cf5e9f98b059b81e52a0fe8a94077e853ad81f1614572af204297bc8dc8b306f202e454d7cce3d63726ea726c44556a580beebc49feabec4ef9dfec51b8889c702beba509ecb99c92a899a676c25df905d13729afd2310ba0d0386bcb910a400111711219cdc9fe3b3dcb6036bc4073069a7ee0562a0e74b7a6953f498ce3385c43c73c944b958b6a8741d21027931d6b6e9a1212372282e2e27f9d205ae918516617d57cc3835d5c4e94d79ad4b9cf11cd295060e97b3aeab1989f1e479cbd3abe75cf3d96ca45ba99b08bdd2954d431ab373700f232890543680435f86f20ada308cc5a288bb2d4d46735df7f032dfe6a57b196e3a167837d1c893c607a4494cdb1829d1d9989c2a3867c348c6653d6c25dc4643c301b4a77ca616a8a2c72fb6c49ac92c2d81e56045b4f190e002c83f5e21aeccfddb4301b50431ed01cabbd1ae809bdc47855abefce9e88f720a0c7266c4773c91f2b6a8115ccd901197806bb7e8b71593fbc5f617adad4acfd13aa77c3c038f589eea19aa84b10d6e57dc0509afcb08d5325dea5cfe501e17efb53b2b7b836d2fd6b0a554795e0b980c2e375510cc4e95adb350024d9ceda192e8e905ac57378a6e56a5f85aa098b3460f4604f70203baaa791df1cd1824b7e370d9a6dbeea8564340782f3819cf77b1465d83815c0d931fde82b7648d0ea5b3d9d95f515f383c73987727d13a0dc2b5c164dae511c2d9ad4923884baa8ab6a62d370c1fa09aa9161d6f2f354f6c834d7f5b77430119ef251d5cedb73bfabe18dce03f44eccb121f04aa12ffa18e9429907ea13f312470cc79d5ace21220153c7fa0c5f4d748eb813d644aa89d368377da6b12fe74d1f5b04457a79bf1d50f96d3598bcdfc0f408500ee71df89387a3ef169edcab9d1ccbb1059c0d148f66314d79bf0cd4eb6c69a22fbe92219d9a7def174f57c194e07f900393fbbe583eb296a41a9f00def5e4f646e3d0bbbb7d6be06ad91a2a4fffb264833d66e22325bfcc6659fe3afb7340a5aa2ea0524e371e666e7573da8ac4d6f1fa7000debb596503a93014e672fffa5a4ce36c24e067b896a3ca02bc93a57b71e986e113781c5a17e86a9b3d194f9e0f4a876885963ac7a2f24568a521493fff90d3f04bfb978ed08e4bac76832cfe85324417f7a53dd3116c1edc8f20d6c05e77487406c4b1d70f692c1741035f9bbae6c3ae8044a9e3fa919c55e885ab9efc6b0e187ab76cb0df0639bc0e30048584138d3a957c1fdbd43939c3e4c96f354fa2a9025e546a263706a3a437e508a9b96b6ad10bdc65ef2be4ac11fe5861c8caa963b21581ee4d2b18ce4b45157386cb8ab41bea212950d4cf71b6b9421296106a0eb2446d2648309d67ecc4a213cfeb5a1d2c188cdb60c0934bc7ce9b867001230d548f081e1c2047dd60d78d327d0dd4f7db1b23f2ef55cd3a02f85bd40ccf33a7bea13505418760bce8815cee7aeeea906c4b730db663a32ccb9fad68bfce3ae52f0a64b30c59ee707c763f8ef81a74f507f7deff192bc7f960124ebb32bf6e7", 0xf7d, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) getpgrp(0x0) 3.289361401s ago: executing program 5 (id=2095): socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select ', 0xf) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r1, 0x0, 0x700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f0000000040)={0x10112, 0x0, 0x1, 0x10, 0x2, 0x3}, 0x30, 0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r5, 0xc08c5114, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 2.38564057s ago: executing program 3 (id=2096): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @f={0x8, 0x3, 0x2, 0x2, 0x40, 0x20, 0x3, {0xa6}, 0x6, 0x4, 0x9, 0x5, 0x4, "de50b566"}}, 0x15) 2.281836783s ago: executing program 3 (id=2097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0xba, &(0x7f0000000200)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001640), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000001680)=0x2) recvmmsg(r1, &(0x7f00000016c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000001700)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xa, &(0x7f0000001880)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000001900)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000001940)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000001980)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000019c0)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a00)='status\x00') read$FUSE(r3, 0x0, 0x0) rename(&(0x7f0000001a40)='./file0\x00', 0x0) symlinkat(&(0x7f0000001a80)='./file0/file0\x00', 0xffffffffffffff9c, 0x0) mount$nfs(&(0x7f0000001ac0)=')./.,\x00', &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x80000, &(0x7f0000001b80)={[{}, {'erspan0\x00'}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq}]}) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x1f, 0xc, &(0x7f0000001f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000001f80)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@dev}, &(0x7f00000003c0)=0x14) 1.772639033s ago: executing program 5 (id=2098): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x9837, 0x1000, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x0) unshare(0x6a040000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x8003, 0x4000401, 0x8, 0xe, 0x2, 0x0, 0x6, 0x4, 0x0, 0x0, 0x4, 0x9, 0x0, 0x9d, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x3, 0x0, 0x5, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1], [0x3, 0xfffff41a, 0x6, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x3, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x102, 0xffffffff, 0x800, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x4, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = openat$autofs(0xffffff9c, &(0x7f0000000b00), 0x602d42, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000b40), 0x36, 0x10000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000340)={0x5}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@ipv6_getroute={0x1c, 0x1a, 0x101, 0x0, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x2, 0x3, 0x4, 0x0, 0x2, 0x800}}, 0x1c}}, 0x10) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f00000000c0)=0x1) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000140)="69ad52", 0x3}], 0x1) r11 = mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0xa, 0x80010, r0, 0x8000000) syz_ublk_add_dev(r0, r1, r11, r2, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000005c0)) 1.56298518s ago: executing program 2 (id=2099): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000600)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$make_it_fail(r1, &(0x7f0000000700)='Y\x00', 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000740)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 1.34879681s ago: executing program 2 (id=2100): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) fsopen(&(0x7f0000000000)='fusectl\x00', 0x0) r2 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000440)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config\x00', 0x1ff) get_robust_list(r2, &(0x7f0000000500)=&(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={&(0x7f0000000600)}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2c41, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000740)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mount(0x0, &(0x7f0000000800)='./config\x00', &(0x7f0000000840)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000940)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='\n', 0x1) (fail_nth: 3) close_range(r0, 0xffffffffffffffff, 0x0) 1.033392463s ago: executing program 3 (id=2101): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x1, 0x2703) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000040), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x40070480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0x800, 0x7) gettid() timer_create(0x0, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) timer_settime(0x0, 0x1, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='source', &(0x7f0000000340)='c:,:\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000540)={0x15, 0x110, 0xfa00, {r6, 0x108d, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000680)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r4, r4, 0x0) syz_80211_inject_frame(&(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="30340800080211000001ffffff05ffff505050505050030484adca0001002d1a2000046f000000000000000500060005000000000402000000c0"], 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000004c0)={0x1, 0x1, 0x1, &(0x7f0000000500)={0x1e, "b3d92cdddf96b40e900000000001000000fa0000f90000c87f0900000000000100"}}) 1.033117142s ago: executing program 5 (id=2102): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000017, r0, 0x0) read(r1, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1) 579.551757ms ago: executing program 0 (id=2103): mount_setattr(0xffffffffffffff9c, 0x0, 0xd8738455ab689081, 0x0, 0xffffffffffffffbe) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000340)={0x0, @frame_sync}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x6d, 0x100]}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x70}}, 0x24044850) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) r1 = syz_ublk_setup_io_uring(0xf, &(0x7f0000000400)={0x0, 0x6fce, 0x2, 0x2, 0x2cc}, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@new_dev={0x4, 0xeb5, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x112}}}, &(0x7f00000005c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000600)={0x0, 0x20fb86, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800002, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x96}}], 0x1, &(0x7f0000000900)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a80), 0x0) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x2, 0xd, 0x1}, 0x30, 0x1) landlock_restrict_self(r8, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000b00)={0x4000}, 0x18, 0x0) r10 = socket(0x2b, 0x80801, 0x1) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) landlock_restrict_self(r9, 0x8) landlock_restrict_self(r9, 0x8) getpgid(0x0) pidfd_send_signal(0xffffffffffffffff, 0x2f, 0x0, 0x4) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 420.057581ms ago: executing program 2 (id=2104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'team_slave_1\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x3e}}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) pipe2$9p(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_ublk_setup_io_uring(0x4a10, &(0x7f0000000140)={0x0, 0x42030b5, 0x1, 0x2, 0x157}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xc12a, 0xfff) mkdir(&(0x7f0000000400)='./file2\x00', 0x81) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000440)={0x0, 0x9562, 0x1f00, 0x3, 0x255}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x0, 0x3, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x20, 0x142, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa943, 0x1000, 0x20003, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x4, 0x1e9}}], 0x1, &(0x7f0000000740)={0x2e, 0x8, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x8004, 0x0, 0x0}}, 0x0) syz_open_dev$ndb(&(0x7f00000007c0), 0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) 60.159474ms ago: executing program 5 (id=2105): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r2, 0x1, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @f={0x8, 0x3, 0x2, 0x2, 0x40, 0x20, 0x3, {0xa6}, 0x6, 0x4, 0x9, 0x5, 0x4, "de50b566"}}, 0x15) 47.10777ms ago: executing program 0 (id=2106): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000240), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000600)={0x1d, r1}, 0x10, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x40000) pselect6(0x40, &(0x7f0000000000)={0x5, 0x8, 0x7fffffffffffffff, 0x7fffffff, 0x3, 0x9, 0xa, 0xffff}, &(0x7f0000000040)={0x2, 0x1, 0x2, 0xf8, 0x8e, 0x1, 0x6, 0x3}, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0xf25, 0x2, 0x9, 0x100000001}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x2e3585f3, 0xd58]}, 0x8}) 0s ago: executing program 2 (id=2107): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x1, {0x600000, 0x80, "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", 0x2d, 0x2, 0x4, 0x2, 0xd, 0x6, 0x0, 0x1}, r2}}, 0x128) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=""/121, &(0x7f00000000c0), &(0x7f0000000180), 0x1, r0}, 0x38) kernel console output (not intermixed with test programs): ][T13999] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 442.538300][T13999] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 442.538307][T13999] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.538313][T13999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.538319][T13999] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 442.538325][T13999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.538340][T13999] [ 442.540191][T13999] FAULT_INJECTION: forcing a failure. [ 442.540191][T13999] name failslab, interval 1, probability 0, space 0, times 0 [ 442.540206][T13999] CPU: 3 UID: 0 PID: 13999 Comm: syz.4.1905 Not tainted syzkaller #0 PREEMPT(full) [ 442.540218][T13999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.540224][T13999] Call Trace: [ 442.540228][T13999] [ 442.540233][T13999] dump_stack_lvl+0x100/0x190 [ 442.540251][T13999] should_fail_ex.cold+0x5/0xa [ 442.540266][T13999] should_failslab+0xc2/0x120 [ 442.540278][T13999] __kmalloc_noprof+0xfc/0x840 [ 442.540293][T13999] ? rcu_is_watching+0x13/0xc0 [ 442.540308][T13999] ? tomoyo_realpath_from_path+0xb6/0x690 [ 442.540334][T13999] tomoyo_realpath_from_path+0xb6/0x690 [ 442.540353][T13999] tomoyo_path_number_perm+0x23c/0x580 [ 442.540367][T13999] ? tomoyo_path_number_perm+0x22e/0x580 [ 442.540381][T13999] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 442.540395][T13999] ? futex_wait+0x11e/0x370 [ 442.540410][T13999] ? __lock_acquire+0x5c0/0x1f40 [ 442.540428][T13999] ? __fget_files+0x34/0x3d0 [ 442.540440][T13999] ? find_held_lock+0x2b/0x80 [ 442.540453][T13999] ? __fget_files+0x215/0x3d0 [ 442.540464][T13999] ? hook_file_ioctl_common+0x140/0x440 [ 442.540478][T13999] ? __fget_files+0x215/0x3d0 [ 442.540491][T13999] ? __fget_files+0x21f/0x3d0 [ 442.540505][T13999] security_file_ioctl_compat+0xd3/0x230 [ 442.540520][T13999] __ia32_compat_sys_ioctl+0xc2/0x360 [ 442.540537][T13999] __do_fast_syscall_32+0x14b/0x8c0 [ 442.540551][T13999] ? lockdep_hardirqs_on+0x7d/0x110 [ 442.540566][T13999] do_fast_syscall_32+0x32/0x70 [ 442.540580][T13999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.540594][T13999] RIP: 0023:0xf7f67fbc [ 442.540602][T13999] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 442.540617][T13999] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 442.540627][T13999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089a1 [ 442.540634][T13999] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.540640][T13999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.540646][T13999] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 442.540652][T13999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.540666][T13999] [ 442.540670][T13999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.169600][ T74] usb 7-1: USB disconnect, device number 71 [ 443.214695][ T74] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 443.217345][ T74] option 7-1:1.0: device disconnected [ 444.434774][T14020] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1910'. [ 444.443076][T14020] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 444.443096][T14020] memcg:ffff88806f03cd82 [ 444.443104][T14020] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 444.443128][T14020] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 444.443147][T14020] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 444.443159][T14020] page dumped because: unmovable page [ 444.443168][T14020] page_owner tracks the page as allocated [ 444.443175][T14020] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 444.443203][T14020] post_alloc_hook+0xfd/0x120 [ 444.443229][T14020] get_page_from_freelist+0x1113/0x35e0 [ 444.443254][T14020] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 444.443281][T14020] alloc_pages_node_noprof+0x93/0x200 [ 444.443306][T14020] ringbuf_map_alloc+0x27e/0x860 [ 444.443325][T14020] map_create+0x874/0x3150 [ 444.443350][T14020] __sys_bpf+0x14cb/0x4b60 [ 444.443366][T14020] __ia32_sys_bpf+0xcc/0x170 [ 444.443384][T14020] __do_fast_syscall_32+0x14b/0x8c0 [ 444.443408][T14020] do_fast_syscall_32+0x32/0x70 [ 444.443431][T14020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.443453][T14020] page last free pid 37 tgid 37 ts 378355864138 stack trace: [ 444.443465][T14020] __free_frozen_pages+0x7b4/0x1110 [ 444.443486][T14020] ringbuf_map_free+0xe0/0x140 [ 444.443504][T14020] bpf_map_free_deferred+0x23e/0x820 [ 444.443529][T14020] process_one_work+0xac7/0x1b10 [ 444.443555][T14020] worker_thread+0x5ef/0xe50 [ 444.443579][T14020] kthread+0x373/0x450 [ 444.443608][T14020] ret_from_fork+0x730/0xd60 [ 444.443629][T14020] ret_from_fork_asm+0x1a/0x30 [ 444.447086][T14020] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 444.448733][T14020] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 445.458180][T13989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.529552][T14022] FAULT_INJECTION: forcing a failure. [ 445.529552][T14022] name failslab, interval 1, probability 0, space 0, times 0 [ 445.529567][T14022] CPU: 2 UID: 0 PID: 14022 Comm: syz.3.1912 Not tainted syzkaller #0 PREEMPT(full) [ 445.529578][T14022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.529584][T14022] Call Trace: [ 445.529589][T14022] [ 445.529593][T14022] dump_stack_lvl+0x100/0x190 [ 