last executing test programs: 6m46.937237294s ago: executing program 0 (id=207): fsopen(&(0x7f0000000600)='nilfs2\x00', 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @loopback, 0x7}, 0xfffffffffffffd70) shutdown(r0, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x89a, @local, 0x9}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="400100001000130726bd000000000000ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe88000000000000000000000000fe010000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000b000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000007000000000000000200000000000000f8ffffff7fffffff0c000000000000000200000029bd700000000000020004000000000048000100626c616b6532732d3232342d61726d"], 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x4840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r6, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x5) 6m45.975736588s ago: executing program 0 (id=210): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) 6m43.156420395s ago: executing program 1 (id=223): syz_open_dev$hiddev(0x0, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x1b, 0x1, 0x0, 0x1, [@generic="7d88a116a3bf647d6dfcc76cceac143493251ce847ff23"]}, @typed={0x8, 0x2, 0x0, 0x0, @binary='b\tRD'}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 6m43.155696274s ago: executing program 1 (id=224): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102"], 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x80042, 0x0) ioctl$COMEDI_SETRSUBD(r0, 0x6410) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0x3c0, 0x10, 0x10000, 0x240004, 0x14000000, 0x3cffd, 0xfffffffc, 0x2f00, 0x3, 0x3, 0x3, 0x10000, 0x400, 0x0, 0x13, 0x100, 0xffffffa3, 0x5, 0x7, 0x1, 0xa2, 0x42, 0x8f, 0x10000be, 0xaa14, 0xfffffff2, 0x6, 0x8000000, 0x7, 0x3, 0xb0f]}) 6m42.984955198s ago: executing program 0 (id=226): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x9, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) open(&(0x7f0000000100)='./bus\x00', 0xe4a40, 0x10) mkdir(0x0, 0x13b) socket(0x10, 0x3, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x9640, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000540)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff030000200000000008000000000000000400000000000000080000000000000088bc000009000000040000000000000005000000000000000500000000000000060000000000000003000000000000002e010000000000000700000008000000fafffff700c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="800000000800000000000000ffffffffffdfffff0104fc0e38c900000000000006000000080010089eaf82a7"], 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, 0x0, &(0x7f0000000140)) timer_create(0x0, 0x0, 0x0) 6m42.039759045s ago: executing program 0 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffff9c, &(0x7f0000000340), 0x2c2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/../file0\x00'}) lremovexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@random={'btrfs.', ')\x00'}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10, 0x80000) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) getsockname(r1, &(0x7f0000000180)=@hci, &(0x7f0000000280)=0x80) close(r2) 6m41.964832657s ago: executing program 0 (id=234): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) 6m41.666930741s ago: executing program 0 (id=235): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') socket$inet6_udp(0xa, 0x2, 0x0) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x8001, {0x0, 0x1}, {0x46, 0xffff}, @period={0x5b, 0x7, 0x2, 0x6, 0x3ff, {0xf29e, 0x9, 0x3, 0x1}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000014, 0x1, 0x0, 0x9, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x6, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @multicast2, @remote}, {0x12, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sched_getattr(0x0, &(0x7f00000002c0)={0x38}, 0x38, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 6m41.637882233s ago: executing program 32 (id=235): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') socket$inet6_udp(0xa, 0x2, 0x0) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x8001, {0x0, 0x1}, {0x46, 0xffff}, @period={0x5b, 0x7, 0x2, 0x6, 0x3ff, {0xf29e, 0x9, 0x3, 0x1}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000014, 0x1, 0x0, 0x9, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x6, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @multicast2, @remote}, {0x12, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sched_getattr(0x0, &(0x7f00000002c0)={0x38}, 0x38, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 6m39.616870232s ago: executing program 1 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000000800000090000000800000000000000a05f0e0f527c32e498c2f5670d490935e14d5e89c4be5bb9b08056306d201cf42ff21af068466a1315ee6085", @ANYRES32, @ANYBLOB="f900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r0, 0xfffffe38, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2, @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000600300000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80003, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)='4(', 0x2}], 0x1}, 0x20000011) recvmsg(r4, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) socket(0x10, 0x3, 0xd) socket$inet6(0xa, 0x1, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080), 0x1, 0x20080) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000002200)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0xa1, 0x5, 0x0, 0x80000000], 0x3, 0x0, 0x0, [{}, {}, {}]}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) 6m39.474629723s ago: executing program 1 (id=241): openat$kvm(0xffffffffffffff9c, 0x0, 0xc2180, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0xffffffffffffffff, 0x7ee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000440)=0xc) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x4000000000097, 0x163700) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r5, 0x788b, 0x84b, 0x68, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x20, 0x15, 0x87}}}}}]}}]}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0xffffffff}, 0x10) 6m37.906805025s ago: executing program 1 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x14, r1, 0x905, 0x70bd2a, 0x0, {0x24}}, 0x14}}, 0x4) 6m37.357667676s ago: executing program 1 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000000800000090000000800000000000000a05f0e0f527c32e498c2f5670d490935e14d5e89c4be5bb9b08056306d201cf42ff21af068466a1315ee6085", @ANYRES32, @ANYBLOB="f900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r0, 0xfffffe38, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2, @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000600300000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80003, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)='4(', 0x2}], 0x1}, 0x20000011) recvmsg(r4, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) socket(0x10, 0x3, 0xd) socket$inet6(0xa, 0x1, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080), 0x1, 0x20080) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000002200)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0xa1, 0x5, 0x0, 0x80000000], 0x3, 0x0, 0x0, [{}, {}, {}]}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) 6m37.263362997s ago: executing program 33 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000000800000090000000800000000000000a05f0e0f527c32e498c2f5670d490935e14d5e89c4be5bb9b08056306d201cf42ff21af068466a1315ee6085", @ANYRES32, @ANYBLOB="f900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r0, 0xfffffe38, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2, @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000600300000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80003, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)='4(', 0x2}], 0x1}, 0x20000011) recvmsg(r4, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) socket(0x10, 0x3, 0xd) socket$inet6(0xa, 0x1, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080), 0x1, 0x20080) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000002200)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0xa1, 0x5, 0x0, 0x80000000], 0x3, 0x0, 0x0, [{}, {}, {}]}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) 6m1.335043636s ago: executing program 2 (id=541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = fsopen(&(0x7f0000000240)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x9}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0xc}, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="3df974a52f545d667dfab50813087f4e5a87aa92", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="a0fe46908d8380bf7e1aca1add509c34ed7715bf6ef680dd69baf5ba79bb93c2e29851dd98", 0x25}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000000000000100000007000000100000000000000002000000040000000d00000000000000010000002a0000000c00000000000000070000000c0000000000000007000000180000000000000008000000d29e20fa2a5c1316c7955b90ee3e9fd8696c656f76457f1ef0b263a1a4c85bcca77de619f957ca83efb17b52cad1dd326681f4ef003b7d279fb11a29a0", @ANYRES32=0x0, @ANYBLOB="ffffffffe0000001"], 0x60}}], 0x2, 0x24040014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 6m1.334111742s ago: executing program 2 (id=542): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x350c, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x7, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_emit_ethernet(0x26, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa281d8e17f06817b7606286aaaa0801080006040000ba1aed2bd9cae0000001ffffff7c7f40494764ffffff640101010000"], 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0xe, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) ioctl$KDSIGACCEPT(r0, 0x5607, 0x16) keyctl$KEYCTL_RESTRICT_KEYRING(0x1f, 0x0, &(0x7f00000000c0)='asymmetric\x00', 0x0) ioctl$KDSIGACCEPT(r0, 0x5607, 0x15) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x3, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r7, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@llc={0x1a, 0x312, 0x5, 0x5, 0xb, 0xf, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="6dec37a2890c644c3d61", 0xa}, {&(0x7f0000000180)="ce7b20ee8ba74eb14a341980e14d614689df303d1329294cb16910ba2fedd799ce3e26cac475af80a8a6e8f03f8142e87ebacd04db76863ec4d72d60b9d4b904ec9c96e15e198ef5fba5facb4a861d0875d1ba15", 0x54}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="377057c7f8c2cb161f62dc52846a7f3a2c3c5e24b5e0b3e8", 0x18}], 0x4}, 0x26004814) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='./file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="64003300808c02000802110000000802110000005050505050505cc41200c041d6f7000000000000640040100016f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7010303810304060806c60e0400060203233c044af3c4ff71070001000002f320"], 0x80}, 0x1, 0x0, 0x0, 0x20000085}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 6m0.42906997s ago: executing program 2 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, 0x27, 0x1, 0x0, 0x0, {0xc}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xb, 0x2, 0x0, 0x0, @str='client\x00'}]}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x103, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r4}) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, &(0x7f0000000040)) 6m0.42266407s ago: executing program 2 (id=551): write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 6m0.318432714s ago: executing program 2 (id=554): r0 = memfd_secret(0x80000) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba", @ANYRES32=0x0, @ANYBLOB="80000200e1800000"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x4) write(r7, &(0x7f0000000000)='3', 0x4e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x8800) sendmsg$inet_sctp(r1, &(0x7f0000000640)={&(0x7f0000000680)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x15) 6m0.205713174s ago: executing program 2 (id=556): socket(0x18, 0x3, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000680)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pivot_root(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000600)=""/19, &(0x7f0000000640)=0x13) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_usb_connect(0x3, 0x219, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0xb5c, &(0x7f0000000400)={0x0, 0x5350, 0x1000, 0x3, 0x1a1, 0x0, r8}, &(0x7f0000000540), 0x0, 0x0) mq_open(&(0x7f0000000580)='$&\x00', 0x2, 0x171, &(0x7f00000005c0)={0x2, 0x1, 0x4, 0x4008000}) r9 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x401, 0x0) r10 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CDROM_SET_OPTIONS(r10, 0x5320, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5m44.7489281s ago: executing program 34 (id=556): socket(0x18, 0x3, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000680)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pivot_root(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000600)=""/19, &(0x7f0000000640)=0x13) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_usb_connect(0x3, 0x219, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0xb5c, &(0x7f0000000400)={0x0, 0x5350, 0x1000, 0x3, 0x1a1, 0x0, r8}, &(0x7f0000000540), 0x0, 0x0) mq_open(&(0x7f0000000580)='$&\x00', 0x2, 0x171, &(0x7f00000005c0)={0x2, 0x1, 0x4, 0x4008000}) r9 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x401, 0x0) r10 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CDROM_SET_OPTIONS(r10, 0x5320, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m33.164844556s ago: executing program 3 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x134, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x10e, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @initial, @device_a, @device_b, {0x4, 0xd76}, "", @value={0x1, 0x1, 0x0, 0x0, 0xa}}, @random="aac4b9f44e985e1f13d3371ccfa34ceec7a7ad7e7d539fda89bd649239c39f77042b39c9cd33d1fca82c58c1538e004f97b8b4af5936393c124ee647b97b398e2347c6643736274e1b5ad70934a4012a165aaad51549cb914f0f4c5e33bc8daccdc43ccd921e031a54979a930aadc4127b8c8321aab098b1de74662cf4ba4ea97de0e45e903c436b7eb403e11c61014066f1e98542adba4fce2d87dfe2e2395637deac262cc3b9606886847386659ac5a559fd2f7233c49161f066812f735616e67a36181777f8964eba8e15025f22d268b4bc23c4c8f0c921c1198e4209c430ec43ef906dee80618c2e3dbfb0597a9d"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x20040040}, 0x8010) 3m33.106000958s ago: executing program 3 (id=1362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1) eventfd(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x2) ppoll(&(0x7f0000000080)=[{r2, 0x42c0}], 0x1, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="1000"}) accept4$alg(r5, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) 3m32.852823253s ago: executing program 3 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x138, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x10e, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @initial, @device_a, @device_b, {0x4, 0xd76}, "", @value={0x1, 0x1, 0x0, 0x0, 0xa}}, @random="aac4b9f44e985e1f13d3371ccfa34ceec7a7ad7e7d539fda89bd649239c39f77042b39c9cd33d1fca82c58c1538e004f97b8b4af5936393c124ee647b97b398e2347c6643736274e1b5ad70934a4012a165aaad51549cb914f0f4c5e33bc8daccdc43ccd921e031a54979a930aadc4127b8c8321aab098b1de74662cf4ba4ea97de0e45e903c436b7eb403e11c61014066f1e98542adba4fce2d87dfe2e2395637deac262cc3b9606886847386659ac5a559fd2f7233c49161f066812f735616e67a36181777f8964eba8e15025f22d268b4bc23c4c8f0c921c1198e4209c430ec43ef906dee80618c2e3dbfb0597a9d"}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040040}, 0x8010) 3m32.445857174s ago: executing program 3 (id=1366): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000280)={0x80, 0xb977, 0x7fff, 0x4000009, 0x4, 0x2}) openat(0xffffffffffffff9c, 0x0, 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000e00)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d3f0a8b089b3f383163030890e0879b0a71c6e70a9b336c959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e804e000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae13f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900000000000000752716286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4402bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea77b5602984e4de7c6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cff7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96050000000000000080f146684078416d59fdee5325928974d12dad99dac44c3f0008047096ac4002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999b596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efe5496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5ca00000000000000008734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd078ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0003f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e36b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce212659414900005b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c2769310123cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1de51f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72932b99b380000000000000006859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002601e87b162dadc600", 0x1000}}, 0x1006) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(r6) r9 = syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e73bd0c0d7ebb0000000008", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffd, 0x2) 3m32.128601016s ago: executing program 3 (id=1367): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (fail_nth: 7) 3m31.604422221s ago: executing program 3 (id=1372): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x1, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x1, 0x15b2, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x33}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x23, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x80, 0x20}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0xd6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', r1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000040)='k', &(0x7f00000001c0)=""/95}, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x21, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg(r5, &(0x7f000000b7c0)=[{{&(0x7f00000016c0)=@rc, 0x80, 0x0}, 0x8}], 0x1, 0xa0, 0x0) 3m31.474288962s ago: executing program 35 (id=1372): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x1, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x1, 0x15b2, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x33}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x23, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x80, 0x20}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0xd6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', r1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000040)='k', &(0x7f00000001c0)=""/95}, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x21, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg(r5, &(0x7f000000b7c0)=[{{&(0x7f00000016c0)=@rc, 0x80, 0x0}, 0x8}], 0x1, 0xa0, 0x0) 3m19.944880144s ago: executing program 6 (id=1414): r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r0, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) rmdir(&(0x7f0000000040)='./file0/file2\x00') r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x200, 0x8, 0x800}) r4 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x1, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x10, 0x0, r2, 0x1c, &(0x7f0000000200)={{0xa, 0x4e21, 0x9, @empty, 0xfffffff9}}, 0x0, 0x0, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_enter(r4, 0x64f1, 0xb673, 0x1, &(0x7f0000000000)={[0x9, 0x5]}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r8, 0x1, 0x12, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r9 = getpgrp(0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00007bf000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x10, 0xffffffffffffffff, 0x1b5c9000) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r10, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) 3m18.923536163s ago: executing program 6 (id=1421): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x134, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x10e, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @initial, @device_a, @device_b, {0x4, 0xd76}, "", @value={0x1, 0x1, 0x0, 0x0, 0xa}}, @random="aac4b9f44e985e1f13d3371ccfa34ceec7a7ad7e7d539fda89bd649239c39f77042b39c9cd33d1fca82c58c1538e004f97b8b4af5936393c124ee647b97b398e2347c6643736274e1b5ad70934a4012a165aaad51549cb914f0f4c5e33bc8daccdc43ccd921e031a54979a930aadc4127b8c8321aab098b1de74662cf4ba4ea97de0e45e903c436b7eb403e11c61014066f1e98542adba4fce2d87dfe2e2395637deac262cc3b9606886847386659ac5a559fd2f7233c49161f066812f735616e67a36181777f8964eba8e15025f22d268b4bc23c4c8f0c921c1198e4209c430ec43ef906dee80618c2e3dbfb0597a9d"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x20040040}, 0x8010) 3m18.843475475s ago: executing program 6 (id=1423): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x4}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000656dfa5862a7b13caa6c5ac1d200", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0], 0x44, 0x4000010}, 0x4840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x52) openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c) 3m17.895675529s ago: executing program 6 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000000000087060000fffffdfd"]) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0xc05, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readahead(0xffffffffffffffff, 0xe, 0xffffffffffffffff) setns(r5, 0x24020000) r6 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) 3m17.012792124s ago: executing program 6 (id=1430): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x6}, 0x1, 0x0, 0x0, 0x4c185}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4100, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x840, 0x0) pread64(r6, &(0x7f0000000440)=""/72, 0x48, 0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x5336f782d9c77ff2) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2, 0xfff3}, {0x8, 0xfff3}, {0x0, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x2604c804) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'pim6reg1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb}, {0x6, 0xffff}, {0xf, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r9 = io_uring_setup(0x7311, &(0x7f0000000180)={0x0, 0xe28, 0x1, 0x3, 0x37b}) io_uring_enter(r9, 0x224f, 0xf993, 0x8, &(0x7f0000000240)={[0x86, 0x9]}, 0x8) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@local, r4}, 0x14) 3m16.445505216s ago: executing program 6 (id=1432): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x40040) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000003000000000200000057d70000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000a1ff0000000700", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbbc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x6b5de8c453fb12ca}, 0xc045) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r10, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r9) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r12, 0x800, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3m16.111753819s ago: executing program 36 (id=1432): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x40040) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000003000000000200000057d70000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000a1ff0000000700", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbbc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x6b5de8c453fb12ca}, 0xc045) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r10, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r9) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r12, 0x800, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m26.535025028s ago: executing program 7 (id=2075): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket(0x29, 0x5, 0x101) write(r3, &(0x7f0000000000)='3', 0x4e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 1m26.344555265s ago: executing program 7 (id=2077): r0 = syz_usb_connect$midi(0x4, 0x73, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406a0803004000010203010902610001012f108f090400000101033005072401b1000700072401090007000d2403010703a8087f0382090011240300ac06470209f30906080808056208a406240202d31406240201030709050c0408000505050c2501087bcb78884b4a602a"], &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x4, 0x9, 0xc6, 0x10, 0x5}, 0xff, &(0x7f00000001c0)={0x5, 0xf, 0xff, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0x0, 0xa4c, [0xc0f0, 0xc03f]}, @generic={0xe6, 0x10, 0x1, "3bf182a0531302aac2c4947c7e6993cb2d0f8e1cb72b586d0045d8d57d32bd761f23d99088f071a6287c9aaff8fe068dd1e988713f209e366eb2b73ad2520d10b4a8829ac788cb347f160d77db30a4449895449ca57e364834f5ad603da1d7af1e7dffdb2b0d8814f829ad1c11b1fa47f4632d9c4abbc075c66269fcfc4fa815b581a6bc676b0772d0f1a7db29ab4589931c1aa239eadb4d4f059b2edc03eb792561e7e671217434fa6f349ce6c940a16866a13e402b91ecb13965000b83678d19e85c818ff380598be4a8ea7624ff56d405f122bfd699a87401b38b3117c110de9eca"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@dstopts={0x4}]}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "a2eaadb2febc3989", "1aa05aecef89e0b42632905fb55c3056dd747ef606a10aabd0f080b3ac7a75ad", "0f00", "0100008000"}, 0x38) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}]}}}]}]}], {0x14}}, 0xc0}}, 0x44840) 1m25.26494064s ago: executing program 7 (id=2082): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1ff, 0x88700) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/79, 0x4f}], 0x1, 0xf, 0x6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 1m25.134911717s ago: executing program 7 (id=2083): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x1492) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') sendmmsg$sock(r2, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)="f86278fb1d12797fd1076d2a6f1a50c39d7032daddf158f45ebf90c4f84041be23632b9e5ff17cc4493575fc3c0531645014a37f4ec03137c814612191b27b08dd59b389dd6bd572243de45723299fc78f8631bb1739679271dc07acd286de3beb47a24e5153ad1cc4dedd1bb97bc3147806f05a4635d6a911eb7ccc5babe06b0b48b5c2f840e7c39f420190b844c42fc2b429f026363ed031efc6c26a8eebb33607756918128e7ba7d8ea524bf3fc0fcca4ce52805a0fa5cd27efc51d8870", 0xbf}, {&(0x7f00000005c0)="a6d8077d5e87bfa5459d90c5869038b5d0c12afb4158e981a84a48ff55b458dc8370b411a1b4ea28", 0x28}, {&(0x7f0000000600)="2bc05ae4052829d262b5ee348d6d56d8823766bc2b7d88e741dc8880b15244b55bf92289c4530cc395282b85363a577a0037ee1ae44c2fb9a842ce24f07b3ea16c118382e683d94e9b6c88d3bbab7a0fc0f1de6bb0b3b3d22a2a44829b0b9f41c7cb91f459d36c474c1957004e4f0a824a0135d548fa2bdd40432f3e345c1b33e4c794d62f81d88b22ef48e7d1439857fd642e5b", 0x94}, {&(0x7f00000006c0)="11f33f6530429adb4f84d379ec1cc7aaabda3a56c3f94e00b40f6cacc4c6b9213f0e72845f13ecf8dae6014316d2e60121b6745ef16ab1cc03ef836511fdeacb91e5ff2e0963f3a3036da433a5801d243efa6e6013196d1d6f400b746bd43eff318cf5d17d91698e4c8d5a3c3c1a6485afe2c33de78e4338a00aa34c66e6b27755f3e4d76b4c095841dabb84324a865dfdb4a7bf200e604d383cc39ec7ce4392ee3ff4100a1a9732273ed857e1c974f4cb84664e1d33b9717251be022f2730872f9ab0b4e1cd7797cf1b099f6203618e31108fac5890c388aad287c3", 0xdc}, {&(0x7f00000007c0)="f07ec0cceb5f6e78be24d30d9fa60723d71c3535a2efcff8545c75a2eaf701cde0ca07e7397d5ccd7f9d8961b543ffe5739c432a087991642c8eca8db0d39fa6a515804c5f94a751712a53d6fb33f582d15ba6a0e3", 0x55}, {&(0x7f0000000840)="bf7fb822ec8ab9203755cfd3393dce866a48c703fc6c01573000688e111a862f4e4ee4d9b07b5a43166425bd0da215aa2562346fce2994c46436705d26c04354d41c37409044b2837c983d5e6a16d2e18e2c9c1a70f0343833d26499b1fe5b1127e0b1ae0dacd9228eda5c3b676465abf012bfccfb53988f6e8d3098de91b364e0317df23133653929056c395176ce5e4d9d32aba307585102e9e589e4414e2450190781c5cbe08c48d00e980f5daad479e4a4f51088487a1986a7eb512199c5", 0xc0}, {&(0x7f0000000900)="c22783f336dd805f0459936a0d99c16ef825d17bdb1b7b378fbaf429d7dd3f8e67cc65f7b2b89dc687ada38531a5f45a5c820aa60bedf22fd84cade3b2d4bb2b89ab442e215f119ed6df17bd82f3a3474df81b0b92ab5a4517ba0b80", 0x5c}], 0x7, &(0x7f0000000a80)=[@txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}, @mark={{0x10}}, @timestamping={{0x10}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x58}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)="e13494e2b60473a8f4bd3aad3c2fbb1d7a57622bb4a5320d9c4fd4c89fe57eb0022b6ddbffca18d292a215f2fe159585e5538dcafe608848bc4f81d2831b311e3337d09298c1fa83011670fb41b06d8cba2f4b97ebe90cc9aa21e0ba07fe58407f1189bacfa6f6cebcf4314ba7652ad48bb410513d8afc78cdb81dbdf80db5a743bddecbda69587ab7f66bb9cced3198b3a3f0f8e70161e7ae218c4cdc7feb8070284d01030bb62ceb70886cc0a6f8492ecad0c686e4c82c73df3e670ddc787b1e51ef60978aaebe1a37bb26a2d7a7", 0xcf}, {&(0x7f0000000c00)="b267063e954641c5ae1012df68463245fae8ec5cb2417f9517d8000567ca62395e470379ac4e484650b8e1f04a60d231", 0x30}, {&(0x7f0000000c40)="1a703dfd0f29586240b20bca152916b411aa148c5524fa6cbbe8dd09051082630a740646d91e5a33e7ac81ac6e2cc50c0033a7e4ad2844404cf96e3660aed1e1628645565f642bf7e550a1ec5dcc95f7ce3158aac259c5d05de8ae1cfee2ce1483276a33c1f4c248349a73b06f46c2eda20b8f80bb4f43738816d8e1388e32df18e638df321ec9ae0acc82a396566e3a6899f15948a9d09afe6a24c9e6092a22ed6e9a3824f0eb9a79b2962378819f04edf03f102dbfacbddaad7a0ff9aa5d0f56f2613cd18a13e1f2806e8ca69a6a791d319a103bd1801a623469f04e23e944869d99a0d42fbca9d4", 0xe9}, {&(0x7f0000000d40)="04c0d504689342fc73beeeb53f93ce97c73011ffa04034fceccc815ed54aa7e3ddd77161db49488aabf3dc2c1d6b3cb70f434b75c6b080f3a413a6ed100336d62411a22ebd4f8bc0525985389b94a2e10efe092e3040006638628ac3146e583303a4b3c1d20102c75d507a8a", 0x6c}, {&(0x7f0000000dc0)="d5803f82996a772615e47096f48b7b62057f2a96734690c3b9078993a7c7e49d9f1e4b458d06749e3295ad4d58080efc2c6f", 0x32}, {&(0x7f0000000e00)="6861a3876004a2e5e02800ba7329ee2f35eb9b07c944ea81078a2453147ef5132eb618bc18def8e9f3b931a8ac325145fabbad3442786711e8af392e1f4ae8e70bcfbf1a5a8e82209799c32c6b7274d3d297e8907cf59d6e4cfae70de0470aeba66d4bbb2d200b3c9554bd8ab906c4e0ba947fb384e07f94ad89c199688eb6f5c8cdb3143a53da5dd75069f8d23d6efb0f9a63", 0x93}, {&(0x7f0000000f40)="96b3d4e6366c697749890a0df146a2b426865657357bd00dfdffe1ffce21d72a598a9f66f6db3f550183db7f8847b7f1437b0e75408999778dcd3110ff11f0b6b2ba3c387f47ff97f493447e047c39dedc52dd68856815028da0e84cd79cd762bd7a5348900bcbe35746c0ad584b5bdaee9a5277445dda41e4ef19aeb702eb8cfb873581145d860920bd618d955e618e144869b5a72335e392793a98e9dab0da272c84666aa1ee6f20f3518a3b698485ecf028c09171bc512a00ce43aef139243d8ded193d5a82daacdc6cc3f131394c8f", 0xd1}, {&(0x7f0000001040)="c3ce170a6af85941a670ab18bb85ee2c77360b580ab1d1faa5ac73309d5a422798bb43c59d0de7290a849f4d35ccde45dd0f923cb68c2caaaa9f51c6ebf8e73ed6859053bcd027a4adc5755f5efad3b8c3393ca611659223fb42dfc6e0991e6efebd0b5154a2c30f7b7413394f18c6b5", 0x70}], 0x8}}], 0x2, 0x0) unlink(&(0x7f0000000100)='./file0\x00') syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e03006d0c"], 0x7) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x1, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) fchdir(r5) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x2880c98, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1m24.305279703s ago: executing program 7 (id=2084): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x6ced, 0x10000, 0x0, 0x10000055}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m24.007692219s ago: executing program 7 (id=2085): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x4, @output={0x1000, 0x1, {0xffc1, 0x500}, 0x2, 0xfd}}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r2, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000980)="4b000ffd096c1b77", 0x8}], 0x1}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000005280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000052c0)=0x40) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(r1, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x220a03, 0x20) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x3, 0x3c, &(0x7f0000000040)=ANY=[], 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 1m23.790005942s ago: executing program 37 (id=2085): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x4, @output={0x1000, 0x1, {0xffc1, 0x500}, 0x2, 0xfd}}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r2, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000980)="4b000ffd096c1b77", 0x8}], 0x1}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000005280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000052c0)=0x40) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(r1, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x220a03, 0x20) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x3, 0x3c, &(0x7f0000000040)=ANY=[], 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 8.504169261s ago: executing program 9 (id=2469): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r0, 0xa, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) sendto$inet6(r3, &(0x7f0000000280)="eeb994b70f6cca4cee5eb890716271216d7a67b3f713ffb5a3896f413b31769ec391fbea00418171f406604ad3c404059c7052180899e280d6e733583f0b84be015dd5", 0x43, 0x40010, &(0x7f0000000380)={0xa, 0x4e22, 0xd3, @local, 0x6313}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800051002000000b7d3bef97153dc03302a59437086406dff4cf7d9366e093270a2645e7b080494e02b7413325ca907759fc568629c765015"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="11696a6b00000010002d800a0000000202020202020000e5ecd81bc8b2c178ec75bb8ee8f2fb491451a98681ee593d633ac9d697a762486f4ead8b66aa0100bcf0"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000000802110000000000000000000000000064000100000474657374010882848b960c121824030101470f01000c530201005501010003737562"], 0x48) nanosleep(&(0x7f0000000500)={0x0, 0x4c4b400}, 0x0) 6.903784041s ago: executing program 8 (id=2471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) (fail_nth: 7) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, 0x0) mount$nfs(&(0x7f0000000340)=')./.,\x00', 0x0, &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r5}}]}) 6.02995s ago: executing program 8 (id=2475): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x4}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000656dfa5862a7b13caa6c5ac1d200", @ANYRES32=r0, @ANYRES32=0xee00], 0x44, 0x4000010}, 0x4840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x52) openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c) 6.007404501s ago: executing program 9 (id=2476): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x4}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000ffffffff36eba8010000", @ANYRES32, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0e1ac6e7049b3341959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07480936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x52) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 4.552470548s ago: executing program 4 (id=2479): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r0, 0xa, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) sendto$inet6(r3, &(0x7f0000000280)="eeb994b70f6cca4cee5eb890716271216d7a67b3f713ffb5a3896f413b31769ec391fbea00418171f406604ad3c404059c7052180899e280d6e733583f0b84be015dd5", 0x43, 0x40010, &(0x7f0000000380)={0xa, 0x4e22, 0xd3, @local, 0x6313}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800051002000000b7d3bef97153dc03302a59437086406dff4cf7d9366e093270a2645e7b080494e02b7413325ca907759fc568629c765015"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="11696a6b00000010002d800a0000000202020202020000e5ecd81bc8b2c178ec75bb8ee8f2fb491451a98681ee593d633ac9d697a762486f4ead8b66aa0100bcf0"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000000802110000000000000000000000000064000100000474657374010882848b960c121824030101470f01000c530201005501010003737562"], 0x48) nanosleep(&(0x7f0000000500)={0x0, 0x4c4b400}, 0x0) 4.085002173s ago: executing program 8 (id=2480): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000580)={0x0, 0xb04, 0x0, 0x402, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x8f4, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2c1, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0064008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x483, @broadcast}}) 3.435574758s ago: executing program 5 (id=2481): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x4}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000656dfa5862a7", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0], 0x44, 0x4000010}, 0x4840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 3.430003723s ago: executing program 9 (id=2482): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2.930465825s ago: executing program 4 (id=2483): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x4, 0x2000, @fd, 0x9, 0x0, 0x0, 0x12, 0x0, {0x2, 0x0, 0x3, '\x00', 0x0, 0x5}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x8, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x8000, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{r4, r5/1000+60000}}, 0x0) io_uring_enter(r0, 0x4fac, 0xfffffffd, 0x39, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x400caeaa, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.530468348s ago: executing program 4 (id=2484): r0 = socket$nl_route(0x10, 0x3, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xffffffff00000018) syz_emit_vhci(&(0x7f00000012c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0x8}, {0x0, 0x9, 0xfff, 0x9}}}}, 0x15) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getroute={0x48, 0x1a, 0x10, 0x70bd28, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x8, 0xfe, 0x2, 0xfd, 0xb, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x80}, @RTA_EXPIRES={0x8, 0x17, 0x80}, @RTA_MARK={0x8, 0x10, 0x6a}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x1}]}}, @RTA_OIF={0x8, 0x4, r2}]}, 0x48}}, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r4, &(0x7f0000001640)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) 2.526211563s ago: executing program 8 (id=2485): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x80, &(0x7f0000001380)="f8732993d86ef48e7473cc86aaf601bee0f9a01972de6eb8e1258b6ad342fd353135a421ea4e843a82e0984882d7ad49e47fd1e9b803ad17632aaaca8873d8f8d68a90067a6d243d98b3314b75f5fd213b5505efd0548faeb6908a6880a132799114212c26145332b149441b96bc6eb1ee9eeef0558bab9de752914d210649b33a367f16f4668508f2d0c448ebc39eafd8bac081b739947c5757508d9949a056644e4b6908e8c0f0683c7d504d28fc1e3b7e3fdeca42e73f9f8a91f1b2396a3674d998acda303b51794238ea1af5bdc06d1aefaa0570f6ae7603bc93c20205f59f436c890ab3dfe5368943be247b03b96ebf7f226a", 0xf5, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="f312ad8da82ce1df5f57e923457c67648d05916c5d3cf210d58827") ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000001540)={0x0, 0xffff, 0x0, 0x0, r2}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="f50000009135000000000000000000000000009a", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, 0x0) write(r1, &(0x7f0000000960)='1', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xb, 0x1}, {0x1, 0xffff}, {0xb, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044010) getpid() sendmsg$nl_route(r0, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130000002bbd7000fddbdf", @ANYRES32=r9, @ANYBLOB="0024000e00001000000000b8c054c9a26edb4e00000800000000000000f9fffb0400000000"], 0x4c}}, 0x80) ioctl$DVB_DVR_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000100)={0x7, 0x0, r8}) setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f00000012c0), 0x8) 2.442009477s ago: executing program 9 (id=2486): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 1.80468299s ago: executing program 9 (id=2487): set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x5, &(0x7f0000000180)={&(0x7f0000000140)}}, 0xc) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="020000ee0000007e398242edf671656ec72f6bee34eb22baffffffe98620686600001000000000000000"], 0x24, 0x3) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a45323, &(0x7f0000000200)={{0x7, 0x7f}, 'port0\x00', 0x9, 0x10000, 0x6, 0x7fffffff, 0x8, 0x200, 0xe5, 0x0, 0x4, 0x4}) cachestat(r1, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, &(0x7f0000000040), 0x0) set_robust_list(&(0x7f0000000380)={&(0x7f0000000240), 0x4, &(0x7f0000000300)={&(0x7f00000002c0)={&(0x7f0000000280)}}}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000003c0)={0x7, 