445.529613][T14022] should_fail_ex.cold+0x5/0xa [ 445.529628][T14022] should_failslab+0xc2/0x120 [ 445.529641][T14022] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 445.529658][T14022] ? __alloc_skb+0x5b7/0x710 [ 445.529672][T14022] ? __alloc_skb+0x140/0x710 [ 445.529688][T14022] __alloc_skb+0x140/0x710 [ 445.529701][T14022] ? __alloc_skb+0x5b7/0x710 [ 445.529714][T14022] ? __pfx___alloc_skb+0x10/0x10 [ 445.529732][T14022] netlink_ack+0x117/0xba0 [ 445.529751][T14022] netlink_rcv_skb+0x333/0x420 [ 445.529766][T14022] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 445.529780][T14022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.529801][T14022] ? ns_capable+0xcd/0xf0 [ 445.529818][T14022] nfnetlink_rcv+0x1b3/0x440 [ 445.529830][T14022] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 445.529842][T14022] ? netlink_deliver_tap+0x1ae/0xb50 [ 445.529859][T14022] netlink_unicast+0x668/0x950 [ 445.529875][T14022] ? __pfx_netlink_unicast+0x10/0x10 [ 445.529894][T14022] netlink_sendmsg+0x9ac/0x10c0 [ 445.529912][T14022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.529930][T14022] ? apparmor_socket_sendmsg+0x165/0x280 [ 445.529946][T14022] ? ____sys_sendmsg+0xa99/0xc30 [ 445.529956][T14022] ____sys_sendmsg+0xa99/0xc30 [ 445.529966][T14022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.529983][T14022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.530000][T14022] ___sys_sendmsg+0x190/0x1e0 [ 445.530012][T14022] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.530036][T14022] ? find_held_lock+0x2b/0x80 [ 445.530059][T14022] __sys_sendmsg+0x160/0x210 [ 445.530074][T14022] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.530096][T14022] __do_fast_syscall_32+0x14b/0x8c0 [ 445.530109][T14022] ? lockdep_hardirqs_on+0x7d/0x110 [ 445.530123][T14022] do_fast_syscall_32+0x32/0x70 [ 445.530137][T14022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.530151][T14022] RIP: 0023:0xf7fc4fbc [ 445.530160][T14022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 445.530170][T14022] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 445.530181][T14022] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000440 [ 445.530188][T14022] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.530194][T14022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.530200][T14022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.530206][T14022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.530220][T14022] [ 445.594741][T14029] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1914'. [ 445.823764][T14056] digital: digital_start_poll: Unknown protocol [ 445.915974][T14059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1922'. [ 446.059982][T14062] fuse: Unknown parameter '0x00000000000000070xffffffffffffffff' [ 446.060976][T14062] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 446.141939][T14059] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 446.142200][T14059] memcg:ffff88806f03cd82 [ 446.142207][T14059] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 446.142222][T14059] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 446.142233][T14059] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 446.142240][T14059] page dumped because: unmovable page [ 446.142246][T14059] page_owner tracks the page as allocated [ 446.142250][T14059] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 446.142269][T14059] post_alloc_hook+0xfd/0x120 [ 446.142287][T14059] get_page_from_freelist+0x1113/0x35e0 [ 446.142302][T14059] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 446.142316][T14059] alloc_pages_node_noprof+0x93/0x200 [ 446.142329][T14059] ringbuf_map_alloc+0x27e/0x860 [ 446.142340][T14059] map_create+0x874/0x3150 [ 446.142357][T14059] __sys_bpf+0x14cb/0x4b60 [ 446.142367][T14059] __ia32_sys_bpf+0xcc/0x170 [ 446.142378][T14059] __do_fast_syscall_32+0x14b/0x8c0 [ 446.142393][T14059] do_fast_syscall_32+0x32/0x70 [ 446.142426][T14059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.142442][T14059] page last free pid 37 tgid 37 ts 378355864138 stack trace: [ 446.142450][T14059] __free_frozen_pages+0x7b4/0x1110 [ 446.142463][T14059] ringbuf_map_free+0xe0/0x140 [ 446.142475][T14059] bpf_map_free_deferred+0x23e/0x820 [ 446.142490][T14059] process_one_work+0xac7/0x1b10 [ 446.142507][T14059] worker_thread+0x5ef/0xe50 [ 446.142521][T14059] kthread+0x373/0x450 [ 446.142536][T14059] ret_from_fork+0x730/0xd60 [ 446.142547][T14059] ret_from_fork_asm+0x1a/0x30 [ 446.310320][T14079] netlink: 'syz.2.1929': attribute type 1 has an invalid length. [ 446.379157][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 446.433749][T14083] Invalid ELF header magic: != ELF [ 446.574508][ C0] net_ratelimit: 49 callbacks suppressed [ 446.952634][T14111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1936'. [ 446.959933][T14111] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 446.959951][T14111] memcg:ffff88806f03cd82 [ 446.959955][T14111] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 446.959969][T14111] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 446.959978][T14111] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 446.959984][T14111] page dumped because: unmovable page [ 446.959989][T14111] page_owner tracks the page as allocated [ 446.959993][T14111] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 446.960015][T14111] post_alloc_hook+0xfd/0x120 [ 446.960032][T14111] get_page_from_freelist+0x1113/0x35e0 [ 446.960047][T14111] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 446.960062][T14111] alloc_pages_node_noprof+0x93/0x200 [ 446.960077][T14111] ringbuf_map_alloc+0x27e/0x860 [ 446.960088][T14111] map_create+0x874/0x3150 [ 446.960103][T14111] __sys_bpf+0x14cb/0x4b60 [ 446.960112][T14111] __ia32_sys_bpf+0xcc/0x170 [ 446.960123][T14111] __do_fast_syscall_32+0x14b/0x8c0 [ 446.960137][T14111] do_fast_syscall_32+0x32/0x70 [ 446.960149][T14111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.960162][T14111] page last free pid 37 tgid 37 ts 378355864138 stack trace: [ 446.960169][T14111] __free_frozen_pages+0x7b4/0x1110 [ 446.960180][T14111] ringbuf_map_free+0xe0/0x140 [ 446.960190][T14111] bpf_map_free_deferred+0x23e/0x820 [ 446.960204][T14111] process_one_work+0xac7/0x1b10 [ 446.960218][T14111] worker_thread+0x5ef/0xe50 [ 446.960233][T14111] kthread+0x373/0x450 [ 446.960246][T14111] ret_from_fork+0x730/0xd60 [ 446.960257][T14111] ret_from_fork_asm+0x1a/0x30 [ 446.967341][T14111] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 446.968529][T14111] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 447.126072][T14117] NFSD: Failed to start, no listeners configured. [ 447.267161][T14122] syz.2.1940 (14122): /proc/14121/oom_adj is deprecated, please use /proc/14121/oom_score_adj instead. [ 447.267797][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1940'. [ 447.519273][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 448.233848][T14140] syzkaller0: entered promiscuous mode [ 448.233857][T14140] syzkaller0: entered allmulticast mode [ 449.232622][T14148] NFSD: Failed to start, no listeners configured. [ 449.817667][T14104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.956917][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'. [ 450.117038][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 450.130656][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 450.189731][T14187] NFSD: Failed to start, no listeners configured. [ 450.390979][T14191] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1959'. [ 450.398991][T14191] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 450.399005][T14191] memcg:ffff88806f03cd82 [ 450.399010][T14191] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 450.399023][T14191] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 450.399032][T14191] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 450.399038][T14191] page dumped because: unmovable page [ 450.399043][T14191] page_owner tracks the page as allocated [ 450.399053][T14191] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 450.399070][T14191] post_alloc_hook+0xfd/0x120 [ 450.399086][T14191] get_page_from_freelist+0x1113/0x35e0 [ 450.399101][T14191] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 450.399116][T14191] alloc_pages_node_noprof+0x93/0x200 [ 450.399129][T14191] ringbuf_map_alloc+0x27e/0x860 [ 450.399140][T14191] map_create+0x874/0x3150 [ 450.399155][T14191] __sys_bpf+0x14cb/0x4b60 [ 450.399165][T14191] __ia32_sys_bpf+0xcc/0x170 [ 450.399175][T14191] __do_fast_syscall_32+0x14b/0x8c0 [ 450.399189][T14191] do_fast_syscall_32+0x32/0x70 [ 450.399201][T14191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.399261][T14191] page last free pid 37 tgid 37 ts 378355864138 stack trace: [ 450.399270][T14191] __free_frozen_pages+0x7b4/0x1110 [ 450.399284][T14191] ringbuf_map_free+0xe0/0x140 [ 450.399295][T14191] bpf_map_free_deferred+0x23e/0x820 [ 450.399310][T14191] process_one_work+0xac7/0x1b10 [ 450.399326][T14191] worker_thread+0x5ef/0xe50 [ 450.399340][T14191] kthread+0x373/0x450 [ 450.399354][T14191] ret_from_fork+0x730/0xd60 [ 450.399365][T14191] ret_from_fork_asm+0x1a/0x30 [ 450.402125][T14191] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 450.402990][T14191] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 451.614461][ C2] net_ratelimit: 167 callbacks suppressed [ 453.487057][T14195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.609666][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 453.932452][T14235] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1969'. [ 454.138203][T14238] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 454.138826][T14235] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 454.138840][T14235] memcg:ffff88806f03cd82 [ 454.138846][T14235] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) ** 214 printk messages dropped ** ** 166 printk messages dropped ** ** 175 printk messages dropped ** ** 162 printk messages dropped ** ** 171 printk messages dropped ** ** 166 printk messages dropped ** ** 173 printk messages dropped ** ** 162 printk messages dropped ** ** 171 printk messages dropped ** ** 168 printk messages dropped ** ** 172 printk messages dropped ** ** 163 printk messages dropped ** ** 159 printk messages dropped ** ** 169 printk messages dropped ** ** 127 printk messages dropped ** [ 455.184458][T14240] NFSD: Failed to start, no listeners configured. [ 456.622915][T14225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.664509][ C2] net_ratelimit: 64 callbacks suppressed [ 456.810420][T14251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.594871][T14255] FAULT_INJECTION: forcing a failure. [ 457.594871][T14255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.594889][T14255] CPU: 0 UID: 0 PID: 14255 Comm: syz.2.1978 Not tainted syzkaller #0 PREEMPT(full) [ 457.594901][T14255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.594907][T14255] Call Trace: [ 457.594911][T14255] [ 457.594916][T14255] dump_stack_lvl+0x100/0x190 [ 457.594937][T14255] should_fail_ex.cold+0x5/0xa [ 457.594952][T14255] _copy_from_user+0x2e/0xd0 [ 457.594968][T14255] __ia32_compat_sys_socketcall+0x187/0x770 [ 457.594988][T14255] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 457.595002][T14255] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 457.595035][T14255] do_int80_emulation+0x166/0x650 [ 457.595054][T14255] asm_int80_emulation+0x1a/0x20 [ 457.595065][T14255] RIP: 0023:0xf7167f6b [ 457.595074][T14255] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 457.595084][T14255] RSP: 002b:00000000f542530c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 457.595095][T14255] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54253b4 [ 457.595102][T14255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.595108][T14255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.595114][T14255] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 ** 323 printk messages dropped ** ** 209 printk messages dropped ** ** 225 printk messages dropped ** ** 218 printk messages dropped ** ** 218 printk messages dropped ** ** 209 printk messages dropped ** ** 218 printk messages dropped ** ** 205 printk messages dropped ** ** 209 printk messages dropped ** ** 193 printk messages dropped ** ** 211 printk messages dropped ** ** 62 printk messages dropped ** [ 457.807944][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 458.008687][ T5792] svc: failed to register nfsdv3 RPC service (errno 5). [ 458.008700][ T5792] failed to unregister tcp with rpcbind [ 458.063181][T14269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1983'. [ 458.118685][T14270] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 458.119449][T14270] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 458.140482][T14269] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 458.140496][T14269] memcg:ffff88806f03cd82 [ 458.140501][T14269] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 458.140514][T14269] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 458.140524][T14269] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 458.140530][T14269] page dumped because: unmovable page [ 458.140535][T14269] page_owner tracks the page as allocated [ 458.140539][T14269] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 458.140558][T14269] post_alloc_hook+0xfd/0x120 [ 458.140574][T14269] get_page_from_freelist+0x1113/0x35e0 [ 458.140590][T14269] __alloc_frozen_pages_noprof+0x2bd/0x3280 ** 26 printk messages dropped ** ** 117 printk messages dropped ** ** 152 printk messages dropped ** ** 158 printk messages dropped ** ** 144 printk messages dropped ** ** 168 printk messages dropped ** ** 147 printk messages dropped ** ** 162 printk messages dropped ** ** 157 printk messages dropped ** ** 132 printk messages dropped ** ** 136 printk messages dropped ** ** 162 printk messages dropped ** ** 147 printk messages dropped ** ** 136 printk messages dropped ** ** 79 printk messages dropped ** ** 126 printk messages dropped ** ** 121 printk messages dropped ** ** 100 printk messages dropped ** ** 125 printk messages dropped ** [ 458.231066][T14272] Sensor A: ================= START STATUS ================= [ 458.231080][T14272] Sensor A: Test Pattern: [ 458.231090][T14272] 75% Colorbar [ 458.231102][T14272] Sensor A: Show Information: [ 458.231111][T14272] All [ 458.231120][T14272] Sensor A: Vertical Flip: false [ 458.231135][T14272] Sensor A: Horizontal Flip: false [ 458.231150][T14272] Sensor A: Brightness: 3 [ 458.231165][T14272] Sensor A: Contrast: 128 [ 458.231178][T14272] Sensor A: Hue: 0 [ 458.231193][T14272] Sensor A: Saturation: 128 [ 458.231208][T14272] Sensor A: Pixel Rate: 160000000 [ 458.231225][T14272] Sensor A: Horizontal Blanking: [ 458.231234][T14272] 800 [ 458.231240][T14272] [ 458.231245][T14272] Sensor A: Vertical Blanking: [ 458.231254][T14272] 3223 [ 458.231260][T14272] [ 458.231265][T14272] Sensor A: ================== END STATUS ================== ** 420 printk messages dropped ** ** 205 printk messages dropped ** ** 182 printk messages dropped ** ** 153 printk messages dropped ** ** 167 printk messages dropped ** ** 151 printk messages dropped ** ** 146 printk messages dropped ** ** 143 printk messages dropped ** ** 143 printk messages dropped ** ** 170 printk messages dropped ** ** 148 printk messages dropped ** ** 107 printk messages dropped ** ** 155 printk messages dropped ** ** 143 printk messages dropped ** ** 161 printk messages dropped ** ** 143 printk messages dropped ** ** 131 printk messages dropped ** ** 142 printk messages dropped ** ** 154 printk messages dropped ** ** 155 printk messages dropped ** ** 123 printk messages dropped ** ** 145 printk messages dropped ** ** 143 printk messages dropped ** ** 159 printk messages dropped ** ** 163 printk messages dropped ** ** 132 printk messages dropped ** ** 150 printk messages dropped ** ** 152 printk messages dropped ** ** 152 printk messages dropped ** ** 117 printk messages dropped ** ** 83 printk messages dropped ** ** 73 printk messages dropped ** ** 73 printk messages dropped ** ** 87 printk messages dropped ** ** 73 printk messages dropped ** ** 75 printk messages dropped ** ** 78 printk messages dropped ** ** 82 printk messages dropped ** ** 79 printk messages dropped ** ** 73 printk messages dropped ** ** 84 printk messages dropped ** ** 79 printk messages dropped ** ** 79 printk messages dropped ** ** 81 printk messages dropped ** ** 73 printk messages dropped ** ** 76 printk messages dropped ** ** 88 printk messages dropped ** ** 75 printk messages dropped ** ** 85 printk messages dropped ** ** 76 printk messages dropped ** ** 15 printk messages dropped ** [ 458.440501][T14274] FAULT_INJECTION: forcing a failure. [ 458.440501][T14274] name failslab, interval 1, probability 0, space 0, times 0 [ 458.440517][T14274] CPU: 2 UID: 0 PID: 14274 Comm: syz.0.1985 Not tainted syzkaller #0 PREEMPT(full) [ 458.440530][T14274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 458.440536][T14274] Call Trace: [ 458.440540][T14274] [ 458.440545][T14274] dump_stack_lvl+0x100/0x190 [ 458.440566][T14274] should_fail_ex.cold+0x5/0xa [ 458.440581][T14274] should_failslab+0xc2/0x120 [ 458.440594][T14274] __kmalloc_noprof+0xfc/0x840 [ 458.440610][T14274] ? get_pid_task+0x106/0x250 [ 458.440623][T14274] ? video_usercopy+0x145/0x14c0 [ 458.440643][T14274] video_usercopy+0x145/0x14c0 [ 458.440659][T14274] ? __pfx___video_do_ioctl+0x10/0x10 [ 458.440675][T14274] ? do_vfs_ioctl+0x226/0x13e0 [ 458.440691][T14274] ? __pfx_video_usercopy+0x10/0x10 [ 458.440712][T14274] ? __fget_files+0x215/0x3d0 [ 458.440722][T14274] ? hook_file_ioctl_common+0x140/0x440 [ 458.440741][T14274] v4l2_ioctl+0x1bd/0x250 [ 458.440753][T14274] v4l2_compat_ioctl32+0x20f/0x2d0 [ 458.440768][T14274] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 458.440786][T14274] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 458.440804][T14274] __do_fast_syscall_32+0x14b/0x8c0 [ 458.440818][T14274] ? lockdep_hardirqs_on+0x7d/0x110 [ 458.440835][T14274] do_fast_syscall_32+0x32/0x70 ** 29 printk messages dropped ** ** 155 printk messages dropped ** ** 163 printk messages dropped ** ** 147 printk messages dropped ** ** 145 printk messages dropped ** ** 151 printk messages dropped ** ** 156 printk messages dropped ** ** 158 printk messages dropped ** ** 163 printk messages dropped ** ** 161 printk messages dropped ** ** 169 printk messages dropped ** ** 170 printk messages dropped ** ** 164 printk messages dropped ** ** 158 printk messages dropped ** ** 162 printk messages dropped ** ** 159 printk messages dropped ** ** 102 printk messages dropped ** [ 458.771882][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 459.237760][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 459.237770][ T42] audit: type=1804 audit(1793696495.138:907): pid=14292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1990" name="bus" dev="ramfs" ino=37437 res=1 errno=0 [ 460.153103][T14303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1994'. [ 460.231876][T14303] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 460.231891][T14303] memcg:ffff88806f03cd82 [ 460.231896][T14303] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 460.231910][T14303] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 460.231919][T14303] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 460.231925][T14303] page dumped because: unmovable page [ 460.231931][T14303] page_owner tracks the page as allocated [ 460.231935][T14303] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 460.231951][T14303] post_alloc_hook+0xfd/0x120 [ 460.231967][T14303] get_page_from_freelist+0x1113/0x35e0 [ 460.231981][T14303] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 460.231995][T14303] alloc_pages_node_noprof+0x93/0x200 [ 460.232009][T14303] ringbuf_map_alloc+0x27e/0x860 [ 460.232019][T14303] map_create+0x874/0x3150 [ 460.232034][T14303] __sys_bpf+0x14cb/0x4b60 [ 460.232043][T14303] __ia32_sys_bpf+0xcc/0x170 [ 460.232054][T14303] __do_fast_syscall_32+0x14b/0x8c0 [ 460.232068][T14303] do_fast_syscall_32+0x32/0x70 [ 460.232081][T14303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 460.232093][T14303] page last free pid 37 tgid 37 ts 378355864138 stack trace: [ 460.232101][T14303] __free_frozen_pages+0x7b4/0x1110 [ 460.232112][T14303] ringbuf_map_free+0xe0/0x140 [ 460.232122][T14303] bpf_map_free_deferred+0x23e/0x820 [ 460.232136][T14303] process_one_work+0xac7/0x1b10 [ 460.232151][T14303] worker_thread+0x5ef/0xe50 [ 460.232165][T14303] kthread+0x373/0x450 [ 460.232177][T14303] ret_from_fork+0x730/0xd60 [ 460.232188][T14303] ret_from_fork_asm+0x1a/0x30 [ 460.254623][T14303] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 460.264304][T14303] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 461.854427][ C2] net_ratelimit: 65 callbacks suppressed ** 2511 printk messages dropped ** ** 8379 printk messages dropped ** ** 7416 printk messages dropped ** [ 463.377570][T14331] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2004'. [ 463.434500][T14334] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 463.435403][T14334] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 463.487144][T14331] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 463.487161][T14331] memcg:ffff88806f03cd82 [ 463.487166][T14331] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 463.487179][T14331] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 463.487188][T14331] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 463.487194][T14331] page dumped because: unmovable page [ 463.487199][T14331] page_owner tracks the page as allocated [ 463.487203][T14331] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 463.487221][T14331] post_alloc_hook+0xfd/0x120 [ 463.487270][T14331] get_page_from_freelist+0x1113/0x35e0 [ 463.487287][T14331] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 463.487302][T14331] alloc_pages_node_noprof+0x93/0x200 ** 64 printk messages dropped ** ** 226 printk messages dropped ** ** 195 printk messages dropped ** ** 160 printk messages dropped ** ** 168 printk messages dropped ** ** 158 printk messages dropped ** ** 160 printk messages dropped ** ** 160 printk messages dropped ** ** 163 printk messages dropped ** ** 160 printk messages dropped ** ** 162 printk messages dropped ** ** 163 printk messages dropped ** ** 151 printk messages dropped ** ** 161 printk messages dropped ** ** 164 printk messages dropped ** ** 99 printk messages dropped ** ** 151 printk messages dropped ** ** 143 printk messages dropped ** ** 159 printk messages dropped ** ** 168 printk messages dropped ** ** 165 printk messages dropped ** ** 149 printk messages dropped ** ** 159 printk messages dropped ** ** 202 printk messages dropped ** ** 227 printk messages dropped ** ** 214 printk messages dropped ** ** 216 printk messages dropped ** ** 208 printk messages dropped ** ** 209 printk messages dropped ** ** 214 printk messages dropped ** ** 201 printk messages dropped ** ** 204 printk messages dropped ** ** 208 printk messages dropped ** ** 214 printk messages dropped ** ** 206 printk messages dropped ** ** 209 printk messages dropped ** ** 195 printk messages dropped ** ** 216 printk messages dropped ** ** 208 printk messages dropped ** ** 274 printk messages dropped ** ** 219 printk messages dropped ** ** 196 printk messages dropped ** ** 350 printk messages dropped ** ** 168 printk messages dropped ** ** 173 printk messages dropped ** ** 162 printk messages dropped ** ** 172 printk messages dropped ** ** 159 printk messages dropped ** ** 171 printk messages dropped ** ** 166 printk messages dropped ** ** 173 printk messages dropped ** ** 161 printk messages dropped ** ** 165 printk messages dropped ** ** 161 printk messages dropped ** ** 145 printk messages dropped ** ** 61 printk messages dropped ** ** 157 printk messages dropped ** ** 159 printk messages dropped ** ** 156 printk messages dropped ** ** 182 printk messages dropped ** ** 161 printk messages dropped ** ** 169 printk messages dropped ** ** 159 printk messages dropped ** ** 171 printk messages dropped ** ** 164 printk messages dropped ** ** 165 printk messages dropped ** ** 163 printk messages dropped ** ** 171 printk messages dropped ** ** 167 printk messages dropped ** ** 168 printk messages dropped ** ** 161 printk messages dropped ** ** 184 printk messages dropped ** ** 168 printk messages dropped ** ** 161 printk messages dropped ** ** 156 printk messages dropped ** ** 167 printk messages dropped ** ** 161 printk messages dropped ** ** 173 printk messages dropped ** ** 163 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 168 printk messages dropped ** ** 160 printk messages dropped ** ** 168 printk messages dropped ** ** 160 printk messages dropped ** ** 176 printk messages dropped ** ** 168 printk messages dropped ** ** 167 printk messages dropped ** ** 160 printk messages dropped ** ** 155 printk messages dropped ** ** 163 printk messages dropped ** ** 170 printk messages dropped ** ** 212 printk messages dropped ** ** 192 printk messages dropped ** ** 159 printk messages dropped ** ** 181 printk messages dropped ** ** 192 printk messages dropped ** ** 187 printk messages dropped ** ** 199 printk messages dropped ** ** 117 printk messages dropped ** [ 463.904526][ T5797] usb 7-1: new high-speed USB device number 72 using dummy_hcd ** 5691 printk messages dropped ** ** 175 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 157 printk messages dropped ** ** 166 printk messages dropped ** ** 163 printk messages dropped ** ** 161 printk messages dropped ** ** 152 printk messages dropped ** ** 160 printk messages dropped ** ** 161 printk messages dropped ** ** 158 printk messages dropped ** ** 181 printk messages dropped ** ** 160 printk messages dropped ** ** 171 printk messages dropped ** ** 159 printk messages dropped ** ** 166 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 163 printk messages dropped ** ** 162 printk messages dropped ** ** 176 printk messages dropped ** ** 153 printk messages dropped ** ** 163 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 157 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 160 printk messages dropped ** ** 165 printk messages dropped ** ** 157 printk messages dropped ** ** 153 printk messages dropped ** ** 166 printk messages dropped ** ** 157 printk messages dropped ** ** 169 printk messages dropped ** ** 71 printk messages dropped ** [ 464.307846][ T5797] usb 7-1: usb_control_msg returned -32 [ 464.307867][ T5797] usbtmc 7-1:16.0: can't read capabilities [ 464.320212][ T5797] usb 7-1: USB disconnect, device number 72 [ 464.348702][T14337] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 464.595886][T14346] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks ** 1749 printk messages dropped ** ** 250 printk messages dropped ** ** 246 printk messages dropped ** ** 258 printk messages dropped ** ** 89 printk messages dropped ** ** 228 printk messages dropped ** ** 296 printk messages dropped ** ** 249 printk messages dropped ** ** 238 printk messages dropped ** ** 248 printk messages dropped ** ** 241 printk messages dropped ** ** 249 printk messages dropped ** ** 256 printk messages dropped ** ** 242 printk messages dropped ** ** 245 printk messages dropped ** ** 252 printk messages dropped ** ** 245 printk messages dropped ** ** 245 printk messages dropped ** ** 236 printk messages dropped ** ** 253 printk messages dropped ** ** 243 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 353 printk messages dropped ** ** 239 printk messages dropped ** ** 251 printk messages dropped ** ** 243 printk messages dropped ** ** 229 printk messages dropped ** ** 178 printk messages dropped ** ** 208 printk messages dropped ** ** 252 printk messages dropped ** ** 251 printk messages dropped ** ** 260 printk messages dropped ** ** 242 printk messages dropped ** ** 221 printk messages dropped ** ** 410 printk messages dropped ** ** 247 printk messages dropped ** ** 236 printk messages dropped ** ** 250 printk messages dropped ** ** 245 printk messages dropped ** ** 231 printk messages dropped ** ** 330 printk messages dropped ** ** 231 printk messages dropped ** ** 239 printk messages dropped ** ** 234 printk messages dropped ** ** 241 printk messages dropped ** ** 239 printk messages dropped ** ** 236 printk messages dropped ** ** 240 printk messages dropped ** ** 240 printk messages dropped ** ** 245 printk messages dropped ** ** 249 printk messages dropped ** ** 240 printk messages dropped ** ** 238 printk messages dropped ** ** 238 printk messages dropped ** ** 255 printk messages dropped ** ** 239 printk messages dropped ** ** 228 printk messages dropped ** ** 244 printk messages dropped ** ** 255 printk messages dropped ** ** 253 printk messages dropped ** ** 241 printk messages dropped ** ** 243 printk messages dropped ** ** 243 printk messages dropped ** ** 208 printk messages dropped ** ** 5 printk messages dropped ** ** 228 printk messages dropped ** ** 234 printk messages dropped ** ** 246 printk messages dropped ** ** 240 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 259 printk messages dropped ** ** 239 printk messages dropped ** ** 238 printk messages dropped ** ** 240 printk messages dropped ** ** 248 printk messages dropped ** ** 233 printk messages dropped ** ** 273 printk messages dropped ** ** 249 printk messages dropped ** ** 244 printk messages dropped ** ** 235 printk messages dropped ** ** 399 printk messages dropped ** ** 245 printk messages dropped ** ** 249 printk messages dropped ** ** 251 printk messages dropped ** ** 244 printk messages dropped ** ** 246 printk messages dropped ** ** 240 printk messages dropped ** ** 246 printk messages dropped ** ** 255 printk messages dropped ** ** 243 printk messages dropped ** ** 244 printk messages dropped ** ** 242 printk messages dropped ** ** 244 printk messages dropped ** ** 221 printk messages dropped ** ** 39 printk messages dropped ** ** 213 printk messages dropped ** ** 238 printk messages dropped ** ** 242 printk messages dropped ** ** 238 printk messages dropped ** ** 237 printk messages dropped ** ** 235 printk messages dropped ** ** 236 printk messages dropped ** ** 246 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 237 printk messages dropped ** ** 212 printk messages dropped ** ** 246 printk messages dropped ** ** 190 printk messages dropped ** ** 153 printk messages dropped ** ** 157 printk messages dropped ** ** 145 printk messages dropped ** ** 5118 printk messages dropped ** ** 236 printk messages dropped ** ** 313 printk messages dropped ** ** 218 printk messages dropped ** ** 230 printk messages dropped ** ** 220 printk messages dropped ** ** 223 printk messages dropped ** ** 225 printk messages dropped ** ** 162 printk messages dropped ** ** 206 printk messages dropped ** ** 218 printk messages dropped ** ** 197 printk messages dropped ** ** 168 printk messages dropped ** ** 166 printk messages dropped ** ** 163 printk messages dropped ** ** 163 printk messages dropped ** ** 149 printk messages dropped ** ** 167 printk messages dropped ** ** 170 printk messages dropped ** ** 205 printk messages dropped ** ** 197 printk messages dropped ** ** 205 printk messages dropped ** ** 193 printk messages dropped ** ** 203 printk messages dropped ** ** 175 printk messages dropped ** ** 198 printk messages dropped ** ** 204 printk messages dropped ** ** 190 printk messages dropped ** ** 193 printk messages dropped ** ** 196 printk messages dropped ** ** 175 printk messages dropped ** ** 146 printk messages dropped ** ** 10 printk messages dropped ** ** 157 printk messages dropped ** ** 190 printk messages dropped ** ** 204 printk messages dropped ** ** 191 printk messages dropped ** ** 215 printk messages dropped ** ** 220 printk messages dropped ** ** 192 printk messages dropped ** ** 170 printk messages dropped ** ** 158 printk messages dropped ** ** 170 printk messages dropped ** ** 161 printk messages dropped ** ** 166 printk messages dropped ** ** 165 printk messages dropped ** ** 168 printk messages dropped ** ** 159 printk messages dropped ** ** 166 printk messages dropped ** ** 261 printk messages dropped ** ** 260 printk messages dropped ** ** 233 printk messages dropped ** ** 234 printk messages dropped ** ** 225 printk messages dropped ** ** 221 printk messages dropped ** ** 200 printk messages dropped ** ** 236 printk messages dropped ** ** 226 printk messages dropped ** ** 238 printk messages dropped ** ** 239 printk messages dropped ** ** 165 printk messages dropped ** ** 247 printk messages dropped ** ** 242 printk messages dropped ** ** 236 printk messages dropped ** ** 230 printk messages dropped ** ** 221 printk messages dropped ** ** 195 printk messages dropped ** ** 193 printk messages dropped ** ** 188 printk messages dropped ** ** 222 printk messages dropped ** ** 240 printk messages dropped ** ** 269 printk messages dropped ** ** 247 printk messages dropped ** ** 417 printk messages dropped ** ** 627 printk messages dropped ** ** 178 printk messages dropped ** ** 170 printk messages dropped ** ** 174 printk messages dropped ** ** 197 printk messages dropped ** ** 197 printk messages dropped ** ** 240 printk messages dropped ** ** 239 printk messages dropped ** ** 175 printk messages dropped ** ** 201 printk messages dropped ** ** 217 printk messages dropped ** ** 205 printk messages dropped ** ** 98 printk messages dropped ** ** 159 printk messages dropped ** ** 170 printk messages dropped ** ** 263 printk messages dropped ** ** 178 printk messages dropped ** ** 173 printk messages dropped ** ** 152 printk messages dropped ** ** 197 printk messages dropped ** ** 183 printk messages dropped ** ** 231 printk messages dropped ** ** 242 printk messages dropped ** ** 237 printk