0xb002, 0xff}) ioctl(r5, 0x4048aec9, &(0x7f0000000300)="01") ioctl(r6, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000200)=0xffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) 1.499695681s ago: executing program 4 (id=2488): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x4}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000656dfa5862a7b13caa6c5ac1d200", @ANYRES32=r0, @ANYRES32=0xee00], 0x44, 0x4000010}, 0x4840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x52) openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c) 1.192761168s ago: executing program 8 (id=2489): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4, 0x4000000}, 0x38) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, 0x0) write(r2, &(0x7f0000000960)='1', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xb, 0x1}, {0x1, 0xffff}, {0xb, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044010) getpid() sendmsg$nl_route(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130000002bbd7000fddbdf", @ANYRES32=r9, @ANYBLOB="0024000e00001000000000b8c054c9a26edb4e00000800000000000000f9fffb0400000000"], 0x4c}}, 0x80) 1.151797098s ago: executing program 9 (id=2490): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x4}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000ffffffff36eba8010000", @ANYRES32, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x52) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 1.143354147s ago: executing program 5 (id=2491): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', @random="18faff000020"}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a18fe000000007313f80000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 934.826439ms ago: executing program 5 (id=2492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x2200cd0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)=':\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) 634.390155ms ago: executing program 5 (id=2493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001c40)="00000000000000007ee5dc7500e7", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x8008, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065fffffb7f00000809"], 0x38) 414.177533ms ago: executing program 5 (id=2494): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 284.817834ms ago: executing program 4 (id=2495): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 174.546885ms ago: executing program 5 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/firmware/timeout\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\n', 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0xfffffffe, 0x401, 0xffffffffffffffff, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x4f}, {}, {0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0xa, @in=@empty}}, 0xe4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000b00)=@ethtool_drvinfo={0x3, "d9f92f6b07166fdd87f15ed7d84270091dd2fa40db2394f144c7e253da047c02", "67d98d40203c3dc1d125cbce631f483ae997d2353b37d5e654d4bb685e4c5aa2", "5f29115e8239e36cfb525847d45869a202c3f39d2755a0bf909cdf3fed375bca", "dac45dadc89d77b2ecccc7b2665c1b3053ca929be98aadf104697d4e3748a732", "ee81a1abac84af6a6500000000d50fb848b60466404f566aa68602491b73a4ab", "24e33b1b0eb51f8b5e7f4541", 0x7ff, 0xfffffff4, 0x5, 0x8, 0x1}}) 24.11263ms ago: executing program 4 (id=2497): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x3, 0x4e30, 0x6, [0x77, 0xeac5389, 0x6, 0x7, 0x28000000000, 0xb53]}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}}, 0x4000054) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x7, 0x1, 0xe, "91eb096f5d4949060e7de4c9c1658feb81d7cfca01e3344d70c4f21aab9a0347b176587f714eea23c610cb967d382e96d75c1f116bf2ddd2d26f25fc415c74", 0x37}, 0x60) 0s ago: executing program 8 (id=2498): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x3, 0x4e30, 0x6, [0x77, 0xeac5389, 0x6, 0x7, 0x28000000000, 0xb53]}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}}, 0x4000054) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x7, 0x1, 0xe, "91eb096f5d4949060e7de4c9c1658feb81d7cfca01e3344d70c4f21aab9a0347b176587f714eea23c610cb967d382e96d75c1f116bf2ddd2d26f25fc415c74", 0x37}, 0x60) kernel console output (not intermixed with test programs): k 0x1985 not found at 0x00000844: 0x6d2f instead [ 416.037078][T13789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 416.037156][T13789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 416.037165][T13789] jffs2: Further such events for this erase block will not be printed [ 416.037181][T13789] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 416.037366][T13789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 416.037376][T13789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 416.037425][T13789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 416.055735][T13789] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 416.055745][T13789] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 416.219845][T13791] 9pnet_virtio: no channels available for device syz [ 416.564398][T13791] gadgetfs: bound to dummy_udc driver [ 416.704392][T13785] syzkaller1: entered promiscuous mode [ 416.704407][T13785] syzkaller1: entered allmulticast mode [ 417.192090][T13806] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2257'. [ 417.379279][T13813] FAULT_INJECTION: forcing a failure. [ 417.379279][T13813] name failslab, interval 1, probability 0, space 0, times 0 [ 417.379301][T13813] CPU: 2 UID: 0 PID: 13813 Comm: syz.4.2259 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.379318][T13813] Tainted: [L]=SOFTLOCKUP [ 417.379323][T13813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.379331][T13813] Call Trace: [ 417.379335][T13813] [ 417.379341][T13813] dump_stack_lvl+0x100/0x190 [ 417.379360][T13813] should_fail_ex.cold+0x5/0xa [ 417.379376][T13813] should_failslab+0xc2/0x120 [ 417.379395][T13813] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 417.379413][T13813] ? __d_alloc+0x35/0xa50 [ 417.379432][T13813] __d_alloc+0x35/0xa50 [ 417.379447][T13813] ? __lock_acquire+0x5c0/0x1f40 [ 417.379466][T13813] d_alloc_parallel+0x105/0x14c0 [ 417.379482][T13813] ? lock_acquire+0x1d1/0x380 [ 417.379498][T13813] ? lookup_slow+0x42/0x70 [ 417.379535][T13813] ? __pfx_d_alloc_parallel+0x10/0x10 [ 417.379555][T13813] ? __pfx___might_resched+0x10/0x10 [ 417.379577][T13813] ? find_held_lock+0x2b/0x80 [ 417.379597][T13813] ? __d_lookup+0x25c/0x4a0 [ 417.379621][T13813] ? down_read+0x13b/0x4c0 [ 417.379648][T13813] ? __pfx_down_read+0x10/0x10 [ 417.379672][T13813] __lookup_slow+0x98/0x320 [ 417.379686][T13813] lookup_slow+0x50/0x70 [ 417.379697][T13813] lookup_noperm_positive_unlocked+0xd5/0x110 [ 417.379714][T13813] debugfs_lookup+0xc7/0x150 [ 417.379732][T13813] kvm_dev_ioctl+0xfdc/0x1b50 [ 417.379749][T13813] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 417.379764][T13813] ? xfd_validate_state+0x129/0x190 [ 417.379784][T13813] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 417.379797][T13813] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 417.379828][T13813] __do_fast_syscall_32+0x13a/0x8b0 [ 417.379843][T13813] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.379859][T13813] do_fast_syscall_32+0x32/0x70 [ 417.379875][T13813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.379890][T13813] RIP: 0023:0xf7f35fec [ 417.379904][T13813] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 417.379910][T13813] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 417.379922][T13813] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae01 [ 417.379929][T13813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.379936][T13813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.379943][T13813] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 417.379950][T13813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.379965][T13813] [ 417.774113][T13822] FAULT_INJECTION: forcing a failure. [ 417.774113][T13822] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.774135][T13822] CPU: 3 UID: 0 PID: 13822 Comm: syz.5.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.774150][T13822] Tainted: [L]=SOFTLOCKUP [ 417.774154][T13822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.774161][T13822] Call Trace: [ 417.774166][T13822] [ 417.774170][T13822] dump_stack_lvl+0x100/0x190 [ 417.774190][T13822] should_fail_ex.cold+0x5/0xa [ 417.774203][T13822] ? prepare_alloc_pages+0x16d/0x5b0 [ 417.774220][T13822] should_fail_alloc_page+0xeb/0x140 [ 417.774238][T13822] prepare_alloc_pages+0x1f0/0x5b0 [ 417.774262][T13822] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 417.774277][T13822] ? __pfx_get_page_from_freelist+0x10/0x10 [ 417.774290][T13822] ? prepare_alloc_pages+0x1f0/0x5b0 [ 417.774309][T13822] ? rcu_is_watching+0x13/0xc0 [ 417.774335][T13822] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 417.774351][T13822] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.774366][T13822] ? find_held_lock+0x2b/0x80 [ 417.774379][T13822] ? is_bpf_text_address+0x8a/0x1a0 [ 417.774396][T13822] ? is_bpf_text_address+0x8a/0x1a0 [ 417.774413][T13822] ? bpf_ksym_find+0x124/0x1c0 [ 417.774426][T13822] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 417.774443][T13822] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.774456][T13822] ? is_bpf_text_address+0x94/0x1a0 [ 417.774474][T13822] ? __kernel_text_address+0xd/0x30 [ 417.774498][T13822] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 417.774512][T13822] ? is_bpf_text_address+0x25/0x1a0 [ 417.774531][T13822] ? policy_nodemask+0xed/0x4f0 [ 417.774550][T13822] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 417.774571][T13822] __kasan_populate_vmalloc+0xf0/0x210 [ 417.774589][T13822] alloc_vmap_area+0x95d/0x2bb0 [ 417.774608][T13822] ? kasan_save_track+0x14/0x30 [ 417.774623][T13822] ? __kasan_kmalloc+0xaa/0xb0 [ 417.774638][T13822] ? __pfx_alloc_vmap_area+0x10/0x10 [ 417.774654][T13822] ? __get_vm_area_node+0x124/0x350 [ 417.774672][T13822] __get_vm_area_node+0x1ed/0x350 [ 417.774690][T13822] __vmalloc_node_range_noprof+0x268/0x1420 [ 417.774708][T13822] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 417.774724][T13822] ? process_measurement+0x4c8/0x2350 [ 417.774741][T13822] ? down_write+0x146/0x1f0 [ 417.774758][T13822] ? up_write+0x2dc/0x5b0 [ 417.774769][T13822] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 417.774789][T13822] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.774806][T13822] ? __lock_acquire+0x5c0/0x1f40 [ 417.774827][T13822] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 417.774843][T13822] __vmalloc_node_noprof+0xad/0xf0 [ 417.774860][T13822] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 417.774877][T13822] __vmalloc_noprof+0xa3/0x120 [ 417.774894][T13822] ? __pfx___vmalloc_noprof+0x10/0x10 [ 417.774911][T13822] ? lock_acquire+0x1d1/0x380 [ 417.774926][T13822] ? is_bpf_text_address+0x25/0x1a0 [ 417.774944][T13822] ? rcu_is_watching+0x13/0xc0 [ 417.774956][T13822] ? apparmor_capable+0x1d7/0x4d0 [ 417.774975][T13822] bpf_prog_alloc_no_stats+0x58/0x690 [ 417.774990][T13822] ? security_capable+0x80/0x260 [ 417.775007][T13822] bpf_prog_alloc+0x3b/0x200 [ 417.775022][T13822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.775040][T13822] bpf_prog_load+0x49e/0x2a80 [ 417.775056][T13822] ? __lock_acquire+0x5c0/0x1f40 [ 417.775075][T13822] ? __pfx_bpf_prog_load+0x10/0x10 [ 417.775104][T13822] __sys_bpf+0x1f46/0x4a30 [ 417.775121][T13822] ? __pfx___sys_bpf+0x10/0x10 [ 417.775133][T13822] ? lock_acquire+0x1d1/0x380 [ 417.775148][T13822] ? get_pid_task+0x2a/0x250 [ 417.775160][T13822] ? find_held_lock+0x2b/0x80 [ 417.775173][T13822] ? get_pid_task+0xfc/0x250 [ 417.775184][T13822] ? get_pid_task+0xfc/0x250 [ 417.775199][T13822] ? proc_fail_nth_write+0x9f/0x220 [ 417.775214][T13822] ? find_held_lock+0x2b/0x80 [ 417.775230][T13822] ? rcu_read_lock_any_held+0x6a/0x90 [ 417.775244][T13822] ? find_held_lock+0x2b/0x80 [ 417.775260][T13822] ? ksys_write+0x190/0x250 [ 417.775273][T13822] ? ksys_write+0x190/0x250 [ 417.775286][T13822] ? lock_acquire+0x1d1/0x380 [ 417.775311][T13822] ? fput+0x7c/0x100 [ 417.775328][T13822] ? __ia32_sys_bpf+0xcc/0x170 [ 417.775340][T13822] __ia32_sys_bpf+0xcc/0x170 [ 417.775354][T13822] ? __do_fast_syscall_32+0xb3/0x8b0 [ 417.775369][T13822] __do_fast_syscall_32+0x13a/0x8b0 [ 417.775383][T13822] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.775397][T13822] do_fast_syscall_32+0x32/0x70 [ 417.775411][T13822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.775425][T13822] RIP: 0023:0xf7fa3fec [ 417.775439][T13822] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 417.775444][T13822] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 417.775456][T13822] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000540 [ 417.775463][T13822] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.775469][T13822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.775476][T13822] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 417.775482][T13822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.775496][T13822] [ 417.782034][T13822] syz.5.2261: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 417.782078][T13822] CPU: 3 UID: 0 PID: 13822 Comm: syz.5.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.782093][T13822] Tainted: [L]=SOFTLOCKUP [ 417.782098][T13822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.782105][T13822] Call Trace: [ 417.782109][T13822] [ 417.782113][T13822] dump_stack_lvl+0x100/0x190 [ 417.782132][T13822] warn_alloc.cold+0x9e/0xb2 [ 417.782146][T13822] ? __pfx_warn_alloc+0x10/0x10 [ 417.782158][T13822] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.782173][T13822] ? __get_vm_area_node+0x2f0/0x350 [ 417.782192][T13822] ? __get_vm_area_node+0x22b/0x350 [ 417.782211][T13822] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 417.782228][T13822] ? process_measurement+0x4c8/0x2350 [ 417.782245][T13822] ? down_write+0x146/0x1f0 [ 417.782266][T13822] ? up_write+0x2dc/0x5b0 [ 417.782278][T13822] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 417.782298][T13822] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.782315][T13822] ? __lock_acquire+0x5c0/0x1f40 [ 417.782336][T13822] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 417.782352][T13822] __vmalloc_node_noprof+0xad/0xf0 [ 417.782369][T13822] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 417.782397][T13822] __vmalloc_noprof+0xa3/0x120 [ 417.782417][T13822] ? __pfx___vmalloc_noprof+0x10/0x10 [ 417.782433][T13822] ? lock_acquire+0x1d1/0x380 [ 417.782448][T13822] ? is_bpf_text_address+0x25/0x1a0 [ 417.782466][T13822] ? rcu_is_watching+0x13/0xc0 [ 417.782479][T13822] ? apparmor_capable+0x1d7/0x4d0 [ 417.782498][T13822] bpf_prog_alloc_no_stats+0x58/0x690 [ 417.782514][T13822] ? security_capable+0x80/0x260 [ 417.782531][T13822] bpf_prog_alloc+0x3b/0x200 [ 417.782545][T13822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.782563][T13822] bpf_prog_load+0x49e/0x2a80 [ 417.782579][T13822] ? __lock_acquire+0x5c0/0x1f40 [ 417.782598][T13822] ? __pfx_bpf_prog_load+0x10/0x10 [ 417.782627][T13822] __sys_bpf+0x1f46/0x4a30 [ 417.782643][T13822] ? __pfx___sys_bpf+0x10/0x10 [ 417.782655][T13822] ? lock_acquire+0x1d1/0x380 [ 417.782670][T13822] ? get_pid_task+0x2a/0x250 [ 417.782683][T13822] ? find_held_lock+0x2b/0x80 [ 417.782696][T13822] ? get_pid_task+0xfc/0x250 [ 417.782707][T13822] ? get_pid_task+0xfc/0x250 [ 417.782722][T13822] ? proc_fail_nth_write+0x9f/0x220 [ 417.782736][T13822] ? find_held_lock+0x2b/0x80 [ 417.782752][T13822] ? rcu_read_lock_any_held+0x6a/0x90 [ 417.782765][T13822] ? find_held_lock+0x2b/0x80 [ 417.782778][T13822] ? ksys_write+0x190/0x250 [ 417.782791][T13822] ? ksys_write+0x190/0x250 [ 417.782804][T13822] ? lock_acquire+0x1d1/0x380 [ 417.782829][T13822] ? fput+0x7c/0x100 [ 417.782846][T13822] ? __ia32_sys_bpf+0xcc/0x170 [ 417.782859][T13822] __ia32_sys_bpf+0xcc/0x170 [ 417.782873][T13822] ? __do_fast_syscall_32+0xb3/0x8b0 [ 417.782887][T13822] __do_fast_syscall_32+0x13a/0x8b0 [ 417.782901][T13822] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.782915][T13822] do_fast_syscall_32+0x32/0x70 [ 417.782929][T13822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.782944][T13822] RIP: 0023:0xf7fa3fec [ 417.782957][T13822] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 417.782962][T13822] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 417.782973][T13822] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000540 [ 417.782980][T13822] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.782987][T13822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.782993][T13822] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 417.783000][T13822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.783014][T13822] [ 417.785432][T13822] Mem-Info: [ 417.785441][T13822] active_anon:3210 inactive_anon:3634 isolated_anon:0 [ 417.785441][T13822] active_file:463 inactive_file:7208 isolated_file:0 [ 417.785441][T13822] unevictable:1000 dirty:175 writeback:0 [ 417.785441][T13822] slab_reclaimable:6874 slab_unreclaimable:67495 [ 417.785441][T13822] mapped:35604 shmem:6726 pagetables:2379 [ 417.785441][T13822] sec_pagetables:320 bounce:0 [ 417.785441][T13822] kernel_misc_reclaimable:0 [ 417.785441][T13822] free:47624 free_pcp:5140 free_cma:0 [ 417.785468][T13822] Node 0 active_anon:20kB inactive_anon:204kB active_file:28kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9504kB pagetables:1432kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 417.785496][T13822] Node 1 active_anon:12820kB inactive_anon:14332kB active_file:1824kB inactive_file:28660kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:142384kB dirty:688kB writeback:0kB shmem:26904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7360kB pagetables:8084kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 417.785523][T13822] Node 0 DMA free:2732kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:24kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 417.785553][T13822] lowmem_reserve[]: 0 278 278 278 278 [ 417.785572][T13822] Node 0 DMA32 free:19840kB boost:4096kB min:16720kB low:19876kB high:23032kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20kB inactive_anon:204kB active_file:28kB inactive_file:168kB unevictable:0kB writepending:12kB zspages:992kB present:1032196kB managed:284792kB mlocked:0kB bounce:0kB free_pcp:10856kB local_pcp:3712kB free_cma:0kB [ 417.785602][T13822] lowmem_reserve[]: 0 0 0 0 0 [ 417.785620][T13822] Node 1 DMA32 free:167924kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12820kB inactive_anon:14332kB active_file:1824kB inactive_file:28660kB unevictable:4000kB writepending:688kB zspages:7708kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:9688kB local_pcp:7296kB free_cma:0kB [ 417.785651][T13822] lowmem_reserve[]: 0 0 0 0 0 [ 417.785668][T13822] Node 0 DMA: 79*4kB (U) 20*8kB (U) 11*16kB (U) 15*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2732kB [ 417.785740][T13822] Node 0 DMA32: 10*4kB (UE) 23*8kB (UE) 6*16kB (ME) 80*32kB (UME) 39*64kB (UME) 19*128kB (UME) 5*256kB (UM) 11*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 19840kB [ 417.785817][T13822] Node 1 DMA32: 945*4kB (UME) 1310*8kB (UME) 516*16kB (UME) 668*32kB (UME) 518*64kB (UM) 242*128kB (UME) 83*256kB (UME) 37*512kB (UM) 9*1024kB (UM) 3*2048kB (U) 1*4096kB (U) = 167668kB [ 417.785902][T13822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.785911][T13822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 417.785919][T13822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.785927][T13822] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 417.785935][T13822] 14960 total pagecache pages [ 417.785939][T13822] 516 pages in swap cache [ 417.785943][T13822] Free swap = 84640kB [ 417.785947][T13822] Total swap = 124996kB [ 417.785951][T13822] 524155 pages RAM [ 417.785954][T13822] 0 pages HighMem/MovableOnly [ 417.785958][T13822] 212065 pages reserved [ 417.785962][T13822] 0 pages cma reserved [ 418.905797][ T43] audit: type=1326 audit(1790570752.763:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.905847][ T43] audit: type=1326 audit(1790570752.763:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.911205][ T43] audit: type=1326 audit(1790570752.763:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.911384][ T43] audit: type=1326 audit(1790570752.763:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.911649][ T43] audit: type=1326 audit(1790570752.763:10557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.912175][ T43] audit: type=1326 audit(1790570752.763:10558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.912489][ T43] audit: type=1326 audit(1790570752.763:10559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.913477][ T43] audit: type=1326 audit(1790570752.763:10560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.963106][ T43] audit: type=1326 audit(1790570752.813:10561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 418.964585][ T43] audit: type=1326 audit(1790570752.823:10562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.5.2265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 419.535386][ T7463] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 420.718824][T13860] 9pnet_virtio: no channels available for device syz [ 420.833773][T13860] gadgetfs: bound to dummy_udc driver [ 421.132825][ T5880] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 421.133046][ C1] gadgetfs: connected [ 421.133235][ T5880] gadgetfs: disconnected [ 421.323528][ C1] gadgetfs: connected [ 421.328685][ T5880] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 421.331253][ T5880] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 421.331276][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.347183][ C1] gadgetfs: configuration #1 [ 421.836113][T13851] gadgetfs: suspended from state 3 [ 421.836286][T13851] gadgetfs: disconnected [ 421.839289][ T5880] usb 5-1: USB disconnect, device number 73 [ 421.866911][T13874] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 422.010734][T13874] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 422.010820][T13874] overlayfs: failed to look up (tracing) for ino (-66) [ 422.585419][T13876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.044149][T13879] FAULT_INJECTION: forcing a failure. [ 423.044149][T13879] name failslab, interval 1, probability 0, space 0, times 0 [ 423.044173][T13879] CPU: 1 UID: 0 PID: 13879 Comm: syz.8.2280 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.044190][T13879] Tainted: [L]=SOFTLOCKUP [ 423.044196][T13879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 423.044204][T13879] Call Trace: [ 423.044209][T13879] [ 423.044214][T13879] dump_stack_lvl+0x100/0x190 [ 423.044236][T13879] should_fail_ex.cold+0x5/0xa [ 423.044252][T13879] should_failslab+0xc2/0x120 [ 423.044270][T13879] kmem_cache_alloc_noprof+0x92/0x6a0 [ 423.044286][T13879] ? __asan_memcpy+0x3c/0x60 [ 423.044299][T13879] ? __kernfs_new_node+0xd2/0xa10 [ 423.044319][T13879] __kernfs_new_node+0xd2/0xa10 [ 423.044338][T13879] ? __pfx___kernfs_new_node+0x10/0x10 [ 423.044357][T13879] ? lock_acquire+0x1d1/0x380 [ 423.044374][T13879] ? kernfs_root+0x23/0x2a0 [ 423.044395][T13879] ? find_held_lock+0x2b/0x80 [ 423.044413][T13879] ? kernfs_root+0xee/0x2a0 [ 423.044436][T13879] ? kernfs_root+0xee/0x2a0 [ 423.044467][T13879] kernfs_create_dir_ns+0xa6/0x2b0 [ 423.044503][T13879] sysfs_create_dir_ns+0x13a/0x2b0 [ 423.044531][T13879] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 423.044553][T13879] ? find_held_lock+0x2b/0x80 [ 423.044574][T13879] ? kobject_add_internal+0x25f/0x930 [ 423.044600][T13879] ? kobject_add_internal+0x25f/0x930 [ 423.044628][T13879] ? do_raw_spin_unlock+0x145/0x1e0 [ 423.044650][T13879] kobject_add_internal+0x2c8/0x930 [ 423.044688][T13879] kobject_add+0x16a/0x1e0 [ 423.044716][T13879] ? __pfx_kobject_add+0x10/0x10 [ 423.044743][T13879] ? class_to_subsys+0x10f/0x150 [ 423.044770][T13879] ? kobject_put+0xb9/0x640 [ 423.044792][T13879] ? _raw_spin_unlock+0x28/0x50 [ 423.044817][T13879] device_add+0x294/0x1970 [ 423.044840][T13879] ? __pfx_device_add+0x10/0x10 [ 423.044865][T13879] ? kobject_get+0xbb/0x150 [ 423.044892][T13879] cdev_device_add+0x12b/0x270 [ 423.044918][T13879] nvme_add_ctrl+0x15c/0x320 [ 423.044943][T13879] nvme_loop_create_ctrl+0x201/0xee0 [ 423.044977][T13879] nvmf_dev_write+0x4ee/0xb60 [ 423.045001][T13879] vfs_write+0x2aa/0x1050 [ 423.045046][T13879] ? __pfx_nvmf_dev_write+0x10/0x10 [ 423.045067][T13879] ? lock_acquire+0x1d1/0x380 [ 423.045095][T13879] ? __fget_files+0x34/0x3d0 [ 423.045118][T13879] ? __pfx_vfs_write+0x10/0x10 [ 423.045138][T13879] ? find_held_lock+0x2b/0x80 [ 423.045159][T13879] ? __fget_files+0x215/0x3d0 [ 423.045180][T13879] ? __fget_files+0x215/0x3d0 [ 423.045205][T13879] ? __fget_files+0x21f/0x3d0 [ 423.045235][T13879] ksys_write+0x12a/0x250 [ 423.045256][T13879] ? __pfx_ksys_write+0x10/0x10 [ 423.045284][T13879] __do_fast_syscall_32+0x13a/0x8b0 [ 423.045311][T13879] do_fast_syscall_32+0x32/0x70 [ 423.045334][T13879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.045357][T13879] RIP: 0023:0xf6ffefec [ 423.045379][T13879] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 423.045387][T13879] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 423.045406][T13879] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000800 [ 423.045419][T13879] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.045432][T13879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.045444][T13879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.045455][T13879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.045479][T13879] [ 423.045545][T13879] kobject: kobject_add_internal failed for nvme0 (error: -12 parent: ctl) [ 423.746214][T13897] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 424.068031][T13908] binder: 13907:13908 ioctl 4018620d 0 returned -22 [ 424.068388][T13908] binder: 13907:13908 ioctl c0306201 80000180 returned -11 [ 424.255099][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 424.268232][T13910] overlayfs: overlapping lowerdir path [ 424.399913][T13919] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 424.466950][T13919] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 424.467273][T13919] overlayfs: failed to look up (tracing) for ino (-66) [ 424.983103][T13909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.409733][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 425.409765][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 425.409824][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 425.409841][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 425.409857][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 425.409873][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 425.409956][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 425.409965][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 425.409974][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 425.410083][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 425.410094][T13923] jffs2: Further such events for this erase block will not be printed [ 425.410103][T13923] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 425.412552][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 425.412567][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 425.412577][T13923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 425.421103][T13923] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 425.421114][T13923] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 425.650297][T13928] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2294'. [ 425.687301][T13933] fuse: Bad value for 'fd' [ 425.750004][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 425.750250][T13935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.780956][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 425.780968][ T43] audit: type=1326 audit(1790570759.633:10593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.783352][ T43] audit: type=1326 audit(1790570759.643:10594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.788356][ T43] audit: type=1326 audit(1790570759.643:10595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.788402][ T43] audit: type=1326 audit(1790570759.643:10596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.788442][ T43] audit: type=1326 audit(1790570759.643:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.795431][ T43] audit: type=1326 audit(1790570759.653:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.795457][ T43] audit: type=1326 audit(1790570759.653:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.795500][ T43] audit: type=1326 audit(1790570759.653:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.797686][ T43] audit: type=1326 audit(1790570759.653:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.797709][ T43] audit: type=1326 audit(1790570759.653:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.9.2297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 425.893992][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 425.894014][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 425.894055][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 425.894065][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 425.894073][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 425.894082][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 425.894205][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 425.894221][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 425.894234][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 425.894332][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 425.894341][T13940] jffs2: Further such events for this erase block will not be printed [ 425.894349][T13940] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 425.894534][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 425.894544][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 425.894554][T13940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 426.051264][T13940] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 426.051276][T13940] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 426.294065][T13951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.292609][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2303'. [ 427.292827][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2303'. [ 427.292927][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2303'. [ 427.293071][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2303'. [ 427.293234][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2303'. [ 427.293333][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2303'. [ 427.293428][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2303'. [ 427.333235][T13957] FAULT_INJECTION: forcing a failure. [ 427.333235][T13957] name failslab, interval 1, probability 0, space 0, times 0 [ 427.333269][T13957] CPU: 2 UID: 0 PID: 13957 Comm: syz.5.2302 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.333295][T13957] Tainted: [L]=SOFTLOCKUP [ 427.333303][T13957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.333314][T13957] Call Trace: [ 427.333323][T13957] [ 427.333330][T13957] dump_stack_lvl+0x100/0x190 [ 427.333359][T13957] should_fail_ex.cold+0x5/0xa [ 427.333384][T13957] should_failslab+0xc2/0x120 [ 427.333413][T13957] __kmalloc_cache_noprof+0x91/0x6d0 [ 427.333432][T13957] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 427.333457][T13957] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 427.333478][T13957] ? lockdep_hardirqs_on+0x7d/0x110 [ 427.333495][T13957] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 427.333508][T13957] ? snd_pcm_oss_change_params_locked+0x9b0/0x39f0 [ 427.333521][T13957] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 427.333534][T13957] ? kfree+0x22b/0x6d0 [ 427.333547][T13957] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 427.333567][T13957] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 427.333581][T13957] ? get_pid_task+0xfc/0x250 [ 427.333619][T13957] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 427.333635][T13957] snd_pcm_oss_sync+0x265/0x840 [ 427.333650][T13957] snd_pcm_oss_release+0x238/0x300 [ 427.333664][T13957] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 427.333677][T13957] __fput+0x3ff/0xb50 [ 427.333699][T13957] fput_close_sync+0x118/0x250 [ 427.333716][T13957] ? __pfx_fput_close_sync+0x10/0x10 [ 427.333738][T13957] __ia32_sys_close+0x8b/0x120 [ 427.333749][T13957] __do_fast_syscall_32+0x13a/0x8b0 [ 427.333778][T13957] ? lockdep_hardirqs_on+0x7d/0x110 [ 427.333792][T13957] do_fast_syscall_32+0x32/0x70 [ 427.333807][T13957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.333821][T13957] RIP: 0023:0xf7fa3fec [ 427.333835][T13957] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 427.333841][T13957] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000006 [ 427.333852][T13957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 427.333859][T13957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.333866][T13957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.333873][T13957] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.333879][T13957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.333894][T13957] [ 427.530562][T13968] FAULT_INJECTION: forcing a failure. [ 427.530562][T13968] name failslab, interval 1, probability 0, space 0, times 0 [ 427.530584][T13968] CPU: 0 UID: 0 PID: 13968 Comm: syz.5.2307 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.530600][T13968] Tainted: [L]=SOFTLOCKUP [ 427.530604][T13968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.530611][T13968] Call Trace: [ 427.530616][T13968] [ 427.530621][T13968] dump_stack_lvl+0x100/0x190 [ 427.530639][T13968] should_fail_ex.cold+0x5/0xa [ 427.530655][T13968] should_failslab+0xc2/0x120 [ 427.530673][T13968] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 427.530688][T13968] ? __alloc_skb+0x5b7/0x710 [ 427.530719][T13968] ? __alloc_skb+0x140/0x710 [ 427.530739][T13968] __alloc_skb+0x140/0x710 [ 427.530755][T13968] ? __alloc_skb+0x5b7/0x710 [ 427.530772][T13968] ? __pfx___alloc_skb+0x10/0x10 [ 427.530793][T13968] netlink_alloc_large_skb+0x69/0x150 [ 427.530811][T13968] netlink_sendmsg+0x680/0xda0 [ 427.530830][T13968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.530848][T13968] ? apparmor_socket_sendmsg+0x165/0x280 [ 427.530868][T13968] ____sys_sendmsg+0xa4d/0xbe0 [ 427.530882][T13968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.530899][T13968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.530920][T13968] ___sys_sendmsg+0x190/0x1e0 [ 427.530935][T13968] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.530957][T13968] ? find_held_lock+0x2b/0x80 [ 427.530979][T13968] __sys_sendmsg+0x160/0x210 [ 427.530991][T13968] ? __pfx___sys_sendmsg+0x10/0x10 [ 427.531006][T13968] ? __pfx_ksys_write+0x10/0x10 [ 427.531022][T13968] __do_fast_syscall_32+0x13a/0x8b0 [ 427.531036][T13968] ? lockdep_hardirqs_on+0x7d/0x110 [ 427.531050][T13968] do_fast_syscall_32+0x32/0x70 [ 427.531065][T13968] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.531080][T13968] RIP: 0023:0xf7fa3fec [ 427.531104][T13968] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 427.531111][T13968] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 427.531123][T13968] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 427.531130][T13968] RDX: 0000000020000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.531137][T13968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.531144][T13968] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.531151][T13968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.531165][T13968] [ 427.575811][T13970] FAULT_INJECTION: forcing a failure. [ 427.575811][T13970] name failslab, interval 1, probability 0, space 0, times 0 [ 427.575832][T13970] CPU: 1 UID: 0 PID: 13970 Comm: syz.9.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.575850][T13970] Tainted: [L]=SOFTLOCKUP [ 427.575855][T13970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.575875][T13970] Call Trace: [ 427.575881][T13970] [ 427.575886][T13970] dump_stack_lvl+0x100/0x190 [ 427.575906][T13970] should_fail_ex.cold+0x5/0xa [ 427.575923][T13970] should_failslab+0xc2/0x120 [ 427.575943][T13970] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 427.575960][T13970] ? __d_alloc+0x35/0xa50 [ 427.575979][T13970] __d_alloc+0x35/0xa50 [ 427.575994][T13970] ? __lock_acquire+0x5c0/0x1f40 [ 427.576014][T13970] d_alloc_parallel+0x105/0x14c0 [ 427.576030][T13970] ? lock_acquire+0x1d1/0x380 [ 427.576051][T13970] ? lookup_slow+0x42/0x70 [ 427.576064][T13970] ? __pfx_d_alloc_parallel+0x10/0x10 [ 427.576079][T13970] ? __pfx___might_resched+0x10/0x10 [ 427.576096][T13970] ? find_held_lock+0x2b/0x80 [ 427.576110][T13970] ? __d_lookup+0x25c/0x4a0 [ 427.576125][T13970] ? down_read+0x13b/0x4c0 [ 427.576141][T13970] ? __pfx_down_read+0x10/0x10 [ 427.576159][T13970] __lookup_slow+0x98/0x320 [ 427.576172][T13970] lookup_slow+0x50/0x70 [ 427.576183][T13970] lookup_noperm_positive_unlocked+0xd5/0x110 [ 427.576200][T13970] debugfs_lookup+0xc7/0x150 [ 427.576218][T13970] kvm_dev_ioctl+0xfdc/0x1b50 [ 427.576236][T13970] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 427.576252][T13970] ? xfd_validate_state+0x129/0x190 [ 427.576272][T13970] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 427.576285][T13970] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.576300][T13970] __do_fast_syscall_32+0x13a/0x8b0 [ 427.576318][T13970] do_fast_syscall_32+0x32/0x70 [ 427.576333][T13970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.576348][T13970] RIP: 0023:0xf7f13fec [ 427.576362][T13970] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 427.576367][T13970] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.576379][T13970] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae01 [ 427.576387][T13970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.576393][T13970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.576400][T13970] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.576407][T13970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.576421][T13970] [ 427.859399][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 427.859423][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 427.859485][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 427.859497][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 427.859505][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 427.859515][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 427.859598][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 427.859607][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 427.859617][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 427.859700][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 427.859709][T13977] jffs2: Further such events for this erase block will not be printed [ 427.859718][T13977] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 427.859895][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 427.859904][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 427.859913][T13977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 427.878465][T13977] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 427.878476][T13977] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 428.258053][T13988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.469869][T14002] FAULT_INJECTION: forcing a failure. [ 429.469869][T14002] name failslab, interval 1, probability 0, space 0, times 0 [ 429.469893][T14002] CPU: 3 UID: 0 PID: 14002 Comm: syz.5.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.469909][T14002] Tainted: [L]=SOFTLOCKUP [ 429.469913][T14002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.469920][T14002] Call Trace: [ 429.469924][T14002] [ 429.469929][T14002] dump_stack_lvl+0x100/0x190 [ 429.469948][T14002] should_fail_ex.cold+0x5/0xa [ 429.469964][T14002] should_failslab+0xc2/0x120 [ 429.469996][T14002] __kmalloc_noprof+0xfc/0x840 [ 429.470011][T14002] ? ethnl_default_set_doit+0x178/0x1050 [ 429.470031][T14002] ethnl_default_set_doit+0x178/0x1050 [ 429.470050][T14002] genl_family_rcv_msg_doit+0x214/0x300 [ 429.470070][T14002] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.470089][T14002] ? genl_get_cmd+0x3e7/0x760 [ 429.470110][T14002] ? bpf_lsm_capable+0x9/0x10 [ 429.470120][T14002] ? security_capable+0x80/0x260 [ 429.470138][T14002] ? ns_capable+0xd2/0xf0 [ 429.470156][T14002] genl_rcv_msg+0x560/0x800 [ 429.470169][T14002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.470180][T14002] ? __lock_acquire+0x5c0/0x1f40 [ 429.470196][T14002] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 429.470218][T14002] netlink_rcv_skb+0x159/0x420 [ 429.470235][T14002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.470247][T14002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.470269][T14002] ? netlink_deliver_tap+0x1ae/0xcc0 [ 429.470287][T14002] genl_rcv+0x28/0x40 [ 429.470303][T14002] netlink_unicast+0x585/0x850 [ 429.470321][T14002] ? __pfx_netlink_unicast+0x10/0x10 [ 429.470356][T14002] netlink_sendmsg+0x8b0/0xda0 [ 429.470376][T14002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.470394][T14002] ? apparmor_socket_sendmsg+0x165/0x280 [ 429.470413][T14002] ____sys_sendmsg+0xa4d/0xbe0 [ 429.470427][T14002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.470445][T14002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.470465][T14002] ___sys_sendmsg+0x190/0x1e0 [ 429.470483][T14002] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.470505][T14002] ? find_held_lock+0x2b/0x80 [ 429.470528][T14002] __sys_sendmsg+0x160/0x210 [ 429.470539][T14002] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.470554][T14002] ? __pfx_ksys_write+0x10/0x10 [ 429.470571][T14002] __do_fast_syscall_32+0x13a/0x8b0 [ 429.470586][T14002] ? lockdep_hardirqs_on+0x7d/0x110 [ 429.470601][T14002] do_fast_syscall_32+0x32/0x70 [ 429.470616][T14002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.470630][T14002] RIP: 0023:0xf7fa3fec [ 429.470644][T14002] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 429.470650][T14002] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 429.470662][T14002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 429.470670][T14002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.470676][T14002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.470683][T14002] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.470689][T14002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.470704][T14002] [ 429.635104][ T5595] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 429.651496][T14010] fuse: Unknown parameter 'QI}^¢”¦yVêLz.øʯê' [ 429.663431][ T5881] usb 13-1: new full-speed USB device number 14 using dummy_hcd [ 429.706205][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 429.706230][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 429.706276][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 429.706285][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 429.706295][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 429.706304][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 429.706388][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 429.706397][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 429.706407][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 429.706479][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 429.706487][T14013] jffs2: Further such events for this erase block will not be printed [ 429.706495][T14013] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 429.706678][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 429.706688][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 429.706698][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 429.714428][T14013] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 429.714438][T14013] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 429.803557][ T5595] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 429.804604][ T5595] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.839382][ T5881] usb 13-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 429.859385][ T5881] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.859583][ T5881] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 429.859777][ T5881] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.990600][ T5881] usb 13-1: config 0 descriptor?? [ 430.081512][T14015] tipc: Can't bind to reserved service type 2 [ 430.120581][ T5881] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 430.121057][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 430.672300][ T5881] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 430.735891][ T5881] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 430.736182][ T5881] usb 13-1: media controller created [ 430.942067][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.150244][ T5595] cdc_acm 14-1:1.0: ttyACM0: USB ACM device [ 431.197112][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 431.197182][ T5881] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 431.201648][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input12 [ 431.206929][ T5881] dvb-usb: schedule remote query interval to 150 msecs. [ 431.206941][ T5881] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 431.364110][ T5881] dvb-usb: bulk message failed: -22 (1/0) [ 431.364136][ T5881] dvb-usb: error while querying for an remote control event. [ 431.386057][ T5881] usb 13-1: USB disconnect, device number 14 [ 431.417336][ T5881] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 431.478344][T13998] fuse: fd is not a fuse device [ 431.479029][ T5809] usb 14-1: USB disconnect, device number 4 [ 431.563521][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 431.563657][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 431.563875][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 431.563911][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 431.563945][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 431.564175][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 431.564982][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 431.564993][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 431.565003][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 431.568850][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 431.568947][T14030] jffs2: Further such events for this erase block will not be printed [ 431.568956][T14030] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 431.570194][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 431.570260][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 431.570368][T14030] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 431.686887][T14030] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 431.686900][T14030] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 432.312001][T14034] FAULT_INJECTION: forcing a failure. [ 432.312001][T14034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.312033][T14034] CPU: 3 UID: 0 PID: 14034 Comm: syz.9.2327 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.312057][T14034] Tainted: [L]=SOFTLOCKUP [ 432.312064][T14034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.312075][T14034] Call Trace: [ 432.312081][T14034] [ 432.312088][T14034] dump_stack_lvl+0x100/0x190 [ 432.312122][T14034] should_fail_ex.cold+0x5/0xa [ 432.312141][T14034] ? prepare_alloc_pages+0x16d/0x5b0 [ 432.312169][T14034] should_fail_alloc_page+0xeb/0x140 [ 432.312194][T14034] prepare_alloc_pages+0x1f0/0x5b0 [ 432.312217][T14034] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 432.312244][T14034] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 432.312270][T14034] ? __lock_acquire+0x5c0/0x1f40 [ 432.312301][T14034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 432.312321][T14034] ? __lock_acquire+0x5c0/0x1f40 [ 432.312362][T14034] ? __pfx___css_rstat_updated+0x10/0x10 [ 432.312399][T14034] ? __lock_acquire+0x5c0/0x1f40 [ 432.312421][T14034] ? find_held_lock+0x2b/0x80 [ 432.312434][T14034] ? rcu_read_unlock+0x17/0x60 [ 432.312446][T14034] ? rcu_read_unlock+0x17/0x60 [ 432.312459][T14034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.312477][T14034] ? policy_nodemask+0xed/0x4f0 [ 432.312495][T14034] alloc_pages_mpol+0x201/0x550 [ 432.312513][T14034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 432.312535][T14034] alloc_pages_noprof+0x1a/0x160 [ 432.312547][T14034] pgd_alloc+0x4d/0x630 [ 432.312562][T14034] ? mutex_init_lockdep+0xf1/0x120 [ 432.312581][T14034] mm_init+0x6a3/0xeb0 [ 432.312599][T14034] mm_alloc+0x47/0x60 [ 432.312617][T14034] alloc_bprm+0x2c0/0x9e0 [ 432.312632][T14034] do_execveat_common.isra.0+0x19c/0x580 [ 432.312646][T14034] ? do_getname+0x191/0x390 [ 432.312658][T14034] __ia32_compat_sys_execveat+0xe4/0x130 [ 432.312674][T14034] __do_fast_syscall_32+0x13a/0x8b0 [ 432.312688][T14034] ? lockdep_hardirqs_on+0x7d/0x110 [ 432.312703][T14034] do_fast_syscall_32+0x32/0x70 [ 432.312731][T14034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.312746][T14034] RIP: 0023:0xf7f13fec [ 432.312761][T14034] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 432.312766][T14034] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 432.312778][T14034] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 432.312785][T14034] RDX: 0000000000000000 RSI: 0000000080000940 RDI: 0000000000000000 [ 432.312792][T14034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.312799][T14034] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 432.312805][T14034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.312819][T14034] [ 432.831878][T14037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.031542][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.008768][T14056] __nla_validate_parse: 26 callbacks suppressed [ 434.008785][T14056] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2333'. [ 434.143552][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 434.143574][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 434.143618][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 434.143628][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 434.143638][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 434.143647][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 434.143729][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 434.143738][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 434.143748][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 434.143819][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 434.143827][T14063] jffs2: Further such events for this erase block will not be printed [ 434.143835][T14063] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 434.144005][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 434.144058][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 434.144069][T14063] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 434.151273][T14063] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 434.151285][T14063] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 434.611751][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 434.611774][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 434.611818][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 434.611832][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 434.611841][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 434.611850][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 434.611972][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 434.611983][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 434.611993][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 434.612068][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 434.612077][T14070] jffs2: Further such events for this erase block will not be printed [ 434.612085][T14070] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 434.612256][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 434.612265][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 434.612274][T14070] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 434.634685][T14070] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 434.634700][T14070] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 435.001728][T14074] FAULT_INJECTION: forcing a failure. [ 435.001728][T14074] name failslab, interval 1, probability 0, space 0, times 0 [ 435.001754][T14074] CPU: 3 UID: 0 PID: 14074 Comm: syz.9.2338 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.001770][T14074] Tainted: [L]=SOFTLOCKUP [ 435.001774][T14074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.001781][T14074] Call Trace: [ 435.001786][T14074] [ 435.001791][T14074] dump_stack_lvl+0x100/0x190 [ 435.001811][T14074] should_fail_ex.cold+0x5/0xa [ 435.001828][T14074] should_failslab+0xc2/0x120 [ 435.001860][T14074] __kmalloc_noprof+0xfc/0x840 [ 435.001882][T14074] ? udpv6_init_sock+0x24e/0x450 [ 435.001904][T14074] udpv6_init_sock+0x24e/0x450 [ 435.001924][T14074] ? __pfx_udpv6_init_sock+0x10/0x10 [ 435.001963][T14074] inet6_create+0xb1a/0x12b0 [ 435.001991][T14074] ? inet6_create+0x7f/0x12b0 [ 435.002021][T14074] __sock_create+0x339/0x860 [ 435.002050][T14074] __sys_socket+0x14d/0x260 [ 435.002074][T14074] ? fput+0x7c/0x100 [ 435.002099][T14074] ? __pfx___sys_socket+0x10/0x10 [ 435.002123][T14074] ? ksys_write+0x1ac/0x250 [ 435.002139][T14074] ? __pfx_ksys_write+0x10/0x10 [ 435.002156][T14074] __ia32_sys_socket+0x72/0xb0 [ 435.002170][T14074] ? lockdep_hardirqs_on+0x7d/0x110 [ 435.002185][T14074] __do_fast_syscall_32+0x13a/0x8b0 [ 435.002201][T14074] do_fast_syscall_32+0x32/0x70 [ 435.002234][T14074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.002250][T14074] RIP: 0023:0xf7f13fec [ 435.002264][T14074] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 435.002269][T14074] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 435.002281][T14074] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 435.002289][T14074] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.002296][T14074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.002303][T14074] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 435.002311][T14074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.002326][T14074] [ 435.425645][T14084] fuse: Bad value for 'fd' [ 435.427470][T14084] 9pnet_virtio: no channels available for device syz [ 435.485980][T14086] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 435.486300][T14086] device-mapper: ioctl: The device has no table. [ 435.771864][T14100] FAULT_INJECTION: forcing a failure. [ 435.771864][T14100] name failslab, interval 1, probability 0, space 0, times 0 [ 435.771926][T14100] CPU: 1 UID: 0 PID: 14100 Comm: syz.5.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.771944][T14100] Tainted: [L]=SOFTLOCKUP [ 435.771949][T14100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.771955][T14100] Call Trace: [ 435.771960][T14100] [ 435.771965][T14100] dump_stack_lvl+0x100/0x190 [ 435.771984][T14100] should_fail_ex.cold+0x5/0xa [ 435.771999][T14100] should_failslab+0xc2/0x120 [ 435.772030][T14100] kmem_cache_alloc_noprof+0x92/0x6a0 [ 435.772046][T14100] ? fuse_request_alloc+0x22/0x200 [ 435.772065][T14100] fuse_request_alloc+0x22/0x200 [ 435.772081][T14100] fuse_get_req+0x20a/0x400 [ 435.772096][T14100] ? from_kgid+0x8f/0xd0 [ 435.772113][T14100] ? __pfx_fuse_get_req+0x10/0x10 [ 435.772130][T14100] ? from_kgid+0x8f/0xd0 [ 435.772146][T14100] ? __pfx_from_kgid+0x10/0x10 [ 435.772163][T14100] ? __pfx_make_vfsuid+0x10/0x10 [ 435.772178][T14100] fuse_chan_send+0x259/0x9c0 [ 435.772197][T14100] __fuse_simple_request+0x18e/0x1e0 [ 435.772216][T14100] fuse_do_setattr+0xe79/0x1c70 [ 435.772236][T14100] ? __pfx_fuse_do_setattr+0x10/0x10 [ 435.772252][T14100] ? __pfx___schedule+0x10/0x10 [ 435.772268][T14100] ? irqentry_exit+0x24d/0xa10 [ 435.772280][T14100] ? lockdep_hardirqs_on+0x7d/0x110 [ 435.772307][T14100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.772326][T14100] fuse_setattr+0x2d9/0x630 [ 435.772343][T14100] ? __pfx_fuse_setattr+0x10/0x10 [ 435.772357][T14100] notify_change+0xb25/0x1330 [ 435.772375][T14100] chown_common+0x51e/0x6e0 [ 435.772394][T14100] ? __pfx_chown_common+0x10/0x10 [ 435.772410][T14100] ? mnt_get_write_access+0x52/0x2f0 [ 435.772422][T14100] ? mnt_get_write_access+0x52/0x2f0 [ 435.772437][T14100] ? mnt_get_write_access+0x1ec/0x2f0 [ 435.772451][T14100] do_fchownat+0x18e/0x1f0 [ 435.772467][T14100] ? __pfx_do_fchownat+0x10/0x10 [ 435.772488][T14100] __ia32_sys_fchownat+0xba/0x150 [ 435.772504][T14100] ? lockdep_hardirqs_on+0x7d/0x110 [ 435.772517][T14100] __do_fast_syscall_32+0x13a/0x8b0 [ 435.772531][T14100] ? lockdep_hardirqs_on+0x7d/0x110 [ 435.772545][T14100] do_fast_syscall_32+0x32/0x70 [ 435.772560][T14100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.772574][T14100] RIP: 0023:0xf7fa3fec [ 435.772589][T14100] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 435.772594][T14100] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 000000000000012a [ 435.772606][T14100] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 435.772613][T14100] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000001000 [ 435.772620][T14100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.772626][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.772633][T14100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.772647][T14100] [ 435.872287][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2347'. [ 436.316582][T14111] FAULT_INJECTION: forcing a failure. [ 436.316582][T14111] name failslab, interval 1, probability 0, space 0, times 0 [ 436.316611][T14111] CPU: 3 UID: 0 PID: 14111 Comm: syz.4.2348 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.316635][T14111] Tainted: [L]=SOFTLOCKUP [ 436.316642][T14111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.316652][T14111] Call Trace: [ 436.316658][T14111] [ 436.316664][T14111] dump_stack_lvl+0x100/0x190 [ 436.316689][T14111] should_fail_ex.cold+0x5/0xa [ 436.316710][T14111] should_failslab+0xc2/0x120 [ 436.316754][T14111] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 436.316776][T14111] ? __d_alloc+0x35/0xa50 [ 436.316802][T14111] __d_alloc+0x35/0xa50 [ 436.316822][T14111] ? __lock_acquire+0x5c0/0x1f40 [ 436.316846][T14111] d_alloc_parallel+0x105/0x14c0 [ 436.316868][T14111] ? lock_acquire+0x1d1/0x380 [ 436.316889][T14111] ? lookup_slow+0x42/0x70 [ 436.316903][T14111] ? __pfx_d_alloc_parallel+0x10/0x10 [ 436.316920][T14111] ? __pfx___might_resched+0x10/0x10 [ 436.316939][T14111] ? find_held_lock+0x2b/0x80 [ 436.316956][T14111] ? __d_lookup+0x25c/0x4a0 [ 436.316975][T14111] ? down_read+0x13b/0x4c0 [ 436.316996][T14111] ? __pfx_down_read+0x10/0x10 [ 436.317017][T14111] __lookup_slow+0x98/0x320 [ 436.317033][T14111] lookup_slow+0x50/0x70 [ 436.317048][T14111] lookup_noperm_positive_unlocked+0xd5/0x110 [ 436.317070][T14111] debugfs_lookup+0xc7/0x150 [ 436.317094][T14111] kvm_dev_ioctl+0xfdc/0x1b50 [ 436.317118][T14111] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 436.317138][T14111] ? xfd_validate_state+0x129/0x190 [ 436.317165][T14111] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 436.317181][T14111] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 436.317200][T14111] __do_fast_syscall_32+0x13a/0x8b0 [ 436.317222][T14111] do_fast_syscall_32+0x32/0x70 [ 436.317241][T14111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 436.317261][T14111] RIP: 0023:0xf7f35fec [ 436.317278][T14111] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 436.317285][T14111] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 436.317303][T14111] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae01 [ 436.317314][T14111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 436.317324][T14111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.317333][T14111] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 436.317342][T14111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.317362][T14111] [ 