messages dropped ** ** 239 printk messages dropped ** ** 234 printk messages dropped ** ** 229 printk messages dropped ** ** 229 printk messages dropped ** ** 173 printk messages dropped ** ** 88 printk messages dropped ** ** 201 printk messages dropped ** ** 196 printk messages dropped ** ** 207 printk messages dropped ** ** 203 printk messages dropped ** ** 223 printk messages dropped ** ** 185 printk messages dropped ** ** 212 printk messages dropped ** ** 211 printk messages dropped ** ** 267 printk messages dropped ** ** 225 printk messages dropped ** ** 211 printk messages dropped ** ** 161 printk messages dropped ** ** 173 printk messages dropped ** ** 160 printk messages dropped ** ** 180 printk messages dropped ** ** 172 printk messages dropped ** ** 171 printk messages dropped ** ** 172 printk messages dropped ** ** 236 printk messages dropped ** ** 183 printk messages dropped ** ** 215 printk messages dropped ** ** 225 printk messages dropped ** ** 234 printk messages dropped ** ** 228 printk messages dropped ** ** 220 printk messages dropped ** ** 175 printk messages dropped ** ** 128 printk messages dropped ** ** 94 printk messages dropped ** ** 164 printk messages dropped ** ** 170 printk messages dropped ** ** 183 printk messages dropped ** ** 173 printk messages dropped ** ** 174 printk messages dropped ** ** 199 printk messages dropped ** ** 237 printk messages dropped ** ** 222 printk messages dropped ** ** 243 printk messages dropped ** ** 137 printk messages dropped ** ** 176 printk messages dropped ** ** 154 printk messages dropped ** ** 166 printk messages dropped ** ** 169 printk messages dropped ** ** 148 printk messages dropped ** ** 212 printk messages dropped ** ** 168 printk messages dropped ** ** 198 printk messages dropped ** ** 226 printk messages dropped ** ** 211 printk messages dropped ** ** 235 printk messages dropped ** ** 228 printk messages dropped ** ** 252 printk messages dropped ** ** 206 printk messages dropped ** ** 178 printk messages dropped ** ** 171 printk messages dropped ** ** 172 printk messages dropped ** ** 177 printk messages dropped ** ** 169 printk messages dropped ** ** 155 printk messages dropped ** ** 164 printk messages dropped ** ** 179 printk messages dropped ** ** 197 printk messages dropped ** ** 241 printk messages dropped ** ** 235 printk messages dropped ** ** 238 printk messages dropped ** ** 231 printk messages dropped ** ** 200 printk messages dropped ** ** 228 printk messages dropped ** ** 228 printk messages dropped ** ** 228 printk messages dropped ** ** 224 printk messages dropped ** ** 224 printk messages dropped ** ** 208 printk messages dropped ** ** 247 printk messages dropped ** ** 232 printk messages dropped ** ** 181 printk messages dropped ** ** 214 printk messages dropped ** ** 195 printk messages dropped ** ** 176 printk messages dropped ** ** 164 printk messages dropped ** ** 159 printk messages dropped ** ** 172 printk messages dropped ** ** 171 printk messages dropped ** ** 193 printk messages dropped ** ** 204 printk messages dropped ** ** 202 printk messages dropped ** ** 202 printk messages dropped ** ** 198 printk messages dropped ** ** 189 printk messages dropped ** ** 218 printk messages dropped ** ** 235 printk messages dropped ** ** 236 printk messages dropped ** ** 202 printk messages dropped ** ** 221 printk messages dropped ** ** 197 printk messages dropped ** ** 194 printk messages dropped ** ** 203 printk messages dropped ** ** 205 printk messages dropped ** ** 196 printk messages dropped ** ** 201 printk messages dropped ** ** 202 printk messages dropped ** ** 219 printk messages dropped ** ** 214 printk messages dropped ** ** 240 printk messages dropped ** ** 177 printk messages dropped ** ** 181 printk messages dropped ** ** 173 printk messages dropped ** ** 164 printk messages dropped ** ** 167 printk messages dropped ** ** 172 printk messages dropped ** ** 114 printk messages dropped ** ** 105 printk messages dropped ** ** 173 printk messages dropped ** ** 192 printk messages dropped ** ** 202 printk messages dropped ** ** 60 printk messages dropped ** ** 229 printk messages dropped ** ** 220 printk messages dropped ** ** 232 printk messages dropped ** ** 232 printk messages dropped ** ** 239 printk messages dropped ** ** 439 printk messages dropped ** ** 235 printk messages dropped ** ** 527 printk messages dropped ** ** 230 printk messages dropped ** ** 237 printk messages dropped ** ** 228 printk messages dropped ** ** 239 printk messages dropped ** ** 220 printk messages dropped ** ** 233 printk messages dropped ** ** 226 printk messages dropped ** ** 238 printk messages dropped ** ** 231 printk messages dropped ** ** 236 printk messages dropped ** ** 229 printk messages dropped ** ** 230 printk messages dropped ** ** 226 printk messages dropped ** ** 239 printk messages dropped ** ** 224 printk messages dropped ** ** 240 printk messages dropped ** ** 221 printk messages dropped ** ** 219 printk messages dropped ** ** 227 printk messages dropped ** ** 238 printk messages dropped ** ** 241 printk messages dropped ** ** 241 printk messages dropped ** ** 10 printk messages dropped ** [ 465.295252][ T5797] usb 7-1: USB disconnect, device number 73 [ 466.082135][ T5790] svc: failed to register nfsdv3 RPC service (errno 5). [ 466.082148][ T5790] failed to unregister tcp with rpcbind [ 466.145638][T14356] device-mapper: table: 248:9: thin-pool: Error creating metadata object (-EIO) [ 466.145653][T14356] device-mapper: ioctl: error adding target to table [ 466.375112][ T5802] svc: failed to register nfsdv3 RPC service (errno 5). [ 466.375126][ T5802] failed to unregister tcp with rpcbind [ 466.422545][T14372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2014'. [ 466.495837][T14374] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 466.500251][T14374] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) ** 2929 printk messages dropped ** ** 180 printk messages dropped ** ** 163 printk messages dropped ** ** 175 printk messages dropped ** ** 167 printk messages dropped ** ** 171 printk messages dropped ** ** 170 printk messages dropped ** ** 154 printk messages dropped ** ** 100 printk messages dropped ** ** 131 printk messages dropped ** ** 103 printk messages dropped ** ** 108 printk messages dropped ** ** 98 printk messages dropped ** ** 111 printk messages dropped ** ** 164 printk messages dropped ** ** 131 printk messages dropped ** ** 95 printk messages dropped ** ** 137 printk messages dropped ** ** 165 printk messages dropped ** ** 138 printk messages dropped ** ** 106 printk messages dropped ** ** 137 printk messages dropped ** ** 112 printk messages dropped ** ** 121 printk messages dropped ** ** 112 printk messages dropped ** ** 125 printk messages dropped ** ** 111 printk messages dropped ** [ 466.749575][T14372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e ** 387 printk messages dropped ** ** 159 printk messages dropped ** ** 168 printk messages dropped ** ** 162 printk messages dropped ** ** 176 printk messages dropped ** ** 165 printk messages dropped ** ** 349 printk messages dropped ** ** 114 printk messages dropped ** ** 159 printk messages dropped ** ** 152 printk messages dropped ** ** 122 printk messages dropped ** ** 157 printk messages dropped ** ** 142 printk messages dropped ** ** 143 printk messages dropped ** ** 168 printk messages dropped ** ** 172 printk messages dropped ** ** 171 printk messages dropped ** ** 162 printk messages dropped ** ** 179 printk messages dropped ** ** 164 printk messages dropped ** [ 466.895432][ T5879] net_ratelimit: 73 callbacks suppressed ** 67 printk messages dropped ** ** 147 printk messages dropped ** ** 162 printk messages dropped ** ** 166 printk messages dropped ** ** 163 printk messages dropped ** ** 165 printk messages dropped ** ** 149 printk messages dropped ** ** 162 printk messages dropped ** ** 158 printk messages dropped ** ** 163 printk messages dropped ** ** 168 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 158 printk messages dropped ** ** 165 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 169 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 155 printk messages dropped ** ** 164 printk messages dropped ** ** 159 printk messages dropped ** ** 173 printk messages dropped ** ** 154 printk messages dropped ** ** 169 printk messages dropped ** ** 184 printk messages dropped ** ** 162 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 163 printk messages dropped ** ** 165 printk messages dropped ** ** 161 printk messages dropped ** ** 165 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 87 printk messages dropped ** [ 467.987841][ T5792] svc: failed to register nfsdv3 RPC service (errno 5). [ 467.987852][ T5792] failed to unregister tcp with rpcbind ** 1500 printk messages dropped ** ** 236 printk messages dropped ** ** 220 printk messages dropped ** ** 386 printk messages dropped ** ** 172 printk messages dropped ** ** 182 printk messages dropped ** ** 188 printk messages dropped ** ** 210 printk messages dropped ** ** 164 printk messages dropped ** ** 171 printk messages dropped ** ** 186 printk messages dropped ** ** 179 printk messages dropped ** ** 174 printk messages dropped ** ** 179 printk messages dropped ** ** 191 printk messages dropped ** ** 188 printk messages dropped ** ** 248 printk messages dropped ** ** 191 printk messages dropped ** ** 172 printk messages dropped ** ** 121 printk messages dropped ** ** 182 printk messages dropped ** ** 171 printk messages dropped ** ** 177 printk messages dropped ** ** 179 printk messages dropped ** ** 185 printk messages dropped ** ** 55 printk messages dropped ** [ 468.533297][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.538168][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.539039][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.540022][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.540660][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.248238][T14400] rxe_eth0 speed is unknown, defaulting to 1000 ** 6455 printk messages dropped ** ** 181 printk messages dropped ** ** 160 printk messages dropped ** ** 170 printk messages dropped ** ** 158 printk messages dropped ** ** 169 printk messages dropped ** ** 163 printk messages dropped ** ** 166 printk messages dropped ** ** 177 printk messages dropped ** ** 176 printk messages dropped ** ** 159 printk messages dropped ** ** 161 printk messages dropped ** ** 168 printk messages dropped ** ** 48 printk messages dropped ** ** 156 printk messages dropped ** ** 141 printk messages dropped ** ** 131 printk messages dropped ** ** 147 printk messages dropped ** ** 165 printk messages dropped ** ** 152 printk messages dropped ** ** 160 printk messages dropped ** ** 216 printk messages dropped ** ** 180 printk messages dropped ** ** 160 printk messages dropped ** ** 166 printk messages dropped ** ** 163 printk messages dropped ** ** 172 printk messages dropped ** ** 186 printk messages dropped ** ** 170 printk messages dropped ** ** 165 printk messages dropped ** ** 170 printk messages dropped ** ** 166 printk messages dropped ** ** 170 printk messages dropped ** ** 169 printk messages dropped ** ** 172 printk messages dropped ** ** 164 printk messages dropped ** ** 171 printk messages dropped ** ** 182 printk messages dropped ** ** 172 printk messages dropped ** ** 162 printk messages dropped ** ** 174 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 168 printk messages dropped ** ** 170 printk messages dropped ** ** 165 printk messages dropped ** ** 173 printk messages dropped ** ** 187 printk messages dropped ** ** 167 printk messages dropped ** ** 166 printk messages dropped ** ** 172 printk messages dropped ** ** 171 printk messages dropped ** ** 171 printk messages dropped ** ** 157 printk messages dropped ** ** 163 printk messages dropped ** ** 163 printk messages dropped ** ** 165 printk messages dropped ** ** 142 printk messages dropped ** [ 469.970157][ T5792] svc: failed to register nfsdv3 RPC service (errno 5). [ 469.970168][ T5792] failed to unregister tcp with rpcbind [ 470.070661][T14430] FAULT_INJECTION: forcing a failure. [ 470.070661][T14430] name failslab, interval 1, probability 0, space 0, times 0 [ 470.070677][T14430] CPU: 0 UID: 0 PID: 14430 Comm: syz.0.2025 Not tainted syzkaller #0 PREEMPT(full) [ 470.070689][T14430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 470.070696][T14430] Call Trace: [ 470.070700][T14430] [ 470.070704][T14430] dump_stack_lvl+0x100/0x190 [ 470.070723][T14430] should_fail_ex.cold+0x5/0xa [ 470.070739][T14430] should_failslab+0xc2/0x120 [ 470.070752][T14430] __kmalloc_cache_noprof+0x91/0x6d0 [ 470.070768][T14430] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 470.070785][T14430] bpf_prog_alloc_no_stats+0x15f/0x690 [ 470.070800][T14430] bpf_prog_alloc+0x3b/0x200 [ 470.070817][T14430] ? __sanitizer_cov_trace_switch+0x54/0x90 ** 137 printk messages dropped ** ** 175 printk messages dropped ** ** 163 printk messages dropped ** ** 169 printk messages dropped ** ** 161 printk messages dropped ** ** 165 printk messages dropped ** ** 476 printk messages dropped ** ** 176 printk messages dropped ** ** 178 printk messages dropped ** ** 161 printk messages dropped ** ** 103 printk messages dropped ** ** 136 printk messages dropped ** ** 151 printk messages dropped ** ** 168 printk messages dropped ** ** 171 printk messages dropped ** ** 168 printk messages dropped ** ** 166 printk messages dropped ** ** 178 printk messages dropped ** ** 162 printk messages dropped ** ** 169 printk messages dropped ** ** 171 printk messages dropped ** ** 163 printk messages dropped ** ** 165 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 159 printk messages dropped ** ** 175 printk messages dropped ** ** 174 printk messages dropped ** ** 173 printk messages dropped ** ** 167 printk messages dropped ** ** 170 printk messages dropped ** ** 179 printk messages dropped ** ** 168 printk messages dropped ** ** 166 printk messages dropped ** ** 159 printk messages dropped ** ** 164 printk messages dropped ** ** 196 printk messages dropped ** ** 159 printk messages dropped ** ** 162 printk messages dropped ** ** 162 printk messages dropped ** ** 166 printk messages dropped ** ** 209 printk messages dropped ** ** 159 printk messages dropped ** ** 172 printk messages dropped ** ** 152 printk messages dropped ** ** 472 printk messages dropped ** ** 162 printk messages dropped ** ** 170 printk messages dropped ** ** 162 printk messages dropped ** ** 168 printk messages dropped ** ** 159 printk messages dropped ** ** 168 printk messages dropped ** ** 182 printk messages dropped ** ** 135 printk messages dropped ** ** 4740 printk messages dropped ** ** 29 printk messages dropped ** ** 23 printk messages dropped ** ** 82 printk messages dropped ** ** 101 printk messages dropped ** ** 51 printk messages dropped ** ** 17 printk messages dropped ** ** 7 printk messages dropped ** ** 18 printk messages dropped ** ** 6 printk messages dropped ** ** 33 printk messages dropped ** ** 95 printk messages dropped ** ** 107 printk messages dropped ** ** 47 printk messages dropped ** ** 13 printk messages dropped ** ** 53 printk messages dropped ** ** 84 printk messages dropped ** ** 100 printk messages dropped ** ** 11 printk messages dropped ** [ 470.397071][T14400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.398829][T14400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.420616][T14400] team0: Port device team_slave_0 added [ 470.422147][T14400] team0: Port device team_slave_1 added [ 470.448388][T14400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.448394][T14400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.448406][T14400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.451463][T14400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.451469][T14400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.451481][T14400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active ** 3054 printk messages dropped ** ** 146 printk messages dropped ** ** 169 printk messages dropped ** ** 132 printk messages dropped ** ** 137 printk messages dropped ** ** 137 printk messages dropped ** ** 182 printk messages dropped ** ** 166 printk messages dropped ** ** 148 printk messages dropped ** ** 157 printk messages dropped ** ** 164 printk messages dropped ** ** 157 printk messages dropped ** ** 177 printk messages dropped ** ** 164 printk messages dropped ** ** 170 printk messages dropped ** ** 167 printk messages dropped ** ** 344 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 163 printk messages dropped ** ** 169 printk messages dropped ** ** 167 printk messages dropped ** ** 190 printk messages dropped ** ** 209 printk messages dropped ** ** 213 printk messages dropped ** ** 173 printk messages dropped ** ** 161 printk messages