437.045666][T14095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.517076][T14138] FAULT_INJECTION: forcing a failure. [ 437.517076][T14138] name failslab, interval 1, probability 0, space 0, times 0 [ 437.517100][T14138] CPU: 2 UID: 0 PID: 14138 Comm: syz.9.2357 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.517118][T14138] Tainted: [L]=SOFTLOCKUP [ 437.517123][T14138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.517130][T14138] Call Trace: [ 437.517135][T14138] [ 437.517140][T14138] dump_stack_lvl+0x100/0x190 [ 437.517160][T14138] should_fail_ex.cold+0x5/0xa [ 437.517176][T14138] should_failslab+0xc2/0x120 [ 437.517195][T14138] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 437.517213][T14138] ? __d_alloc+0x35/0xa50 [ 437.517231][T14138] __d_alloc+0x35/0xa50 [ 437.517247][T14138] ? __lock_acquire+0x5c0/0x1f40 [ 437.517266][T14138] d_alloc_parallel+0x105/0x14c0 [ 437.517283][T14138] ? lock_acquire+0x1d1/0x380 [ 437.517299][T14138] ? lookup_slow+0x42/0x70 [ 437.517310][T14138] ? __pfx_d_alloc_parallel+0x10/0x10 [ 437.517323][T14138] ? __pfx___might_resched+0x10/0x10 [ 437.517338][T14138] ? find_held_lock+0x2b/0x80 [ 437.517351][T14138] ? __d_lookup+0x25c/0x4a0 [ 437.517365][T14138] ? down_read+0x13b/0x4c0 [ 437.517381][T14138] ? __pfx_down_read+0x10/0x10 [ 437.517397][T14138] __lookup_slow+0x98/0x320 [ 437.517410][T14138] lookup_slow+0x50/0x70 [ 437.517421][T14138] lookup_noperm_positive_unlocked+0xd5/0x110 [ 437.517438][T14138] debugfs_lookup+0xc7/0x150 [ 437.517456][T14138] kvm_dev_ioctl+0xfdc/0x1b50 [ 437.517474][T14138] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 437.517488][T14138] ? xfd_validate_state+0x129/0x190 [ 437.517509][T14138] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 437.517522][T14138] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 437.517537][T14138] __do_fast_syscall_32+0x13a/0x8b0 [ 437.517554][T14138] do_fast_syscall_32+0x32/0x70 [ 437.517570][T14138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.517585][T14138] RIP: 0023:0xf7f13fec [ 437.517599][T14138] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 437.517604][T14138] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 437.517616][T14138] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01 [ 437.517624][T14138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.517630][T14138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.517637][T14138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 437.517644][T14138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.517659][T14138] [ 438.710871][T14159] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2362'. [ 438.711118][T14159] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2362'. [ 439.316495][T14178] ublk_ctrl_add_dev: dev id not match 4294967295 1 [ 439.379557][T14188] FAULT_INJECTION: forcing a failure. [ 439.379557][T14188] name failslab, interval 1, probability 0, space 0, times 0 [ 439.379580][T14188] CPU: 0 UID: 0 PID: 14188 Comm: syz.4.2371 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.379596][T14188] Tainted: [L]=SOFTLOCKUP [ 439.379601][T14188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.379608][T14188] Call Trace: [ 439.379613][T14188] [ 439.379618][T14188] dump_stack_lvl+0x100/0x190 [ 439.379638][T14188] should_fail_ex.cold+0x5/0xa [ 439.379653][T14188] should_failslab+0xc2/0x120 [ 439.379671][T14188] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 439.379688][T14188] ? find_held_lock+0x2b/0x80 [ 439.379703][T14188] ? __d_alloc+0x35/0xa50 [ 439.379722][T14188] __d_alloc+0x35/0xa50 [ 439.379740][T14188] d_alloc_pseudo+0x1c/0xc0 [ 439.379752][T14188] alloc_file_pseudo+0x118/0x290 [ 439.379771][T14188] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 439.379804][T14188] ? alloc_fd+0x471/0x7a0 [ 439.379822][T14188] sock_alloc_file+0x50/0x210 [ 439.379835][T14188] __sys_socket+0x1c0/0x260 [ 439.379852][T14188] ? xfd_validate_state+0x129/0x190 [ 439.379870][T14188] ? __pfx___sys_socket+0x10/0x10 [ 439.379891][T14188] __ia32_sys_socket+0x72/0xb0 [ 439.379906][T14188] ? lockdep_hardirqs_on+0x7d/0x110 [ 439.379920][T14188] __do_fast_syscall_32+0x13a/0x8b0 [ 439.379936][T14188] do_fast_syscall_32+0x32/0x70 [ 439.379952][T14188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.379967][T14188] RIP: 0023:0xf7f35fec [ 439.379980][T14188] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 439.379986][T14188] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 439.379998][T14188] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000003 [ 439.380009][T14188] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.380019][T14188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.380029][T14188] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 439.380039][T14188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.380061][T14188] [ 439.388239][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 439.388250][ T43] audit: type=1326 audit(1790570773.243:10646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14180 comm="syz.8.2369" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 439.496938][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.792884][T13373] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 439.945077][T13373] usb 10-1: unable to get BOS descriptor or descriptor too short [ 439.945559][T13373] usb 10-1: not running at top speed; connect to a high speed hub [ 439.945576][T13373] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.946447][T13373] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 439.948243][T13373] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.948257][T13373] usb 10-1: Product: syz [ 439.948266][T13373] usb 10-1: Manufacturer: syz [ 439.948275][T13373] usb 10-1: SerialNumber: syz [ 439.951057][T14195] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.174826][T14195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.175873][T14195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.247985][T13373] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 440.251192][T13373] usb 10-1: USB disconnect, device number 30 [ 440.607282][T14211] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 440.614487][T14214] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 441.316139][T14223] 9pnet_virtio: no channels available for device syz [ 441.638735][ T1164] IPVS: starting estimator thread 0... [ 441.733209][T14238] IPVS: using max 42 ests per chain, 100800 per kthread [ 441.779721][T14241] FAULT_INJECTION: forcing a failure. [ 441.779721][T14241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.779754][T14241] CPU: 2 UID: 0 PID: 14241 Comm: syz.9.2386 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.779774][T14241] Tainted: [L]=SOFTLOCKUP [ 441.779778][T14241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.779785][T14241] Call Trace: [ 441.779790][T14241] [ 441.779794][T14241] dump_stack_lvl+0x100/0x190 [ 441.779814][T14241] should_fail_ex.cold+0x5/0xa [ 441.779830][T14241] _copy_from_user+0x2e/0xd0 [ 441.779851][T14241] kstrtouint_from_user+0xd6/0x1d0 [ 441.779867][T14241] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 441.779882][T14241] ? lock_acquire+0x1d1/0x380 [ 441.779902][T14241] proc_fail_nth_write+0x83/0x220 [ 441.779918][T14241] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 441.779940][T14241] vfs_write+0x2aa/0x1050 [ 441.779955][T14241] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 441.779968][T14241] ? lock_acquire+0x1d1/0x380 [ 441.779984][T14241] ? __fget_files+0x34/0x3d0 [ 441.779998][T14241] ? __pfx_vfs_write+0x10/0x10 [ 441.780010][T14241] ? find_held_lock+0x2b/0x80 [ 441.780024][T14241] ? __fget_files+0x215/0x3d0 [ 441.780041][T14241] ? __fget_files+0x21f/0x3d0 [ 441.780059][T14241] ksys_write+0x12a/0x250 [ 441.780072][T14241] ? __pfx_ksys_write+0x10/0x10 [ 441.780090][T14241] do_int80_emulation+0x166/0x650 [ 441.780106][T14241] asm_int80_emulation+0x1a/0x20 [ 441.780121][T14241] RIP: 0023:0xf71175ab [ 441.780133][T14241] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 441.780157][T14241] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 441.780170][T14241] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53d65d0 [ 441.780177][T14241] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.780183][T14241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.780190][T14241] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 441.780196][T14241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.780211][T14241] [ 442.047823][T14252] FAULT_INJECTION: forcing a failure. [ 442.047823][T14252] name failslab, interval 1, probability 0, space 0, times 0 [ 442.047846][T14252] CPU: 2 UID: 0 PID: 14252 Comm: syz.4.2390 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.047862][T14252] Tainted: [L]=SOFTLOCKUP [ 442.047866][T14252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.047873][T14252] Call Trace: [ 442.047877][T14252] [ 442.047882][T14252] dump_stack_lvl+0x100/0x190 [ 442.047901][T14252] should_fail_ex.cold+0x5/0xa [ 442.047916][T14252] should_failslab+0xc2/0x120 [ 442.047933][T14252] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 442.047950][T14252] ? key_alloc+0x423/0x1310 [ 442.047965][T14252] kmemdup_noprof+0x29/0x60 [ 442.047977][T14252] key_alloc+0x423/0x1310 [ 442.047993][T14252] ? __kmalloc_noprof+0x350/0x840 [ 442.048007][T14252] ? __pfx_key_alloc+0x10/0x10 [ 442.048023][T14252] keyring_alloc+0x44/0xc0 [ 442.048038][T14252] lookup_user_key+0x9b8/0x1300 [ 442.048052][T14252] ? __pfx_lookup_user_key+0x10/0x10 [ 442.048067][T14252] ? lock_acquire+0x1d1/0x380 [ 442.048085][T14252] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 442.048110][T14252] __do_sys_add_key+0x2a6/0x460 [ 442.048126][T14252] ? __pfx___do_sys_add_key+0x10/0x10 [ 442.048141][T14252] ? fput+0x7c/0x100 [ 442.048157][T14252] ? __pfx_ksys_write+0x10/0x10 [ 442.048173][T14252] __do_fast_syscall_32+0x13a/0x8b0 [ 442.048188][T14252] ? lockdep_hardirqs_on+0x7d/0x110 [ 442.048202][T14252] do_fast_syscall_32+0x32/0x70 [ 442.048216][T14252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.048230][T14252] RIP: 0023:0xf7f35fec [ 442.048243][T14252] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 442.048249][T14252] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 442.048260][T14252] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 442.048267][T14252] RDX: 00000000800003c0 RSI: 00000000000000d4 RDI: 00000000ffffffff [ 442.048274][T14252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.048281][T14252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.048288][T14252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.048302][T14252] [ 442.133340][T14254] netlink: 'syz.4.2391': attribute type 21 has an invalid length. [ 442.133356][T14254] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.133515][T14254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.133521][T14254] IPv6: NLM_F_CREATE should be set when creating new route [ 442.133540][T14254] IPv6: NLM_F_CREATE should be set when creating new route [ 442.133551][T14254] IPv6: NLM_F_CREATE should be set when creating new route [ 442.429060][T14261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.226134][T14263] 9pnet_virtio: no channels available for device syz [ 443.229847][T14263] gadgetfs: bound to dummy_udc driver [ 443.661121][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 443.661143][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 443.661184][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 443.661193][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 443.661201][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 443.661210][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 443.661283][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 443.661292][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 443.661301][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 443.661368][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 443.661376][T14277] jffs2: Further such events for this erase block will not be printed [ 443.661384][T14277] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 443.661550][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 443.661559][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 443.661567][T14277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 443.669143][T14277] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 443.669153][T14277] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 443.670050][T14277] FAULT_INJECTION: forcing a failure. [ 443.670050][T14277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.670068][T14277] CPU: 1 UID: 0 PID: 14277 Comm: syz.4.2399 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.670090][T14277] Tainted: [L]=SOFTLOCKUP [ 443.670095][T14277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.670102][T14277] Call Trace: [ 443.670107][T14277] [ 443.670112][T14277] dump_stack_lvl+0x100/0x190 [ 443.670131][T14277] should_fail_ex.cold+0x5/0xa [ 443.670146][T14277] _copy_to_user+0x32/0xd0 [ 443.670164][T14277] simple_read_from_buffer+0xcb/0x170 [ 443.670180][T14277] proc_fail_nth_read+0x1af/0x230 [ 443.670195][T14277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.670209][T14277] ? rw_verify_area+0xce/0x6d0 [ 443.670221][T14277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.670234][T14277] vfs_read+0x1e4/0xb40 [ 443.670248][T14277] ? lock_acquire+0x1d1/0x380 [ 443.670264][T14277] ? __fget_files+0x34/0x3d0 [ 443.670279][T14277] ? __pfx_vfs_read+0x10/0x10 [ 443.670291][T14277] ? find_held_lock+0x2b/0x80 [ 443.670304][T14277] ? __fget_files+0x215/0x3d0 [ 443.670321][T14277] ? __fget_files+0x21f/0x3d0 [ 443.670338][T14277] ksys_read+0x12a/0x250 [ 443.670351][T14277] ? __pfx_ksys_read+0x10/0x10 [ 443.670368][T14277] do_int80_emulation+0x166/0x650 [ 443.670385][T14277] asm_int80_emulation+0x1a/0x20 [ 443.670396][T14277] RIP: 0023:0xf71375ab [ 443.670406][T14277] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 443.670417][T14277] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 443.670428][T14277] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53f65d0 [ 443.670436][T14277] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 443.670442][T14277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.670448][T14277] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 443.670455][T14277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.670469][T14277] [ 443.701547][T14279] FAULT_INJECTION: forcing a failure. [ 443.701547][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 443.701567][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.9.2400 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.701583][T14279] Tainted: [L]=SOFTLOCKUP [ 443.701587][T14279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.701594][T14279] Call Trace: [ 443.701598][T14279] [ 443.701603][T14279] dump_stack_lvl+0x100/0x190 [ 443.701622][T14279] should_fail_ex.cold+0x5/0xa [ 443.701637][T14279] should_failslab+0xc2/0x120 [ 443.701654][T14279] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 443.701670][T14279] ? __alloc_skb+0x140/0x710 [ 443.701690][T14279] __alloc_skb+0x140/0x710 [ 443.701706][T14279] ? __alloc_skb+0x5b7/0x710 [ 443.701722][T14279] ? __pfx___alloc_skb+0x10/0x10 [ 443.701744][T14279] netlink_dump+0x194/0xd00 [ 443.701761][T14279] ? __pfx_netlink_dump+0x10/0x10 [ 443.701781][T14279] ? __asan_memset+0x23/0x50 [ 443.701794][T14279] ? genl_start+0x67a/0x970 [ 443.701807][T14279] __netlink_dump_start+0x6d6/0x990 [ 443.701825][T14279] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 443.701838][T14279] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 443.701849][T14279] ? consume_skb+0xd6/0x110 [ 443.701863][T14279] ? rcu_is_watching+0x13/0xc0 [ 443.701876][T14279] ? __pfx_genl_start+0x10/0x10 [ 443.701885][T14279] ? __pfx_genl_dumpit+0x10/0x10 [ 443.701895][T14279] ? __pfx_genl_done+0x10/0x10 [ 443.701906][T14279] ? bpf_lsm_capable+0x9/0x10 [ 443.701917][T14279] ? security_capable+0x80/0x260 [ 443.701937][T14279] genl_rcv_msg+0x471/0x800 [ 443.701949][T14279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.701960][T14279] ? __lock_acquire+0x5c0/0x1f40 [ 443.701977][T14279] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 443.701998][T14279] netlink_rcv_skb+0x159/0x420 [ 443.702028][T14279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.702041][T14279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.702064][T14279] ? netlink_deliver_tap+0x1ae/0xcc0 [ 443.702086][T14279] genl_rcv+0x28/0x40 [ 443.702102][T14279] netlink_unicast+0x585/0x850 [ 443.702121][T14279] ? __pfx_netlink_unicast+0x10/0x10 [ 443.702142][T14279] netlink_sendmsg+0x8b0/0xda0 [ 443.702161][T14279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.702179][T14279] ? apparmor_socket_sendmsg+0x165/0x280 [ 443.702198][T14279] ____sys_sendmsg+0xa4d/0xbe0 [ 443.702212][T14279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.702229][T14279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.702250][T14279] ___sys_sendmsg+0x190/0x1e0 [ 443.702265][T14279] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.702287][T14279] ? find_held_lock+0x2b/0x80 [ 443.702310][T14279] __sys_sendmsg+0x160/0x210 [ 443.702321][T14279] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.702336][T14279] ? __pfx_ksys_write+0x10/0x10 [ 443.702352][T14279] __do_fast_syscall_32+0x13a/0x8b0 [ 443.702367][T14279] ? lockdep_hardirqs_on+0x7d/0x110 [ 443.702381][T14279] do_fast_syscall_32+0x32/0x70 [ 443.702396][T14279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.702411][T14279] RIP: 0023:0xf7f13fec [ 443.702424][T14279] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 443.702429][T14279] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 443.702440][T14279] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 443.702447][T14279] RDX: 0000000004044810 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.702454][T14279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.702461][T14279] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 443.702467][T14279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.702482][T14279] [ 444.002986][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 444.180796][ T10] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 444.181603][ T10] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 444.181619][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 444.186320][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.186336][ T10] usb 9-1: Product: syz [ 444.186344][ T10] usb 9-1: Manufacturer: syz [ 444.186353][ T10] usb 9-1: SerialNumber: syz [ 444.189471][ T10] usb 9-1: config 0 descriptor?? [ 444.192009][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 444.423159][T14296] 9pnet_virtio: no channels available for device syz [ 445.041254][T14303] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 445.216271][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 445.216295][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 445.216340][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 445.216350][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 445.216360][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 445.216369][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 445.216454][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 445.216464][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 445.216474][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 445.216545][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 445.216554][T14311] jffs2: Further such events for this erase block will not be printed [ 445.216562][T14311] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 445.216834][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 445.216846][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 445.216857][T14311] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 445.225503][T14311] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 445.225513][T14311] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 445.282338][T14312] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 445.543188][ T10] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 445.698015][ T10] usb 14-1: not running at top speed; connect to a high speed hub [ 445.698047][ T10] usb 14-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 445.699350][ T10] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.699405][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.706773][ T10] cyberjack 14-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 445.719198][ T10] usb 14-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 445.993484][T14316] FAULT_INJECTION: forcing a failure. [ 445.993484][T14316] name failslab, interval 1, probability 0, space 0, times 0 [ 445.993574][T14316] CPU: 1 UID: 0 PID: 14316 Comm: syz.9.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.993591][T14316] Tainted: [L]=SOFTLOCKUP [ 445.993595][T14316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.993602][T14316] Call Trace: [ 445.993620][T14316] [ 445.993626][T14316] dump_stack_lvl+0x100/0x190 [ 445.993645][T14316] should_fail_ex.cold+0x5/0xa [ 445.993661][T14316] should_failslab+0xc2/0x120 [ 445.993678][T14316] __kmalloc_noprof+0xfc/0x840 [ 445.993772][T14316] ? rcu_is_watching+0x13/0xc0 [ 445.993787][T14316] ? tomoyo_realpath_from_path+0xb6/0x690 [ 445.993805][T14316] tomoyo_realpath_from_path+0xb6/0x690 [ 445.993823][T14316] tomoyo_check_open_permission+0x2af/0x3c0 [ 445.993836][T14316] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 445.993866][T14316] ? hook_file_open+0x248/0x8e0 [ 445.993878][T14316] ? __pfx___schedule+0x10/0x10 [ 445.993903][T14316] tomoyo_file_open+0x6b/0x90 [ 445.993920][T14316] security_file_open+0xb5/0x1e0 [ 445.993933][T14316] do_dentry_open+0x588/0x14d0 [ 445.993952][T14316] vfs_open+0x82/0x3f0 [ 445.993971][T14316] path_openat+0x19fa/0x2440 [ 445.993989][T14316] ? __pfx_path_openat+0x10/0x10 [ 445.994012][T14316] do_file_open+0x20e/0x430 [ 445.994028][T14316] ? __pfx_do_file_open+0x10/0x10 [ 445.994043][T14316] ? __pfx___schedule+0x10/0x10 [ 445.994064][T14316] ? _raw_spin_unlock+0x28/0x50 [ 445.994075][T14316] ? alloc_fd+0x471/0x7a0 [ 445.994100][T14316] do_sys_openat2+0x10f/0x1e0 [ 445.994130][T14316] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.994158][T14316] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 445.994185][T14316] __ia32_compat_sys_openat+0x12d/0x210 [ 445.994198][T14316] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 445.994209][T14316] ? fput+0x7c/0x100 [ 445.994225][T14316] ? ksys_write+0x1ac/0x250 [ 445.994241][T14316] ? __pfx_ksys_write+0x10/0x10 [ 445.994257][T14316] __do_fast_syscall_32+0x13a/0x8b0 [ 445.994272][T14316] ? lockdep_hardirqs_on+0x7d/0x110 [ 445.994286][T14316] do_fast_syscall_32+0x32/0x70 [ 445.994301][T14316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.994316][T14316] RIP: 0023:0xf7f13fec [ 445.994333][T14316] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 445.994338][T14316] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 445.994350][T14316] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 445.994358][T14316] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.994364][T14316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.994371][T14316] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.994378][T14316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.994396][T14316] [ 445.994511][T14316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.024025][ T5809] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 446.252573][ T5880] usb 14-1: USB disconnect, device number 5 [ 446.302898][ T5880] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 446.303029][ T5809] usb 13-1: Using ep0 maxpacket: 8 [ 446.306826][ T5809] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.308919][ T5880] cyberjack 14-1:1.0: device disconnected [ 446.311351][ T5809] usb 13-1: config 0 has no interfaces? [ 446.311387][ T5809] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.318050][ T5809] usb 13-1: config 0 descriptor?? [ 446.449784][T14334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.550884][ T7463] usb 13-1: USB disconnect, device number 15 [ 446.794087][ T5809] usb 9-1: USB disconnect, device number 30 [ 447.065807][T14344] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 447.070836][T14341] 9pnet_virtio: no channels available for device syz [ 447.076827][T14341] gadgetfs: bound to dummy_udc driver [ 447.294729][ T10] libceph: connect (1)[c::]:6789 error -101 [ 447.294840][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 447.332903][ T5880] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 447.333102][ C1] gadgetfs: connected [ 447.334336][T14350] 9pnet_virtio: no channels available for device syz [ 447.335249][ T5880] gadgetfs: disconnected [ 447.340962][T14350] tipc: Enabling of bearer rejected, failed to enable media [ 447.405247][T14352] Bluetooth: MGMT ver 1.23 [ 447.405293][T14352] FAULT_INJECTION: forcing a failure. [ 447.405293][T14352] name failslab, interval 1, probability 0, space 0, times 0 [ 447.405319][T14352] CPU: 1 UID: 0 PID: 14352 Comm: syz.5.2419 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.405342][T14352] Tainted: [L]=SOFTLOCKUP [ 447.405349][T14352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.405361][T14352] Call Trace: [ 447.405367][T14352] [ 447.405375][T14352] dump_stack_lvl+0x100/0x190 [ 447.405405][T14352] should_fail_ex.cold+0x5/0xa [ 447.405431][T14352] should_failslab+0xc2/0x120 [ 447.405459][T14352] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 447.405504][T14352] ? __alloc_skb+0x140/0x710 [ 447.405539][T14352] __alloc_skb+0x140/0x710 [ 447.405565][T14352] ? __alloc_skb+0x5b7/0x710 [ 447.405592][T14352] ? __pfx___alloc_skb+0x10/0x10 [ 447.405619][T14352] ? rcu_is_watching+0x13/0xc0 [ 447.405641][T14352] ? trace_kmalloc+0xeb/0x110 [ 447.405668][T14352] ? __kasan_kmalloc+0xaa/0xb0 [ 447.405699][T14352] mgmt_cmd_complete+0x4f/0x5a0 [ 447.405724][T14352] read_adv_mon_features+0x35b/0x4d0 [ 447.405751][T14352] ? __pfx_read_adv_mon_features+0x10/0x10 [ 447.405782][T14352] ? timer_init_key+0x150/0x310 [ 447.405815][T14352] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 447.405839][T14352] hci_sock_sendmsg+0x1574/0x26a0 [ 447.405866][T14352] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 447.405888][T14352] ? apparmor_socket_sendmsg+0x165/0x280 [ 447.405924][T14352] sock_write_iter+0x53a/0x5b0 [ 447.405948][T14352] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 447.405970][T14352] ? __pfx_sock_write_iter+0x10/0x10 [ 447.406009][T14352] ? bpf_lsm_file_permission+0x9/0x10 [ 447.406037][T14352] ? security_file_permission+0x76/0x210 [ 447.406060][T14352] ? rw_verify_area+0xce/0x6d0 [ 447.406084][T14352] vfs_write+0x6af/0x1050 [ 447.406108][T14352] ? __pfx_sock_write_iter+0x10/0x10 [ 447.406135][T14352] ? __pfx_vfs_write+0x10/0x10 [ 447.406157][T14352] ? find_held_lock+0x2b/0x80 [ 447.406197][T14352] ksys_write+0x1f8/0x250 [ 447.406224][T14352] ? __pfx_ksys_write+0x10/0x10 [ 447.406244][T14352] ? ksys_write+0x1ac/0x250 [ 447.406266][T14352] ? __pfx_ksys_write+0x10/0x10 [ 447.406294][T14352] __do_fast_syscall_32+0x13a/0x8b0 [ 447.406317][T14352] ? lockdep_hardirqs_on+0x7d/0x110 [ 447.406342][T14352] do_fast_syscall_32+0x32/0x70 [ 447.406365][T14352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.406389][T14352] RIP: 0023:0xf7fa3fec [ 447.406409][T14352] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 447.406419][T14352] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 447.406438][T14352] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 447.406450][T14352] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.406461][T14352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.406472][T14352] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 447.406483][T14352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.406509][T14352] [ 447.493412][ C1] gadgetfs: connected [ 447.495419][ T5880] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 447.495727][ T5880] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 447.495758][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.508711][ C1] gadgetfs: configuration #1 [ 447.546855][T14347] ceph: No mds server is up or the cluster is laggy [ 447.573099][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 447.573193][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 447.635643][T14338] gadgetfs: suspended from state 3 [ 447.635685][T14338] gadgetfs: disconnected [ 447.637821][T13373] usb 5-1: USB disconnect, device number 75 [ 448.070013][T14367] FAULT_INJECTION: forcing a failure. [ 448.070013][T14367] name failslab, interval 1, probability 0, space 0, times 0 [ 448.070037][T14367] CPU: 0 UID: 0 PID: 14367 Comm: syz.4.2424 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.070054][T14367] Tainted: [L]=SOFTLOCKUP [ 448.070058][T14367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.070065][T14367] Call Trace: [ 448.070069][T14367] [ 448.070075][T14367] dump_stack_lvl+0x100/0x190 [ 448.070094][T14367] should_fail_ex.cold+0x5/0xa [ 448.070111][T14367] should_failslab+0xc2/0x120 [ 448.070131][T14367] kmem_cache_alloc_noprof+0x92/0x6a0 [ 448.070147][T14367] ? dup_fd+0x4d/0xd10 [ 448.070165][T14367] dup_fd+0x4d/0xd10 [ 448.070179][T14367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 448.070198][T14367] __ia32_sys_close_range+0x405/0x5d0 [ 448.070216][T14367] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 448.070237][T14367] __do_fast_syscall_32+0x13a/0x8b0 [ 448.070254][T14367] do_fast_syscall_32+0x32/0x70 [ 448.070268][T14367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.070283][T14367] RIP: 0023:0xf7f35fec [ 448.070297][T14367] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 448.070302][T14367] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 448.070314][T14367] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 448.070321][T14367] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.070328][T14367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.070335][T14367] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 448.070341][T14367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.070356][T14367] [ 448.321665][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 448.321701][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 448.321767][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 448.321783][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 448.321797][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 448.321811][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 448.321931][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 448.321947][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 448.321962][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 448.322073][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 448.322089][T14372] jffs2: Further such events for this erase block will not be printed [ 448.322109][T14372] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 448.322396][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 448.322413][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 448.322428][T14372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 448.337721][T14372] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 448.337736][T14372] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 448.512856][ T5817] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 448.665535][ T5817] usb 14-1: not running at top speed; connect to a high speed hub [ 448.665565][ T5817] usb 14-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 448.668406][ T5817] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 448.668430][ T5817] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.674731][ T5817] cyberjack 14-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 448.681474][ T5817] usb 14-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 448.931277][T14386] FAULT_INJECTION: forcing a failure. [ 448.931277][T14386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.931308][T14386] CPU: 1 UID: 0 PID: 14386 Comm: syz.8.2430 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.931333][T14386] Tainted: [L]=SOFTLOCKUP [ 448.931339][T14386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.931351][T14386] Call Trace: [ 448.931377][T14386] [ 448.931385][T14386] dump_stack_lvl+0x100/0x190 [ 448.931413][T14386] should_fail_ex.cold+0x5/0xa [ 448.931435][T14386] _copy_from_user+0x2e/0xd0 [ 448.931461][T14386] get_compat_msghdr+0xb3/0x480 [ 448.931483][T14386] ? __pfx_get_compat_msghdr+0x10/0x10 [ 448.931507][T14386] ? _kstrtoull+0x144/0x200 [ 448.931524][T14386] ? __pfx__kstrtoull+0x10/0x10 [ 448.931543][T14386] ___sys_sendmsg+0x1b6/0x1e0 [ 448.931567][T14386] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.931588][T14386] ? __lock_acquire+0x5c0/0x1f40 [ 448.931626][T14386] ? __fget_files+0x34/0x3d0 [ 448.931663][T14386] __sys_sendmmsg+0x309/0x440 [ 448.931684][T14386] ? __pfx___sys_sendmmsg+0x10/0x10 [ 448.931700][T14386] ? find_held_lock+0x2b/0x80 [ 448.931725][T14386] ? __mutex_unlock_slowpath+0x35d/0x930 [ 448.931758][T14386] ? fput+0x7c/0x100 [ 448.931780][T14386] ? ksys_write+0x1ac/0x250 [ 448.931803][T14386] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 448.931824][T14386] ? lockdep_hardirqs_on+0x7d/0x110 [ 448.931844][T14386] __do_fast_syscall_32+0x13a/0x8b0 [ 448.931865][T14386] ? lockdep_hardirqs_on+0x7d/0x110 [ 448.931902][T14386] do_fast_syscall_32+0x32/0x70 [ 448.931923][T14386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.931944][T14386] RIP: 0023:0xf6ffefec [ 448.931962][T14386] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 448.931984][T14386] RSP: 002b:00000000f508950c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 448.932002][T14386] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080003e40 [ 448.932013][T14386] RDX: 00000000fffffe3d RSI: 00000000000000f5 RDI: 0000000000000000 [ 448.932024][T14386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.932034][T14386] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 448.932044][T14386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.932067][T14386] [ 449.147843][ T5880] usb 14-1: USB disconnect, device number 6 [ 449.741628][ T5880] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 449.899896][ T5880] cyberjack 14-1:1.0: device disconnected [ 451.850533][T14399] 9pnet_virtio: no channels available for device syz [ 451.916157][T14398] gadgetfs: bound to dummy_udc driver [ 452.173173][T13373] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 452.173499][ C1] gadgetfs: connected [ 452.173762][T13373] gadgetfs: disconnected [ 452.232698][T14404] FAULT_INJECTION: forcing a failure. [ 452.232698][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 452.233044][T14404] CPU: 0 UID: 0 PID: 14404 Comm: syz.5.2434 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.233062][T14404] Tainted: [L]=SOFTLOCKUP [ 452.233067][T14404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.233074][T14404] Call Trace: [ 452.233079][T14404] [ 452.233084][T14404] dump_stack_lvl+0x100/0x190 [ 452.233105][T14404] should_fail_ex.cold+0x5/0xa [ 452.233120][T14404] should_failslab+0xc2/0x120 [ 452.233139][T14404] kmem_cache_alloc_noprof+0x92/0x6a0 [ 452.233156][T14404] ? dup_fd+0x4d/0xd10 [ 452.233175][T14404] dup_fd+0x4d/0xd10 [ 452.233189][T14404] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 452.233209][T14404] __ia32_sys_close_range+0x405/0x5d0 [ 452.233227][T14404] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 452.233249][T14404] __do_fast_syscall_32+0x13a/0x8b0 [ 452.233266][T14404] do_fast_syscall_32+0x32/0x70 [ 452.233281][T14404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.233296][T14404] RIP: 0023:0xf7fa3fec [ 452.233309][T14404] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 452.233315][T14404] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 452.233327][T14404] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 452.233335][T14404] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.233342][T14404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.233348][T14404] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 452.233355][T14404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.233369][T14404] [ 452.265925][T14393] gadgetfs: suspended from state 2 [ 452.523183][T13373] usb 5-1: device not accepting address 76, error -71 [ 454.080874][T14424] ntfs3(sr0): Primary boot signature is not NTFS. [ 454.091970][T14424] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 454.158361][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 454.158385][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 454.158430][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead [ 454.158439][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000308: 0x0001 instead [ 454.158448][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead [ 454.158457][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead [ 454.158533][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 454.158542][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 454.158550][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 454.158620][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead [ 454.158628][T14430] jffs2: Further such events for this erase block will not be printed [ 454.158636][T14430] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38 [ 454.158807][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 454.158817][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0xe400 instead [ 454.158826][T14430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 454.180297][T14430] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 454.180307][T14430] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 456.051115][T14448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.429646][T14431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.552857][T14440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.376361][T14466] hfs: can't find a HFS filesystem on dev sr0 [ 457.706796][T14474] FAULT_INJECTION: forcing a failure. [ 457.706796][T14474] name failslab, interval 1, probability 0, space 0, times 0 [ 457.706819][T14474] CPU: 2 UID: 0 PID: 14474 Comm: syz.9.2452 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.706835][T14474] Tainted: [L]=SOFTLOCKUP [ 457.706839][T14474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.706846][T14474] Call Trace: [ 457.706850][T14474] [ 457.706856][T14474] dump_stack_lvl+0x100/0x190 [ 457.706877][T14474] should_fail_ex.cold+0x5/0xa [ 457.706894][T14474] should_failslab+0xc2/0x120 [ 457.706913][T14474] __kmalloc_cache_noprof+0x91/0x6d0 [ 457.706947][T14474] ? do_raw_spin_lock+0x128/0x260 [ 457.706960][T14474] ? alloc_fdtable+0xbd/0x2d0 [ 457.706977][T14474] alloc_fdtable+0xbd/0x2d0 [ 457.706994][T14474] dup_fd+0x995/0xd10 [ 457.707015][T14474] __ia32_sys_close_range+0x405/0x5d0 [ 457.707039][T14474] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 457.707061][T14474] __do_fast_syscall_32+0x13a/0x8b0 [ 457.707080][T14474] do_fast_syscall_32+0x32/0x70 [ 457.707096][T14474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.707112][T14474] RIP: 0023:0xf7f13fec [ 457.707125][T14474] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 457.707131][T14474] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 457.707144][T14474] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 457.707152][T14474] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.707160][T14474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.707167][T14474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.707175][T14474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.707191][T14474] [ 458.273898][ T5880] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 458.423921][ T5880] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 458.426625][ T5880] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.426640][ T5880] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 458.426751][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.445776][ T5880] usb 9-1: config 0 descriptor?? [ 458.677890][ T5880] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 458.677973][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 458.692846][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 458.694972][ T5880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 458.695231][ T5880] usb 9-1: media controller created [ 458.698894][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.719523][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 458.720200][ T5880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 458.732152][T14493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.733610][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input13 [ 458.743809][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 458.743823][ T5880] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 459.174163][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 459.174189][ T30] dvb-usb: error while querying for an remote control event. [ 459.182101][ T5880] usb 9-1: USB disconnect, device number 31 [ 459.354470][ T5880] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 459.454840][T14505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.821281][T14512] hfs: can't find a HFS filesystem on dev sr0 [ 460.151713][T14521] FAULT_INJECTION: forcing a failure. [ 460.151713][T14521] name failslab, interval 1, probability 0, space 0, times 0 [ 460.151746][T14521] CPU: 2 UID: 0 PID: 14521 Comm: syz.9.