dropped ** ** 164 printk messages dropped ** ** 168 printk messages dropped ** ** 167 printk messages dropped ** ** 168 printk messages dropped ** ** 203 printk messages dropped ** ** 179 printk messages dropped ** ** 183 printk messages dropped ** ** 173 printk messages dropped ** ** 163 printk messages dropped ** ** 172 printk messages dropped ** ** 178 printk messages dropped ** ** 171 printk messages dropped ** ** 178 printk messages dropped ** ** 158 printk messages dropped ** ** 357 printk messages dropped ** ** 176 printk messages dropped ** ** 108 printk messages dropped ** ** 177 printk messages dropped ** ** 153 printk messages dropped ** ** 177 printk messages dropped ** ** 286 printk messages dropped ** ** 415 printk messages dropped ** ** 172 printk messages dropped ** ** 172 printk messages dropped ** ** 163 printk messages dropped ** ** 161 printk messages dropped ** ** 253 printk messages dropped ** ** 161 printk messages dropped ** ** 169 printk messages dropped ** ** 303 printk messages dropped ** ** 186 printk messages dropped ** ** 178 printk messages dropped ** ** 162 printk messages dropped ** ** 170 printk messages dropped ** ** 178 printk messages dropped ** ** 162 printk messages dropped ** ** 219 printk messages dropped ** ** 290 printk messages dropped ** ** 169 printk messages dropped ** ** 200 printk messages dropped ** ** 247 printk messages dropped ** ** 170 printk messages dropped ** ** 161 printk messages dropped ** ** 167 printk messages dropped ** ** 140 printk messages dropped ** ** 149 printk messages dropped ** ** 184 printk messages dropped ** ** 169 printk messages dropped ** ** 170 printk messages dropped ** ** 212 printk messages dropped ** ** 225 printk messages dropped ** ** 250 printk messages dropped ** ** 204 printk messages dropped ** ** 174 printk messages dropped ** ** 149 printk messages dropped ** ** 183 printk messages dropped ** ** 167 printk messages dropped ** ** 173 printk messages dropped ** ** 160 printk messages dropped ** ** 63 printk messages dropped ** ** 11 printk messages dropped ** [ 470.658175][T14458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2029'. [ 470.742880][T14458] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 470.742894][T14458] memcg:ffff88806f03cd82 [ 470.742899][T14458] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 470.742913][T14458] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 470.742922][T14458] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 470.742927][T14458] page dumped because: unmovable page [ 470.742933][T14458] page_owner tracks the page as allocated [ 470.742937][T14458] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 470.742955][T14458] post_alloc_hook+0xfd/0x120 [ 470.742971][T14458] get_page_from_freelist+0x1113/0x35e0 [ 470.742986][T14458] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 470.743000][T14458] alloc_pages_node_noprof+0x93/0x200 [ 470.743014][T14458] ringbuf_map_alloc+0x27e/0x860 [ 470.743025][T14458] map_create+0x874/0x3150 [ 470.743039][T14458] __sys_bpf+0x14cb/0x4b60 [ 470.743050][T14458] __ia32_sys_bpf+0xcc/0x170 [ 470.743061][T14458] __do_fast_syscall_32+0x14b/0x8c0 [ 470.743074][T14458] do_fast_syscall_32+0x32/0x70 [ 470.743087][T14458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.743100][T14458] page last free pid 37 tgid 37 ts 378355864138 stack trace: ** 41 printk messages dropped ** ** 167 printk messages dropped ** ** 162 printk messages dropped ** ** 159 printk messages dropped ** ** 155 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 158 printk messages dropped ** ** 131 printk messages dropped ** ** 146 printk messages dropped ** ** 167 printk messages dropped ** ** 111 printk messages dropped ** ** 98 printk messages dropped ** ** 135 printk messages dropped ** ** 92 printk messages dropped ** ** 92 printk messages dropped ** ** 107 printk messages dropped ** ** 159 printk messages dropped ** ** 170 printk messages dropped ** ** 171 printk messages dropped ** [ 470.775300][T14458] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 470.835270][T14458] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 470.958456][T14465] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 470.958467][T14465] CPU: 0 UID: 0 PID: 14465 Comm: syz.3.2031 Not tainted syzkaller #0 PREEMPT(full) [ 470.958480][T14465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 470.958487][T14465] Call Trace: [ 470.958491][T14465] [ 470.958496][T14465] dump_stack_lvl+0x100/0x190 [ 470.958517][T14465] sysfs_warn_dup.cold+0x1c/0x28 [ 470.958534][T14465] sysfs_create_dir_ns+0x24b/0x2b0 [ 470.958550][T14465] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 470.958565][T14465] ? find_held_lock+0x2b/0x80 [ 470.958580][T14465] ? kobject_add_internal+0x25f/0x930 [ 470.958593][T14465] ? kobject_add_internal+0x25f/0x930 [ 470.958605][T14465] ? class_dir_child_ns_type+0xd/0x60 [ 470.958619][T14465] kobject_add_internal+0x2c8/0x930 [ 470.958632][T14465] kobject_add+0x16a/0x1e0 [ 470.958642][T14465] ? __pfx_kobject_add+0x10/0x10 [ 470.958653][T14465] ? get_device_parent+0x1b3/0x4c0 [ 470.958669][T14465] ? kobject_put+0xb9/0x640 [ 470.958689][T14465] device_add+0x294/0x1970 [ 470.958703][T14465] ? lockdep_init_map_type+0x5c/0x250 [ 470.958714][T14465] ? __pfx_device_add+0x10/0x10 ** 63 printk messages dropped ** ** 164 printk messages dropped ** ** 160 printk messages dropped ** ** 167 printk messages dropped ** ** 153 printk messages dropped ** ** 160 printk messages dropped ** ** 160 printk messages dropped ** ** 163 printk messages dropped ** ** 155 printk messages dropped ** ** 162 printk messages dropped ** ** 152 printk messages dropped ** ** 154 printk messages dropped ** ** 157 printk messages dropped ** ** 159 printk messages dropped ** ** 259 printk messages dropped ** ** 234 printk messages dropped ** ** 161 printk messages dropped ** ** 160 printk messages dropped ** ** 161 printk messages dropped ** ** 181 printk messages dropped ** ** 154 printk messages dropped ** ** 87 printk messages dropped ** ** 116 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 162 printk messages dropped ** ** 163 printk messages dropped ** ** 163 printk messages dropped ** ** 238 printk messages dropped ** ** 169 printk messages dropped ** ** 161 printk messages dropped ** ** 174 printk messages dropped ** ** 163 printk messages dropped ** ** 172 printk messages dropped ** ** 168 printk messages dropped ** ** 167 printk messages dropped ** ** 164 printk messages dropped ** ** 194 printk messages dropped ** ** 167 printk messages dropped ** ** 53 printk messages dropped ** ** 150 printk messages dropped ** ** 154 printk messages dropped ** ** 158 printk messages dropped ** ** 122 printk messages dropped ** ** 132 printk messages dropped ** ** 136 printk messages dropped ** ** 176 printk messages dropped ** ** 185 printk messages dropped ** ** 189 printk messages dropped ** ** 171 printk messages dropped ** ** 161 printk messages dropped ** ** 160 printk messages dropped ** ** 164 printk messages dropped ** ** 160 printk messages dropped ** ** 162 printk messages dropped ** ** 231 printk messages dropped ** ** 176 printk messages dropped ** ** 158 printk messages dropped ** ** 130 printk messages dropped ** ** 159 printk messages dropped ** ** 163 printk messages dropped ** ** 162 printk messages dropped ** ** 162 printk messages dropped ** ** 165 printk messages dropped ** ** 161 printk messages dropped ** ** 166 printk messages dropped ** ** 210 printk messages dropped ** ** 279 printk messages dropped ** ** 238 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 160 printk messages dropped ** ** 195 printk messages dropped ** ** 310 printk messages dropped ** ** 155 printk messages dropped ** ** 174 printk messages dropped ** ** 167 printk messages dropped ** ** 163 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 142 printk messages dropped ** ** 153 printk messages dropped ** ** 3748 printk messages dropped ** ** 180 printk messages dropped ** ** 171 printk messages dropped ** ** 168 printk messages dropped ** ** 186 printk messages dropped ** ** 180 printk messages dropped ** ** 162 printk messages dropped ** ** 2913 printk messages dropped ** ** 1 printk messages dropped ** ** 6 printk messages dropped ** ** 13 printk messages dropped ** ** 4 printk messages dropped ** ** 4 printk messages dropped ** ** 2 printk messages dropped ** ** 41 printk messages dropped ** ** 104 printk messages dropped ** ** 32 printk messages dropped ** ** 1 printk messages dropped ** ** 94 printk messages dropped ** ** 7 printk messages dropped ** ** 1 printk messages dropped ** [ 471.494527][ T9] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 471.660958][ T9] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 471.662587][T14400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 471.666412][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.666444][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.668325][T14400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.668766][T14400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.672014][ T9] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 471.672123][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 471.672159][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 471.672819][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 471.672864][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 471.673615][ T9] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 471.675588][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 471.675630][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 471.678178][T14400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.678618][T14400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 471.682141][ T9] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 471.749143][T14400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.749716][T14400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 471.861886][T14400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.012808][ T2340] usb 7-1: USB disconnect, device number 74 [ 472.024001][ T2340] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 472.052538][ T2340] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 472.053315][ T2340] keyspan 7-1:1.0: device disconnected [ 472.174436][ C0] net_ratelimit: 93 callbacks suppressed ** 25461 printk messages dropped ** [ 472.711296][T14400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.711332][T14400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.938717][T14480] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 472.938731][T14480] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 473.132952][T14480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.132964][T14480] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 473.305185][T14400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.593899][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'. [ 473.714090][T14400] veth0_vlan: entered promiscuous mode [ 473.723474][T14400] veth1_vlan: entered promiscuous mode [ 473.779506][T14400] veth0_macvtap: entered promiscuous mode [ 473.788585][T14400] veth1_macvtap: entered promiscuous mode [ 473.806515][T14400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.811595][T14400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.849978][T14557] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2039'. [ 473.883961][T14557] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 473.883974][T14557] memcg:ffff88806f03cd82 [ 473.883979][T14557] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 473.883995][T14557] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 473.884004][T14557] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 473.884010][T14557] page dumped because: unmovable page [ 473.884015][T14557] page_owner tracks the page as allocated [ 473.884019][T14557] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 473.884037][T14557] post_alloc_hook+0xfd/0x120 [ 473.884053][T14557] get_page_from_freelist+0x1113/0x35e0 [ 473.884067][T14557] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 473.884081][T14557] alloc_pages_node_noprof+0x93/0x200 [ 473.884095][T14557] ringbuf_map_alloc+0x27e/0x860 [ 473.884105][T14557] map_create+0x874/0x3150 [ 473.884119][T14557] __sys_bpf+0x14cb/0x4b60 [ 473.884129][T14557] __ia32_sys_bpf+0xcc/0x170 [ 473.884139][T14557] __do_fast_syscall_32+0x14b/0x8c0 [ 473.884153][T14557] do_fast_syscall_32+0x32/0x70 [ 473.884166][T14557] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.884179][T14557] page last free pid 37 tgid 37 ts 378355864138 stack trace: [ 473.884186][T14557] __free_frozen_pages+0x7b4/0x1110 ** 226 printk messages dropped ** ** 175 printk messages dropped ** ** 216 printk messages dropped ** ** 212 printk messages dropped ** ** 208 printk messages dropped ** ** 224 printk messages dropped ** ** 217 printk messages dropped ** ** 221 printk messages dropped ** ** 216 printk messages dropped ** ** 224 printk messages dropped ** ** 217 printk messages dropped ** ** 176 printk messages dropped ** ** 11 printk messages dropped ** ** 59 printk messages dropped ** ** 10 printk messages dropped ** [ 474.048988][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.048998][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.084107][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.084117][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.259452][ T5792] svc: failed to register nfsdv3 RPC service (errno 5). [ 474.259463][ T5792] failed to unregister tcp with rpcbind ** 2595 printk messages dropped ** ** 159 printk messages dropped ** ** 171 printk messages dropped ** ** 156 printk messages dropped ** ** 165 printk messages dropped ** ** 169 printk messages dropped ** ** 162 printk messages dropped ** ** 174 printk messages dropped ** ** 384 printk messages dropped ** ** 167 printk messages dropped ** ** 179 printk messages dropped ** ** 168 printk messages dropped ** ** 162 printk messages dropped ** ** 170 printk messages dropped ** ** 164 printk messages dropped ** ** 179 printk messages dropped ** ** 171 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 170 printk messages dropped ** ** 168 printk messages dropped ** ** 164 printk messages dropped ** ** 245 printk messages dropped ** ** 163 printk messages dropped ** ** 180 printk messages dropped ** ** 542 printk messages dropped ** ** 174 printk messages dropped ** ** 178 printk messages dropped ** ** 170 printk messages dropped ** ** 165 printk messages dropped ** ** 168 printk messages dropped ** ** 237 printk messages dropped ** ** 169 printk messages dropped ** ** 168 printk messages dropped ** ** 166 printk messages dropped ** ** 164 printk messages dropped ** ** 177 printk messages dropped ** ** 165 printk messages dropped ** ** 164 printk messages dropped ** ** 168 printk messages dropped ** ** 159 printk messages dropped ** ** 909 printk messages dropped ** ** 171 printk messages dropped ** ** 169 printk messages dropped ** ** 176 printk messages dropped ** ** 173 printk messages dropped ** ** 164 printk messages dropped ** ** 166 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 177 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 165 printk messages dropped ** ** 162 printk messages dropped ** ** 156 printk messages dropped ** ** 171 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 165 printk messages dropped ** ** 179 printk messages dropped ** ** 170 printk messages dropped ** ** 178 printk messages dropped ** ** 173 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 173 printk messages dropped ** ** 165 printk messages dropped ** ** 164 printk messages dropped ** ** 169 printk messages dropped ** ** 172 printk messages dropped ** ** 171 printk messages dropped ** ** 164 printk messages dropped ** ** 168 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 171 printk messages dropped ** ** 160 printk messages dropped ** ** 165 printk messages dropped ** ** 166 printk messages dropped ** ** 177 printk messages dropped ** ** 118 printk messages dropped ** ** 157 printk messages dropped ** ** 169 printk messages dropped ** ** 166 printk messages dropped ** ** 165 printk messages dropped ** ** 170 printk messages dropped ** ** 163 printk messages dropped ** ** 166 printk messages dropped ** ** 446 printk messages dropped ** ** 173 printk messages dropped ** ** 174 printk messages dropped ** ** 165 printk messages dropped ** ** 163 printk messages dropped ** ** 172 printk messages dropped ** ** 167 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 161 printk messages dropped ** ** 165 printk messages dropped ** ** 159 printk messages dropped ** ** 174 printk messages dropped ** ** 162 printk messages dropped ** ** 173 printk messages dropped ** ** 163 printk messages dropped ** ** 222 printk messages dropped ** ** 177 printk messages dropped ** ** 171 printk messages dropped ** ** 164 printk messages dropped ** ** 170 printk messages dropped ** ** 162 printk messages dropped ** ** 156 printk messages dropped ** ** 160 printk messages dropped ** ** 162 printk messages dropped ** ** 163 printk messages dropped ** ** 376 printk messages dropped ** ** 158 printk messages dropped ** ** 165 printk messages dropped ** ** 137 printk messages dropped ** ** 166 printk messages dropped ** ** 172 printk messages dropped ** ** 158 printk messages dropped ** ** 170 printk messages dropped ** ** 283 printk messages dropped ** ** 173 printk messages dropped ** ** 166 printk messages dropped ** ** 174 printk messages dropped ** ** 161 printk messages dropped ** ** 173 printk messages dropped ** ** 165 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 165 printk messages dropped ** ** 167 printk messages dropped ** ** 173 printk messages dropped ** ** 163 printk messages dropped ** ** 172 printk messages dropped ** ** 168 printk messages dropped ** ** 172 printk messages dropped ** ** 161 printk messages dropped ** ** 169 printk messages dropped ** ** 159 printk messages dropped ** ** 167 printk messages dropped ** ** 162 printk messages dropped ** ** 178 printk messages dropped ** ** 163 printk messages dropped ** ** 174 printk messages dropped ** ** 166 printk messages dropped ** ** 163 printk messages dropped ** ** 167 printk messages dropped ** ** 164 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 166 printk messages dropped ** ** 180 printk messages dropped ** ** 170 printk messages dropped ** ** 167 printk messages dropped ** ** 164 printk messages dropped ** ** 175 printk messages dropped ** ** 163 printk messages dropped ** ** 170 printk messages dropped ** ** 165 printk messages dropped ** ** 163 printk messages dropped ** ** 159 printk messages dropped ** ** 181 printk messages dropped ** ** 164 printk messages dropped ** ** 169 printk messages dropped ** ** 18 printk messages dropped ** [ 474.631112][ T5872] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 474.636331][ T5872] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.636354][ T5872] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 474.636383][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.840233][ T5872] qmi_wwan 7-1:1.0: probe with driver qmi_wwan failed with error -22 [ 474.974007][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 475.040967][ T5872] usb 7-1: USB disconnect, device number 75 [ 475.107688][T14596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2049'. [ 475.168652][T14597] fuse: Unknown parameter '0x00000000000000070x0000000000000009' [ 475.172393][T14597] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 475.223168][T14596] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 475.223183][T14596] memcg:ffff88806f03cd82 [ 475.223188][T14596] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 475.223201][T14596] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 475.223211][T14596] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 475.223216][T14596] page dumped because: unmovable page [ 475.223276][T14596] page_owner tracks the page as allocated [ 475.223282][T14596] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 475.223301][T14596] post_alloc_hook+0xfd/0x120 [ 475.223319][T14596] get_page_from_freelist+0x1113/0x35e0 [ 475.223333][T14596] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 475.223348][T14596] alloc_pages_node_noprof+0x93/0x200 [ 475.223362][T14596] ringbuf_map_alloc+0x27e/0x860 [ 475.223372][T14596] map_create+0x874/0x3150 [ 475.223388][T14596] __sys_bpf+0x14cb/0x4b60 [ 475.223397][T14596] __ia32_sys_bpf+0xcc/0x170 [ 475.223408][T14596] __do_fast_syscall_32+0x14b/0x8c0 ** 236 printk messages dropped ** ** 163 printk messages dropped ** ** 170 printk messages dropped ** ** 158 printk messages dropped ** ** 170 printk messages dropped ** ** 160 printk messages dropped ** ** 168 printk messages dropped ** ** 159 printk messages dropped ** ** 169 printk messages dropped ** ** 161 printk messages dropped ** ** 167 printk messages dropped ** ** 160 printk messages dropped ** ** 177 printk messages dropped ** ** 870 printk messages dropped ** ** 173 printk messages dropped ** ** 163 printk messages dropped ** ** 107 printk messages dropped ** ** 163 printk messages dropped ** ** 171 printk messages dropped ** ** 189 printk messages dropped ** ** 174 printk messages dropped ** ** 163 printk messages dropped ** ** 162 printk messages dropped ** ** 167 printk messages dropped ** ** 160 printk messages dropped ** ** 160 printk messages dropped ** ** 170 printk messages dropped ** ** 179 printk messages dropped ** ** 194 printk messages dropped ** ** 161 printk messages dropped ** ** 164 printk messages dropped ** ** 161 printk messages dropped ** ** 172 printk messages dropped ** ** 160 printk messages dropped ** ** 168 printk messages dropped ** ** 165 printk messages dropped ** ** 170 printk messages dropped ** ** 161 printk messages dropped ** ** 170 printk messages dropped ** ** 163 printk messages dropped ** ** 169 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 162 printk messages dropped ** ** 169 printk messages dropped ** ** 158 printk messages dropped ** ** 173 printk messages dropped ** ** 158 printk messages dropped ** ** 173 printk messages dropped ** ** 170 printk messages dropped ** ** 171 printk messages dropped ** ** 130 printk messages dropped ** ** 104 printk messages dropped ** ** 165 printk messages dropped ** ** 128 printk messages dropped ** ** 139 printk messages dropped ** ** 58 printk messages dropped ** ** 2912 printk messages dropped ** ** 2 printk messages dropped ** ** 176 printk messages dropped ** ** 177 printk messages dropped ** ** 188 printk messages dropped ** ** 182 printk messages dropped ** ** 183 printk messages dropped ** ** 171 printk messages dropped ** ** 177 printk messages dropped ** ** 191 printk messages dropped ** ** 173 printk messages dropped ** ** 181 printk messages dropped ** ** 187 printk messages dropped ** ** 188 printk messages dropped ** ** 189 printk messages dropped ** ** 199 printk messages dropped ** ** 195 printk messages dropped ** ** 195 printk messages dropped ** ** 202 printk messages dropped ** ** 194 printk messages dropped ** ** 39 printk messages dropped ** [ 475.517590][T14602] CIFS: VFS: Error connecting to socket. Aborting operation. [ 475.517689][T14602] CIFS: VFS: cifs_mount failed w/return code = -111 [ 475.529589][T14602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.529597][T14602] IPv6: NLM_F_CREATE should be set when creating new route [ 475.529616][T14602] IPv6: NLM_F_CREATE should be set when creating new route [ 475.529627][T14602] IPv6: NLM_F_CREATE should be set when creating new route [ 475.530346][T14602] virt_wifi0 speed is unknown, defaulting to 1000 [ 475.530374][T14602] virt_wifi0 speed is unknown, defaulting to 1000 [ 475.531270][T14602] virt_wifi0 speed is unknown, defaulting to 1000 [ 475.531757][T14602] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 475.531775][T14602] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 475.531798][T14602] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 475.546090][T14602] virt_wifi0 speed is unknown, defaulting to 1000 [ 475.552287][T14602] virt_wifi0 speed is unknown, defaulting to 1000 [ 475.553074][T14602] virt_wifi0 speed is unknown, defaulting to 1000 [ 475.562954][T14602] virt_wifi0 speed is unknown, defaulting to 1000 [ 475.563768][T14602] virt_wifi0 speed is unknown, defaulting to 1000 ** 710 printk messages dropped ** ** 2644 printk messages dropped ** ** 2653 printk messages dropped ** ** 3 printk messages dropped ** ** 2505 printk messages dropped ** ** 2506 printk messages dropped ** ** 2514 printk messages dropped ** ** 2519 printk messages dropped ** ** 2530 printk messages dropped ** ** 1 printk messages dropped ** [ 476.428026][T14636] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2066'. ** 2510 printk messages dropped ** ** 8500 printk messages dropped ** ** 175 printk messages dropped ** ** 172 printk messages dropped ** ** 178 printk messages dropped ** ** 168 printk messages dropped ** ** 174 printk messages dropped ** ** 188 printk messages dropped ** ** 184 printk messages dropped ** ** 174 printk messages dropped ** ** 86 printk messages dropped ** [ 477.066441][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2062'. ** 320 printk messages dropped ** ** 53 printk messages dropped ** ** 443 printk messages dropped ** ** 493 printk messages dropped ** ** 477 printk messages dropped ** ** 515 printk messages dropped ** ** 546 printk messages dropped ** ** 530 printk messages dropped ** ** 497 printk messages dropped ** ** 495 printk messages dropped ** ** 527 printk messages dropped ** ** 593 printk messages dropped ** ** 572 printk messages dropped ** ** 565 printk messages dropped ** ** 580 printk messages dropped ** ** 147 printk messages dropped ** ** 11394 printk messages dropped ** ** 820 printk messages dropped ** ** 587 printk messages dropped ** ** 320 printk messages dropped ** ** 65 printk messages dropped ** ** 406 printk messages dropped ** ** 418 printk messages dropped ** ** 420 printk messages dropped ** ** 414 printk messages dropped ** ** 445 printk messages dropped ** ** 418 printk messages dropped ** ** 434 printk messages dropped ** ** 430 printk messages dropped ** ** 412 printk messages dropped ** ** 399 printk messages dropped ** ** 278 printk messages dropped ** ** 1615 printk messages dropped ** ** 344 printk messages dropped ** ** 981 printk messages dropped ** ** 331 printk messages dropped ** ** 340 printk messages dropped ** ** 422 printk messages dropped ** ** 324 printk messages dropped ** ** 322 printk messages dropped ** ** 332 printk messages dropped ** ** 327 printk messages dropped ** ** 349 printk messages dropped ** ** 332 printk messages dropped ** ** 295 printk messages dropped ** ** 205 printk messages dropped ** ** 332 printk messages dropped ** ** 332 printk messages dropped ** ** 340 printk messages dropped ** ** 360 printk messages dropped ** ** 312 printk messages dropped ** ** 253 printk messages dropped ** ** 243 printk messages dropped ** ** 240 printk messages dropped ** ** 234 printk messages dropped ** ** 241 printk messages dropped ** ** 245 printk messages dropped ** ** 249 printk messages dropped ** ** 270 printk messages dropped ** ** 251 printk messages dropped ** ** 235 printk messages dropped ** ** 251 printk messages dropped ** ** 254 printk messages dropped ** ** 236 printk messages dropped ** ** 258 printk messages dropped ** ** 258 printk messages dropped ** ** 258 printk messages dropped ** ** 173 printk messages dropped ** ** 88 printk messages dropped ** ** 76 printk messages dropped ** ** 90 printk messages dropped ** ** 90 printk messages dropped ** ** 314 printk messages dropped ** ** 119 printk messages dropped ** ** 156 printk messages dropped ** ** 175 printk messages dropped ** ** 162 printk messages dropped ** ** 160 printk messages dropped ** ** 172 printk messages dropped ** ** 167 printk messages dropped ** ** 176 printk messages dropped ** ** 163 printk messages dropped ** ** 169 printk messages dropped ** ** 165 printk messages dropped ** ** 212 printk messages dropped ** ** 233 printk messages dropped ** ** 218 printk messages dropped ** ** 241 printk messages dropped ** ** 220 printk messages dropped ** ** 229 printk messages dropped ** ** 181 printk messages dropped ** ** 169 printk messages dropped ** ** 166 printk messages dropped ** ** 73 printk messages dropped ** ** 7915 printk messages dropped ** ** 192 printk messages dropped ** ** 164 printk messages dropped ** ** 154 printk messages dropped ** ** 170 printk messages dropped ** ** 148 printk messages dropped ** ** 166 printk messages dropped ** ** 161 printk messages dropped ** ** 170 printk messages dropped ** ** 161 printk messages dropped ** ** 173 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 164 printk messages dropped ** ** 174 printk messages dropped ** ** 174 printk messages dropped ** ** 126 printk messages dropped ** ** 103 printk messages dropped ** ** 153 printk messages dropped ** ** 162 printk messages dropped ** ** 169 printk messages dropped ** ** 172 printk messages dropped ** ** 148 printk messages dropped ** ** 174 printk messages dropped ** ** 166 printk messages dropped ** ** 168 printk messages dropped ** ** 169 printk messages dropped ** ** 168 printk messages dropped ** ** 169 printk messages dropped ** ** 179 printk messages dropped ** ** 171 printk messages dropped ** ** 173 printk messages dropped ** ** 154 printk messages dropped ** ** 169 printk messages dropped ** ** 149 printk messages dropped ** ** 169 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 172 printk messages dropped ** ** 165 printk messages dropped ** ** 171 printk messages dropped ** ** 12 printk messages dropped ** ** 24 printk messages dropped ** ** 147 printk messages dropped ** ** 161 printk messages dropped ** ** 174 printk messages dropped ** ** 166 printk messages dropped ** ** 163 printk messages dropped ** ** 157 printk messages dropped ** ** 164 printk messages dropped ** ** 168 printk messages dropped ** ** 159 printk messages dropped ** ** 167 printk messages dropped ** ** 171 printk messages dropped ** ** 169 printk messages dropped ** ** 171 printk messages dropped ** ** 181 printk messages dropped ** ** 172 printk messages dropped ** ** 170 printk messages dropped ** ** 164 printk messages dropped ** ** 171 printk messages dropped ** ** 145 printk messages dropped ** ** 172 printk messages dropped ** ** 165 printk messages dropped ** ** 178 printk messages dropped ** ** 161 printk messages dropped ** ** 173 printk messages dropped ** ** 167 printk messages dropped ** ** 174 printk messages dropped ** ** 167 printk messages dropped ** ** 167 printk messages dropped ** ** 165 printk messages dropped ** ** 163 printk messages dropped ** ** 161 printk messages dropped ** ** 158 printk messages dropped ** ** 156 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 162 printk messages dropped ** ** 157 printk messages dropped ** ** 166 printk messages dropped ** ** 3 printk messages dropped ** [ 477.961005][T14655] FAULT_INJECTION: forcing a failure. [ 477.961005][T14655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.961021][T14655] CPU: 2 UID: 0 PID: 14655 Comm: syz.2.2063 Not tainted syzkaller #0 PREEMPT(full) [ 477.961033][T14655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.961040][T14655] Call Trace: [ 477.961044][T14655] [ 477.961049][T14655] dump_stack_lvl+0x100/0x190 [ 477.961069][T14655] should_fail_ex.cold+0x5/0xa [ 477.961085][T14655] _copy_to_user+0x32/0xd0 [ 477.961102][T14655] simple_read_from_buffer+0xcb/0x170 [ 477.961116][T14655] proc_fail_nth_read+0x1af/0x230 [ 477.961130][T14655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.961144][T14655] ? rw_verify_area+0xce/0x6d0 [ 477.961159][T14655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.961172][T14655] vfs_read+0x1e4/0xb40 [ 477.961183][T14655] ? lock_acquire+0x1d1/0x380 [ 477.961194][T14655] ? __fget_files+0x34/0x3d0 [ 477.961205][T14655] ? __pfx_vfs_read+0x10/0x10 [ 477.961214][T14655] ? find_held_lock+0x2b/0x80 [ 477.961229][T14655] ? __fget_files+0x215/0x3d0 [ 477.961242][T14655] ? __fget_files+0x21f/0x3d0 [ 477.961257][T14655] ksys_read+0x12a/0x250 [ 477.961268][T14655] ? __pfx_ksys_read+0x10/0x10 [ 477.961294][T14655] do_int80_emulation+0x166/0x650 [ 477.961313][T14655] asm_int80_emulation+0x1a/0x20 ** 200 printk messages dropped ** ** 163 printk messages dropped ** ** 167 printk messages dropped ** ** 178 printk messages dropped ** ** 172 printk messages dropped ** ** 195 printk messages dropped ** ** 149 printk messages dropped ** ** 159 printk messages dropped ** ** 157 printk messages dropped ** ** 166 printk messages dropped ** ** 153 printk messages dropped ** ** 28 printk messages dropped ** ** 2 printk messages dropped ** [ 478.024000][T14659] random: crng reseeded on system resumption [ 478.242507][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 478.322242][T14677] FAULT_INJECTION: forcing a failure. [ 478.322242][T14677] name failslab, interval 1, probability 0, space 0, times 0 [ 478.322278][T14677] CPU: 0 UID: 0 PID: 14677 Comm: syz.3.2070 Not tainted syzkaller #0 PREEMPT(full) [ 478.322291][T14677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.322298][T14677] Call Trace: [ 478.322302][T14677] [ 478.322307][T14677] dump_stack_lvl+0x100/0x190 [ 478.322327][T14677] should_fail_ex.cold+0x5/0xa [ 478.322342][T14677] should_failslab+0xc2/0x120 [ 478.322356][T14677] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 478.322373][T14677] ? __alloc_skb+0x5b7/0x710 [ 478.322388][T14677] ? __alloc_skb+0x140/0x710 [ 478.322403][T14677] __alloc_skb+0x140/0x710 [ 478.322416][T14677] ? __alloc_skb+0x5b7/0x710 [ 478.322440][T14677] ? __pfx___alloc_skb+0x10/0x10 [ 478.322456][T14677] ? process_measurement+0x4c8/0x2360 [ 478.322470][T14677] ? down_write+0x141/0x1f0 [ 478.322492][T14677] alloc_skb_with_frags+0xdb/0x750 ** 49 printk messages dropped ** ** 166 printk messages dropped ** ** 168 printk messages dropped ** ** 170 printk messages dropped ** ** 160 printk messages dropped ** ** 162 printk messages dropped ** ** 160 printk messages dropped ** ** 175 printk messages dropped ** ** 153 printk messages dropped ** [ 478.390198][T14679] ima: Unable to open file: / (-22) [ 478.390409][T14678] ima: policy update failed [ 478.390527][ T42] audit: type=1802 audit(1793696514.338:908): pid=14678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2071" res=0 errno=-22 [ 478.529721][T14681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2072'. [ 478.574613][T14681] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77e00 [ 478.574629][T14681] memcg:ffff88806f03cd82 [ 478.574634][T14681] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 478.574648][T14681] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 478.574659][T14681] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88806f03cd82 [ 478.574665][T14681] page dumped because: unmovable page [ 478.574671][T14681] page_owner tracks the page as allocated [ 478.574676][T14681] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 12669, tgid 12666 (syz.2.1536), ts 378373640071 [ 478.574694][T14681] post_alloc_hook+0xfd/0x120 [ 478.574710][T14681] get_page_from_freelist+0x1113/0x35e0 [ 478.574724][T14681] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 478.574738][T14681] alloc_pages_node_noprof+0x93/0x200 [ 478.574755][T14681] ringbuf_map_alloc+0x27e/0x860 [ 478.574769][T14681] map_create+0x874/0x3150 [ 478.574788][T14681] __sys_bpf+0x14cb/0x4b60 [ 478.574801][T14681] __ia32_sys_bpf+0xcc/0x170 [ 478.574817][T14681] __do_fast_syscall_32+0x14b/0x8c0 [ 478.574833][T14681] do_fast_syscall_32+0x32/0x70 [ 478.574847][T14681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.574861][T14681] page last free pid 37 tgid 37 ts 378355864138 stack trace: [ 478.574869][T14681] __free_frozen_pages+0x7b4/0x1110 [ 478.574882][T14681] ringbuf_map_free+0xe0/0x140 [ 478.574893][T14681] bpf_map_free_deferred+0x23e/0x820 [ 478.574909][T14681] process_one_work+0xac7/0x1b10 [ 478.574924][T14681] worker_thread+0x5ef/0xe50 ** 218 printk messages dropped ** ** 162 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 166 printk messages dropped ** ** 168 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 162 printk messages dropped ** ** 163 printk messages dropped ** ** 165 printk messages dropped ** ** 164 printk messages dropped ** ** 165 printk messages dropped ** ** 161 printk messages dropped ** ** 160 printk messages dropped ** [ 478.776637][ T5872] usb 10-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 478.778559][ T5872] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 478.778590][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.798963][T14699] netlink: 'syz.2.2076': attribute type 21 has an invalid length. [ 478.799120][T14699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2076'. [ 479.097965][ T5872] qmi_wwan 10-1:1.0: cdc-wdm0: USB WDM device [ 479.103026][ T5872] wwan wwan0: port wwan0qmi0 attached [ 479.252230][ T5872] qmi_wwan 10-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 76:f9:b7:d7:ac:31 [ 479.453860][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.454230][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.465737][ T42] audit: type=1326 audit(1793696515.418:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14720 comm="syz.2.2081" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 479.465850][ T42] audit: type=1326 audit(1793696515.418:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14720 comm="syz.2.2081" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 479.466664][ T42] audit: type=1326 audit(1793696515.418:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14720 comm="syz.2.2081" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 479.466795][ T42] audit: type=1326 audit(1793696515.418:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14720 comm="syz.2.2081" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf740efbc code=0x7ffc0000 ** 1200 printk messages dropped ** ** 216 printk messages dropped ** ** 209 printk messages dropped ** ** 222 printk messages dropped ** ** 225 printk messages dropped ** ** 145 printk messages dropped ** ** 29 printk messages dropped ** ** 286 printk messages dropped ** ** 216 printk messages dropped ** ** 196 printk messages dropped ** ** 156 printk messages dropped ** ** 206 printk messages dropped ** ** 216 printk messages dropped ** ** 219 printk messages dropped ** ** 228 printk messages dropped ** ** 220 printk messages dropped ** ** 270 printk messages dropped ** ** 235 printk messages dropped ** ** 194 printk messages dropped ** ** 203 printk messages dropped ** ** 206 printk messages dropped ** ** 275 printk messages dropped ** ** 232 printk messages dropped ** ** 46 printk messages dropped ** [ 479.632217][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.632226][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.632420][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.632428][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.632628][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.632636][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.632824][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.632831][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.633052][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.633060][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.633259][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.633267][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.633460][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.633468][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.633660][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.633668][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.633868][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.633875][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.634064][ C0] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 479.634071][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 479.637794][ T5888] usb 10-1: USB disconnect, device number 2 [ 479.637917][ C0] qmi_wwan 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 479.639752][ T5888] qmi_wwan 10-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 479.736976][ T5888] wwan wwan0: port wwan0qmi0 disconnected [ 480.042939][T14734] device-mapper: raid: Choosing default region size of 4MiB [ 480.049665][T14734] device-mapper: table: 248:11: raid: Component device(s) too small (-EINVAL) [ 480.049687][T14734] device-mapper: ioctl: error adding target to table ** 15 printk messages dropped ** ** 246 printk messages dropped ** ** 236 printk messages dropped ** ** 189 printk messages dropped ** ** 206 printk messages dropped ** ** 280 printk messages dropped ** ** 247 printk messages dropped ** ** 93 printk messages dropped ** ** 606 printk messages dropped ** ** 213 printk messages dropped ** ** 182 printk messages dropped ** ** 175 printk messages dropped ** ** 209 printk messages dropped ** ** 161 printk messages dropped ** ** 152 printk messages dropped ** ** 162 printk messages dropped ** ** 158 printk messages dropped ** ** 188 printk messages dropped ** ** 159 printk messages dropped ** ** 159 printk messages dropped ** ** 172 printk messages dropped ** ** 160 printk messages dropped ** ** 158 printk messages dropped ** ** 160 printk messages dropped ** ** 160 printk messages dropped ** ** 161 printk messages dropped ** ** 166 printk messages dropped ** ** 218 printk messages dropped ** ** 229 printk messages dropped ** ** 217 printk messages dropped ** ** 702 printk messages dropped ** ** 162 printk messages dropped ** ** 165 printk messages dropped ** ** 153 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 157 printk messages dropped ** ** 156 printk messages dropped ** ** 161 printk messages dropped ** ** 159 printk messages dropped ** ** 158 printk messages dropped ** ** 173 printk messages dropped ** ** 157 printk messages dropped ** ** 101 printk messages dropped ** ** 6783 printk messages dropped ** ** 28 printk messages dropped ** ** 139 printk messages dropped ** ** 150 printk messages dropped ** ** 168 printk messages dropped ** ** 163 printk messages dropped ** ** 170 printk messages dropped ** ** 168 printk messages dropped ** ** 177 printk messages dropped ** ** 168 printk messages dropped ** ** 173 printk messages dropped ** ** 162 printk messages dropped ** ** 171 printk messages dropped ** ** 167 printk messages dropped ** ** 173 printk messages dropped ** ** 172 printk messages dropped ** ** 172 printk messages dropped ** ** 175 printk messages dropped ** ** 172 printk messages dropped ** ** 159 printk messages dropped ** ** 168 printk messages dropped ** ** 159 printk messages dropped ** ** 172 printk messages dropped ** ** 163 printk messages dropped ** ** 176 printk messages dropped ** ** 165 printk messages dropped ** ** 182 printk messages dropped ** ** 163 printk messages dropped ** ** 173 printk messages dropped ** ** 159 printk messages dropped ** ** 171 printk messages dropped ** ** 163 printk messages dropped ** ** 174 printk messages dropped ** ** 168 printk messages dropped ** ** 171 printk messages dropped ** ** 167 printk messages dropped ** ** 171 printk messages dropped ** ** 165 printk messages dropped ** ** 171 printk messages dropped ** ** 163 printk messages dropped ** ** 173 printk messages dropped ** ** 165 printk messages dropped ** ** 176 printk messages dropped ** ** 164 printk messages dropped ** ** 178 printk messages dropped ** ** 177 printk messages dropped ** ** 16 printk messages dropped ** [ 482.229267][T14763] ublk4: read batch cmd buffer failed [ 482.229315][T14763] ublk4: read batch cmd buffer failed [ 482.272032][T14766] FAULT_INJECTION: forcing a failure. [ 482.272032][T14766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.272049][T14766] CPU: 0 UID: 0 PID: 14766 Comm: syz.5.2091 Not tainted syzkaller #0 PREEMPT(full) [ 482.272061][T14766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 482.272068][T14766] Call Trace: [ 482.272073][T14766] [ 482.272077][T14766] dump_stack_lvl+0x100/0x190 [ 482.272098][T14766] should_fail_ex.cold+0x5/0xa [ 482.272114][T14766] _copy_from_user+0x2e/0xd0 [ 482.272130][T14766] bpf_test_init.isra.0+0xaf/0x100 [ 482.272145][T14766] bpf_prog_test_run_skb+0x48e/0x3550 [ 482.272162][T14766] ? lock_acquire+0x1d1/0x380 [ 482.272173][T14766] ? __fget_files+0x34/0x3d0 [ 482.272186][T14766] ? find_held_lock+0x2b/0x80 [ 482.272200][T14766] ? __fget_files+0x141/0x3d0 [ 482.272215][T14766] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 482.272232][T14766] ? fput+0x7c/0x100 [ 482.272246][T14766] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 482.272261][T14766] __sys_bpf+0x1d13/0x4b60 [ 482.272275][T14766] ? __pfx___sys_bpf+0x10/0x10 [ 482.272285][T14766] ? lock_acquire+0x1d1/0x380 ** 219 printk messages dropped ** ** 148 printk messages dropped ** ** 138 printk messages dropped ** ** 151 printk messages dropped ** ** 146 printk messages dropped ** ** 158 printk messages dropped ** ** 130 printk messages dropped ** ** 100 printk messages dropped ** ** 118 printk messages dropped ** ** 104 printk messages dropped ** ** 97 printk messages dropped ** ** 102 printk messages dropped ** ** 130 printk messages dropped ** ** 115 printk messages dropped ** ** 115 printk messages dropped ** ** 129 printk messages dropped ** ** 154 printk messages dropped ** ** 157 printk messages dropped ** ** 150 printk messages dropped ** ** 137 printk messages dropped ** ** 119 printk messages dropped ** ** 138 printk messages dropped ** ** 146 printk messages dropped ** ** 99 printk messages dropped ** ** 208 printk messages dropped ** ** 95 printk messages dropped ** ** 137 printk messages dropped ** ** 119 printk messages dropped ** ** 252 printk messages dropped ** ** 279 printk messages dropped ** ** 271 printk messages dropped ** ** 287 printk messages dropped ** ** 294 printk messages dropped ** ** 297 printk messages dropped ** ** 280 printk messages dropped ** ** 258 printk messages dropped ** ** 320 printk messages dropped ** ** 308 printk messages dropped ** ** 276 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 160 printk messages dropped ** ** 155 printk messages dropped ** ** 167 printk messages dropped ** ** 160 printk messages dropped ** ** 159 printk messages dropped ** ** 157 printk messages dropped ** ** 164 printk messages dropped ** ** 158 printk messages dropped ** ** 173 printk messages dropped ** ** 154 printk messages dropped ** ** 167 printk messages dropped ** ** 167 printk messages dropped ** ** 175 printk messages dropped ** ** 172 printk messages dropped ** ** 170 printk messages dropped ** ** 189 printk messages dropped ** ** 159 printk messages dropped ** ** 165 printk messages dropped ** ** 175 printk messages dropped ** ** 172 printk messages dropped ** ** 168 printk messages dropped ** ** 175 printk messages dropped ** ** 168 printk messages dropped ** ** 172 printk messages dropped ** ** 166 printk messages dropped ** ** 176 printk messages dropped ** ** 163 printk messages dropped ** ** 180 printk messages dropped ** ** 135 printk messages dropped ** [ 482.506044][T14769] svc: failed to register lockdv1 RPC service (errno 5). [ 482.573851][ T5945] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 482.579526][ T5945] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.579594][ T5945] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.579624][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.586191][ T5945] option 7-1:1.0: GSM modem (1-port) converter detected [ 482.590652][ T5945] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 483.206345][T14769] svc: failed to register nfsdv3 RPC service (errno 5). [ 483.206356][T14769] failed to unregister tcp with rpcbind ** 11098 printk messages dropped ** ** 191 printk messages dropped ** ** 151 printk messages dropped ** ** 143 printk messages dropped ** ** 164 printk messages dropped ** ** 151 printk messages dropped ** ** 147 printk messages dropped ** ** 467 printk messages dropped ** ** 147 printk messages dropped ** ** 150 printk messages dropped ** ** 136 printk messages dropped ** ** 217 printk messages dropped ** ** 417 printk messages dropped ** ** 342 printk messages dropped ** ** 318 printk messages dropped ** ** 348 printk messages dropped ** ** 329 printk messages dropped ** ** 328 printk messages dropped ** ** 314 printk messages dropped ** ** 323 printk messages dropped ** ** 304 printk messages dropped ** ** 316 printk messages dropped ** ** 316 printk messages dropped ** ** 321 printk messages dropped ** ** 324 printk messages dropped ** ** 328 printk messages dropped ** ** 319 printk messages dropped ** ** 328 printk messages dropped ** ** 314 printk messages dropped ** ** 314 printk messages dropped ** ** 172 printk messages dropped ** ** 292 printk messages dropped ** ** 286 printk messages dropped ** ** 308 printk messages dropped ** ** 380 printk messages dropped ** ** 320 printk messages dropped ** ** 335 printk messages dropped ** ** 316 printk messages dropped ** ** 338 printk messages dropped ** ** 297 printk messages dropped ** ** 382 printk messages dropped ** ** 404 printk messages dropped ** ** 355 printk messages dropped ** ** 335 printk messages dropped ** ** 334 printk messages dropped ** ** 316 printk messages dropped ** ** 360 printk messages dropped ** ** 320 printk messages dropped ** ** 330 printk messages dropped ** ** 318 printk messages dropped ** ** 321 printk messages dropped ** ** 323 printk messages dropped ** ** 345 printk messages dropped ** ** 319 printk messages dropped ** ** 311 printk messages dropped ** ** 176 printk messages dropped ** ** 159 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 162 printk messages dropped ** ** 170 printk messages dropped ** ** 153 printk messages dropped ** ** 159 printk messages dropped ** ** 159 printk messages dropped ** ** 190 printk messages dropped ** ** 166 printk messages dropped ** ** 159 printk messages dropped ** ** 155 printk messages dropped ** ** 161 printk messages dropped ** ** 154 printk messages dropped ** ** 166 printk messages dropped ** ** 154 printk messages dropped ** ** 161 printk messages dropped ** ** 161 printk messages dropped ** ** 155 printk messages dropped ** ** 159 printk messages dropped ** ** 25 printk messages dropped ** ** 151 printk messages dropped ** ** 148 printk messages dropped ** ** 155 printk messages dropped ** ** 177 printk messages dropped ** ** 167 printk messages dropped ** ** 229 printk messages dropped ** ** 201 printk messages dropped ** ** 166 printk messages dropped ** ** 146 printk messages dropped ** ** 157 printk messages dropped ** ** 151 printk messages dropped ** ** 161 printk messages dropped ** ** 155 printk messages dropped ** ** 156 printk messages dropped ** ** 165 printk messages dropped ** ** 163 printk messages dropped ** ** 154 printk messages dropped ** ** 157 printk messages dropped ** ** 169 printk messages dropped ** ** 154 printk messages dropped ** ** 156 printk messages dropped ** ** 172 printk messages dropped ** ** 149 printk messages dropped ** ** 162 printk messages dropped ** ** 177 printk messages dropped ** ** 162 printk messages dropped ** ** 173 printk messages dropped ** ** 169 printk messages dropped ** ** 170 printk messages dropped ** ** 166 printk messages dropped ** ** 179 printk messages dropped ** ** 166 printk messages dropped ** ** 174 printk messages dropped ** ** 205 printk messages dropped ** ** 222 printk messages dropped ** ** 167 printk messages dropped ** ** 168 printk messages dropped ** ** 163 printk messages dropped ** ** 169 printk messages dropped ** ** 189 printk messages dropped ** ** 249 printk messages dropped ** ** 271 printk messages dropped ** ** 218 printk messages dropped ** ** 202 printk messages dropped ** ** 231 printk messages dropped ** ** 161 printk messages dropped ** ** 116 printk messages dropped ** ** 192 printk messages dropped ** ** 226 printk messages dropped ** ** 199 printk messages dropped ** ** 254 printk messages dropped ** ** 248 printk messages dropped ** ** 264 printk messages dropped ** ** 260 printk messages dropped ** ** 250 printk messages dropped ** ** 325 printk messages dropped ** ** 316 printk messages dropped ** ** 255 printk messages dropped ** ** 274 printk messages dropped ** ** 262 printk messages dropped ** ** 267 printk messages dropped ** ** 264 printk messages dropped ** ** 277 printk messages dropped ** ** 234 printk messages dropped ** ** 272 printk messages dropped ** ** 276 printk messages dropped ** ** 279 printk messages dropped ** ** 260 printk messages dropped ** ** 273 printk messages dropped ** ** 274 printk messages dropped ** ** 294 printk messages dropped ** ** 317 printk messages dropped ** ** 336 printk messages dropped ** ** 335 printk messages dropped ** ** 356 printk messages dropped ** ** 328 printk messages dropped ** ** 339 printk messages dropped ** ** 320 printk messages dropped ** ** 353 printk messages dropped ** ** 338 printk messages dropped ** ** 341 printk messages dropped ** ** 334 printk messages dropped ** ** 337 printk messages dropped ** ** 344 printk messages dropped ** ** 351 printk messages dropped ** ** 337 printk messages dropped ** ** 352 printk messages dropped ** ** 331 printk messages dropped ** ** 347 printk messages dropped ** ** 322 printk messages dropped ** ** 326 printk messages dropped ** ** 329 printk messages dropped ** ** 344 printk messages dropped ** ** 270 printk messages dropped ** ** 8 printk messages dropped ** ** 233 printk messages dropped ** ** 244 printk messages dropped ** ** 241 printk messages dropped ** ** 239 printk messages dropped ** ** 247 printk messages dropped ** ** 236 printk messages dropped ** ** 146 printk messages dropped ** ** 2 printk messages dropped ** ** 170 printk messages dropped ** ** 171 printk messages dropped ** ** 166 printk messages dropped ** ** 164 printk messages dropped ** ** 158 printk messages dropped ** ** 156 printk messages dropped ** ** 158 printk messages dropped ** ** 163 printk messages dropped ** ** 49 printk messages dropped ** ** 2507 printk messages dropped ** ** 2553 printk messages dropped ** ** 2505 printk messages dropped ** ** 2514 printk messages dropped ** ** 110 printk messages dropped ** ** 469 printk messages dropped ** ** 364 printk messages dropped ** ** 351 printk messages dropped ** ** 347 printk messages dropped ** ** 309 printk messages dropped ** ** 343 printk messages dropped ** ** 316 printk messages dropped ** ** 323 printk messages dropped ** ** 401 printk messages dropped ** ** 416 printk messages dropped ** ** 298 printk messages dropped ** ** 321 printk messages dropped ** ** 328 printk messages dropped ** ** 355 printk messages dropped ** ** 325 printk messages dropped ** ** 318 printk messages dropped ** ** 336 printk messages dropped ** ** 345 printk messages dropped ** ** 328 printk messages dropped ** ** 458 printk messages dropped ** ** 374 printk messages dropped ** ** 218 printk messages dropped ** ** 204 printk messages dropped ** ** 165 printk messages dropped ** ** 189 printk messages dropped ** ** 175 printk messages dropped ** ** 179 printk messages dropped ** ** 76 printk messages dropped ** [ 484.820160][T14793] rxe_eth0 speed is unknown, defaulting to 1000 [ 484.838718][T14794] input: syz0 as /devices/virtual/input/input47 [ 484.896591][ T5797] usb 7-1: USB disconnect, device number 76 [ 484.904915][ T5797] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 484.905332][ T5797] option 7-1:1.0: device disconnected [ 485.002421][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 485.002433][T14794] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2098'. [ 485.101708][T14793] virt_wifi0 speed is unknown, defaulting to 1000 ** 11395 printk messages dropped ** ** 295 printk messages dropped ** ** 267 printk messages dropped ** ** 341 printk messages dropped ** ** 325 printk messages dropped ** ** 374 printk messages dropped ** ** 288 printk messages dropped ** ** 236 printk messages dropped ** ** 235 printk messages dropped ** ** 302 printk messages dropped ** ** 166 printk messages dropped ** ** 166 printk messages dropped ** ** 149 printk messages dropped ** ** 166 printk messages dropped ** ** 154 printk messages dropped ** ** 95 printk messages dropped ** ** 151 printk messages dropped ** ** 167 printk messages dropped ** ** 164 printk messages dropped ** ** 168 printk messages dropped ** ** 100 printk messages dropped ** [ 485.373960][T14799] FAULT_INJECTION: forcing a failure. [ 485.373960][T14799] name failslab, interval 1, probability 0, space 0, times 0 [ 485.373978][T14799] CPU: 2 UID: 0 PID: 14799 Comm: syz.2.2100 Not tainted syzkaller #0 PREEMPT(full) [ 485.373990][T14799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.373996][T14799] Call Trace: [ 485.374001][T14799] [ 485.374005][T14799] dump_stack_lvl+0x100/0x190 [ 485.374026][T14799] should_fail_ex.cold+0x5/0xa [ 485.374043][T14799] should_failslab+0xc2/0x120 [ 485.374055][T14799] __kmalloc_node_track_caller_noprof+0xfa/0x870 ** 194 printk messages dropped ** ** 149 printk messages dropped ** ** 147 printk messages dropped ** ** 148 printk messages dropped ** ** 150 printk messages dropped ** ** 151 printk messages dropped ** ** 131 printk messages dropped ** ** 88 printk messages dropped ** ** 138 printk messages dropped ** ** 147 printk messages dropped ** ** 146 printk messages dropped ** ** 144 printk messages dropped ** ** 148 printk messages dropped ** ** 145 printk messages dropped ** ** 150 printk messages dropped ** ** 150 printk messages dropped ** ** 57 printk messages dropped ** [ 485.698066][T14807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.954831][T14806] libceph: resolve 'c' (ret=-3): failed ** 3797 printk messages dropped ** ** 474 printk messages dropped ** ** 385 printk messages dropped ** ** 197 printk messages dropped ** ** 199 printk messages dropped ** ** 204 printk messages dropped ** ** 197 printk messages dropped ** ** 194 printk messages dropped ** ** 148 printk messages dropped ** ** 245 printk messages dropped ** ** 198 printk messages dropped ** ** 252 printk messages dropped ** ** 203 printk messages dropped ** ** 196 printk messages dropped ** ** 202 printk messages dropped ** ** 265 printk messages dropped ** ** 263 printk messages dropped ** ** 283 printk messages dropped ** ** 340 printk messages dropped ** ** 369 printk messages dropped ** ** 327 printk messages dropped ** ** 351 printk messages dropped ** ** 367 printk messages dropped ** ** 388 printk messages dropped ** ** 374 printk messages dropped ** ** 366 printk messages dropped ** ** 370 printk messages dropped ** ** 370 printk messages dropped ** ** 376 printk messages dropped ** ** 655 printk messages dropped ** ** 306 printk messages dropped ** ** 344 printk messages dropped ** ** 344 printk messages dropped ** ** 380 printk messages dropped ** ** 283 printk messages dropped ** ** 295 printk messages dropped ** ** 347 printk messages dropped ** ** 357 printk messages dropped ** ** 351 printk messages dropped ** ** 342 printk messages dropped ** ** 374 printk messages dropped ** ** 431 printk messages dropped ** ** 525 printk messages dropped ** ** 366 printk messages dropped ** ** 180 printk messages dropped ** ** 148 printk messages dropped ** ** 145 printk messages dropped ** ** 156 printk messages dropped ** ** 139 printk messages dropped ** ** 147 printk messages dropped ** ** 245 printk messages dropped ** ** 208 printk messages dropped ** ** 180 printk messages dropped ** ** 155 printk messages dropped ** ** 186 printk messages dropped ** ** 241 printk messages dropped ** ** 208 printk messages dropped ** ** 234 printk messages dropped ** ** 206 printk messages dropped ** ** 209 printk messages dropped ** ** 205 printk messages dropped ** ** 196 printk messages dropped ** ** 200 printk messages dropped ** ** 245 printk messages dropped ** ** 205 printk messages dropped ** ** 149 printk messages dropped ** ** 149 printk messages dropped ** ** 156 printk messages dropped ** ** 208 printk messages dropped ** ** 344 printk messages dropped ** ** 324 printk messages dropped ** ** 426 printk messages dropped ** ** 459 printk messages dropped ** ** 494 printk messages dropped ** ** 451 printk messages dropped ** ** 456 printk messages dropped ** ** 465 printk messages dropped ** ** 462 printk messages dropped ** ** 465 printk messages dropped ** ** 464 printk messages dropped ** ** 459 printk messages dropped ** ** 450 printk messages dropped ** ** 466 printk messages dropped ** ** 446 printk messages dropped ** ** 461 printk messages dropped ** ** 501 printk messages dropped ** ** 447 printk messages dropped ** ** 444 printk messages dropped ** ** 454 printk messages dropped ** ** 458 printk messages dropped ** ** 453 printk messages dropped ** ** 461 printk messages dropped ** ** 458 printk messages dropped ** ** 387 printk messages dropped ** ** 368 printk messages dropped ** ** 343 printk messages dropped ** ** 182 printk messages dropped ** ** 184 printk messages dropped ** ** 211 printk messages dropped ** ** 225 printk messages dropped ** ** 90 printk messages dropped ** [ 486.740968][ T1166] Modules linked in: [ 486.745261][ T1166] [ 486.748016][ T1166] CPU: 3 UID: 0 PID: 1166 Comm: kworker/u33:12 Not tainted syzkaller #0 PREEMPT(full) [ 486.758589][ T1166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.763837][ T1166] Workqueue: iou_exit io_ring_exit_work [ 486.769508][ T1166] [ 486.771100][ T1166] RIP: 0010:io_sq_thread_stop+0x18b/0x1c0 [ 486.774942][ T1166] Code: 48 c7 c2 00 cd 80 8c be 25 00 00 00 48 c7 c7 60 cd 80 8c c6 05 59 58 22 0d 01 e8 60 36 b8 fc e9 12 ff ff ff e8 86 9f dd fc 90 <0f> 0b 90 e9 c8 fe ff ff e8 78 9f dd fc 90 0f 0b 90 e9 3c ff ff ff [ 486.787756][ T1166] RSP: 0018:ffffc90006d67a28 EFLAGS: 00010293 [ 486.791686][ T1166] [ 486.792808][ T1166] RAX: 0000000000000000 RBX: ffff888057226c00 RCX: 0000000000000000 [ 486.795976][ T1166] RDX: ffff8880004aa580 RSI: ffffffff8530067a RDI: 0000000000000001 [ 486.798459][ T1166] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 486.802972][ T1166] R10: ffff888057226d1f R11: 0000000000000000 R12: ffff888057226d18 [ 486.813062][ T1166] R13: 0000000000000000 R14: ffff888044a704e0 R15: ffff8880572267c0 [ 486.818352][ T1166] FS: 0000000000000000(0000) GS:ffff888095581000(0000) knlGS:0000000000000000 [ 486.824007][ T1166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.828593][ T1166] CR2: 000000000c3ea2b4 CR3: 0000000027cd3000 CR4: 0000000000352ef0 [ 486.832829][ T1166] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 486.836841][ T1166] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 486.840776][ T1166] Call Trace: [ 486.842496][ T1166] [ 486.843997][ T1166] io_put_sq_data+0xb0/0x100 [ 486.846395][ T1166] io_sq_thread_finish+0x252/0x320 [ 486.848957][ T1166] io_ring_exit_work+0x40a/0x9f5 [ 486.851448][ T1166] ? __pfx_io_ring_exit_work+0x10/0x10 [ 486.853623][ T1166] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 486.855379][ T1166] ? process_one_work+0x906/0x1b10 [ 486.857019][ T1166] ? process_one_work+0x906/0x1b10 [ 486.858635][ T1166] process_one_work+0xac7/0x1b10 [ 486.860203][ T1166] ? __pfx_process_one_work+0x10/0x10 [ 486.861916][ T1166] ? lock_acquire+0x1d1/0x380 [ 486.863411][ T1166] ? __pfx_io_ring_exit_work+0x10/0x10 [ 486.865173][ T1166] worker_thread+0x5ef/0xe50 [ 486.866650][ T1166] ? kthread+0x13a/0x450 [ 486.867992][ T1166] ? __pfx_worker_thread+0x10/0x10 [ 486.869598][ T1166] kthread+0x373/0x450 [ 486.870905][ T1166] ? __pfx_kthread+0x10/0x10 [ 486.872375][ T1166] ret_from_fork+0x730/0xd60 [ 486.873840][ T1166] ? __pfx_ret_from_fork+0x10/0x10 [ 486.875510][ T1166] ? __switch_to+0x800/0x10e0 [ 486.877104][ T1166] ? __pfx_kthread+0x10/0x10 [ 486.878953][ T1166] ret_from_fork_asm+0x1a/0x30 [ 486.880891][ T1166] [ 486.882164][T14214] 842_compress: add hash index2 d3 pos 1a0 data ee18 [ 486.882173][ T1166] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.886538][ T1166] CPU: 3 UID: 0 PID: 1166 Comm: kworker/u33:12 Not tainted syzkaller #0 PREEMPT(full) [ 486.890341][ T1166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.894278][ T1166] Workqueue: iou_exit io_ring_exit_work [ 486.896445][ T1166] Call Trace: [ 486.897776][ T1166] [ 486.898947][ T1166] dump_stack_lvl+0x100/0x190 [ 486.900794][ T1166] vpanic+0x2dc/0x6f8 [ 486.902410][ T1166] panic+0xd1/0xe0 [ 486.903897][ T1166] ? __pfx_panic+0x10/0x10 [ 486.905656][ T1166] check_panic_on_warn.cold+0x19/0x34 [ 486.907755][ T1166] ? io_sq_thread_stop+0x18b/0x1c0 [ 486.909764][ T1166] __warn.cold+0x191/0x321 [ 486.911532][ T1166] __report_bug+0x30f/0x440 [ 486.913324][ T1166] ? io_sq_thread_stop+0x18b/0x1c0 [ 486.915351][ T1166] ? __pfx___report_bug+0x10/0x10 [ 486.917330][ T1166] ? rcu_is_watching+0x13/0xc0 [ 486.919238][ T1166] ? __lock_acquire+0x5c0/0x1f40 [ 486.921189][ T1166] ? io_sq_thread_stop+0x18b/0x1c0 [ 486.923233][ T1166] report_bug+0xb3/0x220 [ 486.924905][ T1166] ? io_sq_thread_stop+0x18b/0x1c0 [ 486.926914][ T1166] handle_bug+0x16a/0x2a0 [ 486.928611][ T1166] exc_invalid_op+0x17/0x50 [ 486.930405][ T1166] asm_exc_invalid_op+0x1a/0x20 [ 486.932313][ T1166] RIP: 0010:io_sq_thread_stop+0x18b/0x1c0 [ 486.934553][ T1166] Code: 48 c7 c2 00 cd 80 8c be 25 00 00 00 48 c7 c7 60 cd 80 8c c6 05 59 58 22 0d 01 e8 60 36 b8 fc e9 12 ff ff ff e8 86 9f dd fc 90 <0f> 0b 90 e9 c8 fe ff ff e8 78 9f dd fc 90 0f 0b 90 e9 3c ff ff ff [ 486.942028][ T1166] RSP: 0018:ffffc90006d67a28 EFLAGS: 00010293 [ 486.944622][ T1166] RAX: 0000000000000000 RBX: ffff888057226c00 RCX: 0000000000000000 [ 486.947697][ T1166] RDX: ffff8880004aa580 RSI: ffffffff8530067a RDI: 0000000000000001 [ 486.950803][ T1166] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 486.953873][ T1166] R10: ffff888057226d1f R11: 0000000000000000 R12: ffff888057226d18 [ 486.956951][ T1166] R13: 0000000000000000 R14: ffff888044a704e0 R15: ffff8880572267c0 [ 486.960326][ T1166] ? io_sq_thread_stop+0x18a/0x1c0 [ 486.962376][ T1166] ? io_sq_thread_stop+0x18a/0x1c0 [ 486.964377][ T1166] io_put_sq_data+0xb0/0x100 [ 486.966201][ T1166] io_sq_thread_finish+0x252/0x320 [ 486.968228][ T1166] io_ring_exit_work+0x40a/0x9f5 [ 486.970173][ T1166] ? __pfx_io_ring_exit_work+0x10/0x10 [ 486.972339][ T1166] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 486.974419][ T1166] ? process_one_work+0x906/0x1b10 [ 486.976420][ T1166] ? process_one_work+0x906/0x1b10 [ 486.978440][ T1166] process_one_work+0xac7/0x1b10 [ 486.980401][ T1166] ? __pfx_process_one_work+0x10/0x10 [ 486.982541][ T1166] ? lock_acquire+0x1d1/0x380 [ 486.984395][ T1166] ? __pfx_io_ring_exit_work+0x10/0x10 [ 486.986527][ T1166] worker_thread+0x5ef/0xe50 [ 486.988356][ T1166] ? kthread+0x13a/0x450 [ 486.990031][ T1166] ? __pfx_worker_thread+0x10/0x10 [ 486.992060][ T1166] kthread+0x373/0x450 [ 486.993667][ T1166] ? __pfx_kthread+0x10/0x10 [ 486.995500][ T1166] ret_from_fork+0x730/0xd60 [ 486.997326][ T1166] ? __pfx_ret_from_fork+0x10/0x10 [ 486.999335][ T1166] ? __switch_to+0x800/0x10e0 [ 487.001188][ T1166] ? __pfx_kthread+0x10/0x10 [ 487.003042][ T1166] ret_from_fork_asm+0x1a/0x30 [ 487.004931][ T1166] [ 487.006791][ T1166] Kernel Offset: disabled [ 487.008474][ T1166] Rebooting in 86400 seconds..