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.151773][T14521] Tainted: [L]=SOFTLOCKUP [ 460.151781][T14521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 460.151791][T14521] Call Trace: [ 460.151798][T14521] [ 460.151808][T14521] dump_stack_lvl+0x100/0x190 [ 460.151840][T14521] should_fail_ex.cold+0x5/0xa [ 460.151867][T14521] should_failslab+0xc2/0x120 [ 460.151897][T14521] kmem_cache_alloc_noprof+0x92/0x6a0 [ 460.151925][T14521] ? dup_fd+0x4d/0xd10 [ 460.151956][T14521] dup_fd+0x4d/0xd10 [ 460.151979][T14521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.152023][T14521] __ia32_sys_close_range+0x405/0x5d0 [ 460.152056][T14521] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 460.152091][T14521] __do_fast_syscall_32+0x13a/0x8b0 [ 460.152121][T14521] do_fast_syscall_32+0x32/0x70 [ 460.152147][T14521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 460.152172][T14521] RIP: 0023:0xf7f13fec [ 460.152194][T14521] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 460.152204][T14521] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 460.152224][T14521] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 460.152238][T14521] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.152250][T14521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.152262][T14521] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 460.152275][T14521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.152302][T14521] [ 460.579345][T14529] 9pnet_virtio: no channels available for device syz [ 461.517284][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 461.952682][T14540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.380576][T14551] FAULT_INJECTION: forcing a failure. [ 463.380576][T14551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.380639][T14551] CPU: 1 UID: 0 PID: 14551 Comm: syz.8.2471 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.380657][T14551] Tainted: [L]=SOFTLOCKUP [ 463.380662][T14551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 463.380668][T14551] Call Trace: [ 463.380673][T14551] [ 463.380678][T14551] dump_stack_lvl+0x100/0x190 [ 463.380697][T14551] should_fail_ex.cold+0x5/0xa [ 463.380712][T14551] _copy_from_user+0x2e/0xd0 [ 463.380730][T14551] do_devconfig_ioctl+0x11e/0x6d0 [ 463.380747][T14551] ? comedi_unlocked_ioctl+0x180/0x3310 [ 463.380758][T14551] ? __lock_acquire+0x5c0/0x1f40 [ 463.380776][T14551] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 463.380800][T14551] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 463.380819][T14551] ? rcu_is_watching+0x13/0xc0 [ 463.380834][T14551] comedi_unlocked_ioctl+0x860/0x3310 [ 463.380847][T14551] ? trace_sched_exit_tp+0x120/0x160 [ 463.380860][T14551] ? __schedule+0x126b/0x6920 [ 463.380872][T14551] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 463.380891][T14551] ? __pfx___schedule+0x10/0x10 [ 463.380903][T14551] ? preempt_schedule_irq+0x79/0x90 [ 463.380917][T14551] ? irqentry_exit+0x24d/0xa10 [ 463.380934][T14551] ? lockdep_hardirqs_on+0x7d/0x110 [ 463.380947][T14551] ? irqentry_exit+0x24d/0xa10 [ 463.380966][T14551] ? comedi_compat_ioctl+0xb4/0xe20 [ 463.380979][T14551] comedi_compat_ioctl+0x438/0xe20 [ 463.380992][T14551] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 463.381004][T14551] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.381036][T14551] ? do_vfs_ioctl+0x226/0x13e0 [ 463.381049][T14551] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 463.381064][T14551] ? __fget_files+0x34/0x3d0 [ 463.381079][T14551] ? find_held_lock+0x2b/0x80 [ 463.381092][T14551] ? __fget_files+0x215/0x3d0 [ 463.381105][T14551] ? hook_file_ioctl_common+0x140/0x440 [ 463.381120][T14551] ? __fget_files+0x21f/0x3d0 [ 463.381137][T14551] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 463.381149][T14551] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 463.381164][T14551] __do_fast_syscall_32+0x13a/0x8b0 [ 463.381178][T14551] ? lockdep_hardirqs_on+0x7d/0x110 [ 463.381192][T14551] do_fast_syscall_32+0x32/0x70 [ 463.381206][T14551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.381221][T14551] RIP: 0023:0xf6ffefec [ 463.381234][T14551] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 463.381240][T14551] RSP: 002b:00000000f53ab50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 463.381251][T14551] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040946400 [ 463.381258][T14551] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.381265][T14551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.381271][T14551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 463.381278][T14551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.381293][T14551] [ 463.805743][T14555] FAULT_INJECTION: forcing a failure. [ 463.805743][T14555] name failslab, interval 1, probability 0, space 0, times 0 [ 463.805765][T14555] CPU: 1 UID: 0 PID: 14555 Comm: syz.5.2473 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.805781][T14555] Tainted: [L]=SOFTLOCKUP [ 463.805786][T14555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 463.805793][T14555] Call Trace: [ 463.805797][T14555] [ 463.805803][T14555] dump_stack_lvl+0x100/0x190 [ 463.805823][T14555] should_fail_ex.cold+0x5/0xa [ 463.805840][T14555] should_failslab+0xc2/0x120 [ 463.805859][T14555] kmem_cache_alloc_noprof+0x92/0x6a0 [ 463.805876][T14555] ? dup_fd+0x4d/0xd10 [ 463.805895][T14555] dup_fd+0x4d/0xd10 [ 463.805911][T14555] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 463.805930][T14555] __ia32_sys_close_range+0x405/0x5d0 [ 463.805948][T14555] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 463.805970][T14555] __do_fast_syscall_32+0x13a/0x8b0 [ 463.805986][T14555] do_fast_syscall_32+0x32/0x70 [ 463.806001][T14555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.806036][T14555] RIP: 0023:0xf7fa3fec [ 463.806051][T14555] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 463.806057][T14555] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 463.806069][T14555] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 463.806077][T14555] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.806085][T14555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.806092][T14555] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 463.806100][T14555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.806116][T14555] [ 464.119085][ T5880] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 464.494156][ T5880] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 464.495149][ T5880] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 464.495175][ T5880] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 464.495963][ T5880] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 464.495980][ T5880] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 464.497918][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.497933][ T5880] usb 9-1: Product: syz [ 464.497942][ T5880] usb 9-1: Manufacturer: syz [ 464.497950][ T5880] usb 9-1: SerialNumber: syz [ 464.502572][ T5880] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 464.510167][ T5880] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 464.514184][ T5880] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 464.713598][T14553] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 464.896967][T14573] overlay: Bad value for 'uuid' [ 464.906530][T14553] netlink: 'syz.4.2472': attribute type 21 has an invalid length. [ 465.094758][T13379] usb 9-1: USB disconnect, device number 32 [ 465.108017][T13379] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 465.138081][T13379] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 465.138506][T13379] ti_usb_3410_5052 9-1:2.0: device disconnected [ 465.152496][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.503038][T14563] 9pnet_virtio: no channels available for device syz [ 465.505352][T14563] gadgetfs: bound to dummy_udc driver [ 465.797954][T14582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.043564][T14593] FAULT_INJECTION: forcing a failure. [ 467.043564][T14593] name failslab, interval 1, probability 0, space 0, times 0 [ 467.043598][T14593] CPU: 0 UID: 0 PID: 14593 Comm: syz.9.2482 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.043616][T14593] Tainted: [L]=SOFTLOCKUP [ 467.043620][T14593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 467.043628][T14593] Call Trace: [ 467.043633][T14593] [ 467.043639][T14593] dump_stack_lvl+0x100/0x190 [ 467.043658][T14593] should_fail_ex.cold+0x5/0xa [ 467.043675][T14593] should_failslab+0xc2/0x120 [ 467.043693][T14593] kmem_cache_alloc_noprof+0x92/0x6a0 [ 467.043709][T14593] ? dup_fd+0x4d/0xd10 [ 467.043727][T14593] dup_fd+0x4d/0xd10 [ 467.043743][T14593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.043762][T14593] __ia32_sys_close_range+0x405/0x5d0 [ 467.043780][T14593] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 467.043801][T14593] __do_fast_syscall_32+0x13a/0x8b0 [ 467.043818][T14593] do_fast_syscall_32+0x32/0x70 [ 467.043833][T14593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.043847][T14593] RIP: 0023:0xf7f13fec [ 467.043861][T14593] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 467.043866][T14593] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 467.043878][T14593] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 467.043886][T14593] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.043893][T14593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.043899][T14593] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 467.043906][T14593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.043920][T14593] [ 467.882039][T14603] hub 1-0:1.0: USB hub found [ 467.899258][T14603] hub 1-0:1.0: 6 ports detected [ 468.223074][ T5880] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 468.393546][ T5880] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 468.407399][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 468.407415][ T5880] usb 1-1: Product: QEMU USB Tablet [ 468.407433][ T5880] usb 1-1: Manufacturer: QEMU [ 468.407455][ T5880] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 468.729388][ T5880] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000A/input/input14 [ 468.874683][ T5880] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 469.390730][T14620] 9pnet_virtio: no channels available for device syz [ 469.681983][T14632] FAULT_INJECTION: forcing a failure. [ 469.681983][T14632] name failslab, interval 1, probability 0, space 0, times 0 [ 469.682006][T14632] CPU: 2 UID: 0 PID: 14632 Comm: syz.5.2494 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.682022][T14632] Tainted: [L]=SOFTLOCKUP [ 469.682026][T14632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.682034][T14632] Call Trace: [ 469.682039][T14632] [ 469.682044][T14632] dump_stack_lvl+0x100/0x190 [ 469.682065][T14632] should_fail_ex.cold+0x5/0xa [ 469.682096][T14632] should_failslab+0xc2/0x120 [ 469.682116][T14632] kmem_cache_alloc_noprof+0x92/0x6a0 [ 469.682134][T14632] ? dup_fd+0x4d/0xd10 [ 469.682152][T14632] dup_fd+0x4d/0xd10 [ 469.682168][T14632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 469.682188][T14632] __ia32_sys_close_range+0x405/0x5d0 [ 469.682206][T14632] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 469.682227][T14632] __do_fast_syscall_32+0x13a/0x8b0 [ 469.682243][T14632] do_fast_syscall_32+0x32/0x70 [ 469.682258][T14632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.682276][T14632] RIP: 0023:0xf7fa3fec [ 469.682296][T14632] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 469.682304][T14632] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 469.682325][T14632] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 469.682339][T14632] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.682350][T14632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.682366][T14632] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 469.682373][T14632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.682389][T14632] [ 469.772421][T14619] usb 1-1: USB disconnect, device number 3 [ 469.847217][T14619] hub 1-0:1.0: USB hub found [ 469.847482][T14619] hub 1-0:1.0: 6 ports detected [ 470.012817][ T5809] usb 1-1: new high-speed USB device number 4 using ehci-pci [ 470.213524][ T7919] ------------[ cut here ]------------ [ 470.213534][ T7919] time_after(jiffies, warn_timeout) [ 470.213540][ T7919] WARNING: io_uring/io-wq.c:1378 at io_wq_put_and_exit+0x36c/0x9d0, CPU#2: syz.2.556/7919 [ 470.220468][ T7919] Modules linked in: [ 470.222085][ T7919] CPU: 2 UID: 0 PID: 7919 Comm: syz.2.556 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.225681][ T7919] Tainted: [L]=SOFTLOCKUP [ 470.227078][ T7919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 470.230343][ T7919] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 470.232425][ T7919] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 af 83 7c 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 af 1c e7 fc 4d 85 ff 79 aa e8 05 22 e7 fc 90 <0f> 0b 90 eb 9f e8 fa 21 e7 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 470.238966][ T7919] RSP: 0000:ffffc9000422f8c8 EFLAGS: 00010293 [ 470.240981][ T7919] RAX: 0000000000000000 RBX: ffff88802447c000 RCX: 0000000000000000 [ 470.243622][ T7919] RDX: ffff8880487d0000 RSI: ffffffff85246eeb RDI: ffff8880487d0000 [ 470.246135][ T7919] RBP: fffffbfff1d41e50 R08: 0000000000000007 R09: 0000000000000000 [ 470.248691][ T7919] R10: ffffffffffffe93d R11: 0000000000000000 R12: 0000000100002b3e [ 470.251228][ T7919] R13: 0000000000001b58 R14: ffff88802447c018 R15: ffffffffffffe93d [ 470.253797][ T7919] FS: 0000000000000000(0000) GS:ffff888096b55000(0063) knlGS:00000000f5436b40 [ 470.256672][ T7919] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 470.258792][ T7919] CR2: 00000000f73a8c68 CR3: 0000000043335000 CR4: 0000000000352ef0 [ 470.261517][ T7919] Call Trace: [ 470.262603][ T7919] [ 470.263903][ T7919] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 470.265652][ T7919] ? __pfx___might_resched+0x10/0x10 [ 470.267314][ T7919] ? io_wq_set_exit_on_idle+0x156/0x290 [ 470.269028][ T7919] io_uring_clean_tctx+0x114/0x180 [ 470.270711][ T7919] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 470.272972][ T7919] ? percpu_counter_add_batch+0xb9/0x230 [ 470.274761][ T7919] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 470.276816][ T7919] io_uring_cancel_generic+0x798/0x7f0 [ 470.278541][ T7919] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 470.280673][ T7919] ? lock_acquire+0x1d1/0x380 [ 470.282182][ T7919] ? __pfx_autoremove_wake_function+0x10/0x10 [ 470.284189][ T7919] ? do_exit+0x2b6/0x2a50 [ 470.285572][ T7919] ? rcu_is_watching+0x13/0xc0 [ 470.287083][ T7919] ? io_uring_unreg_ringfd+0xca/0x140 [ 470.288768][ T7919] do_exit+0x344/0x2a50 [ 470.290112][ T7919] ? __pfx_do_exit+0x10/0x10 [ 470.291575][ T7919] ? do_raw_spin_lock+0x128/0x260 [ 470.293251][ T7919] ? find_held_lock+0x2b/0x80 [ 470.294754][ T7919] ? get_signal+0x7e0/0x21e0 [ 470.296224][ T7919] do_group_exit+0xd5/0x2a0 [ 470.297775][ T7919] get_signal+0x1ec7/0x21e0 [ 470.299741][ T7919] ? rcu_is_watching+0x13/0xc0 [ 470.301801][ T7919] ? __pfx_get_signal+0x10/0x10 [ 470.304001][ T7919] ? do_futex+0x190/0x440 [ 470.305843][ T7919] arch_do_signal_or_restart+0x91/0x7a0 [ 470.308194][ T7919] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.310677][ T7919] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.312617][ T7919] ? xfd_validate_state+0x129/0x190 [ 470.314328][ T7919] exit_to_user_mode_loop+0x139/0x700 [ 470.316196][ T7919] ? rcu_is_watching+0x13/0xc0 [ 470.317998][ T7919] do_int80_emulation+0x555/0x650 [ 470.319821][ T7919] asm_int80_emulation+0x1a/0x20 [ 470.321934][ T7919] RIP: 0023:0xf7f74fec [ 470.323792][ T7919] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 470.326593][ T7919] RSP: 002b:00000000f54365bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 470.329893][ T7919] RAX: fffffffffffffe00 RBX: 00000000f7434f88 RCX: 0000000000000080 [ 470.332344][ T7919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 470.335042][ T7919] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 470.337608][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.340160][ T7919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.343015][ T7919] [ 470.344036][ T7919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 470.346309][ T7919] CPU: 2 UID: 0 PID: 7919 Comm: syz.2.556 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.350044][ T7919] Tainted: [L]=SOFTLOCKUP [ 470.351895][ T7919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 470.356181][ T7919] Call Trace: [ 470.357620][ T7919] [ 470.358906][ T7919] dump_stack_lvl+0x100/0x190 [ 470.360886][ T7919] vpanic+0x553/0x970 [ 470.362552][ T7919] ? __pfx_vpanic+0x10/0x10 [ 470.364575][ T7919] panic+0xd1/0xe0 [ 470.366190][ T7919] ? __pfx_panic+0x10/0x10 [ 470.367923][ T7919] check_panic_on_warn.cold+0x19/0x34 [ 470.369884][ T7919] ? io_wq_put_and_exit+0x36c/0x9d0 [ 470.372085][ T7919] __warn.cold+0x191/0x318 [ 470.373960][ T7919] __report_bug+0x30f/0x440 [ 470.375944][ T7919] ? io_wq_put_and_exit+0x36c/0x9d0 [ 470.378166][ T7919] ? __pfx___report_bug+0x10/0x10 [ 470.380287][ T7919] ? lock_acquire+0x1d1/0x380 [ 470.382325][ T7919] ? do_raw_spin_lock+0x128/0x260 [ 470.384503][ T7919] ? find_held_lock+0x2b/0x80 [ 470.386522][ T7919] ? __wait_for_common+0x1f3/0x4c0 [ 470.388208][ T7919] ? io_wq_put_and_exit+0x36c/0x9d0 [ 470.389908][ T7919] report_bug+0xb3/0x220 [ 470.391369][ T7919] ? io_wq_put_and_exit+0x36c/0x9d0 [ 470.393014][ T7919] handle_bug+0x16a/0x2a0 [ 470.394382][ T7919] exc_invalid_op+0x17/0x50 [ 470.395823][ T7919] asm_exc_invalid_op+0x1a/0x20 [ 470.397409][ T7919] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 470.399279][ T7919] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 af 83 7c 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 af 1c e7 fc 4d 85 ff 79 aa e8 05 22 e7 fc 90 <0f> 0b 90 eb 9f e8 fa 21 e7 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 470.406588][ T7919] RSP: 0000:ffffc9000422f8c8 EFLAGS: 00010293 [ 470.409135][ T7919] RAX: 0000000000000000 RBX: ffff88802447c000 RCX: 0000000000000000 [ 470.412458][ T7919] RDX: ffff8880487d0000 RSI: ffffffff85246eeb RDI: ffff8880487d0000 [ 470.415745][ T7919] RBP: fffffbfff1d41e50 R08: 0000000000000007 R09: 0000000000000000 [ 470.419030][ T7919] R10: ffffffffffffe93d R11: 0000000000000000 R12: 0000000100002b3e [ 470.422338][ T7919] R13: 0000000000001b58 R14: ffff88802447c018 R15: ffffffffffffe93d [ 470.425249][ T7919] ? io_wq_put_and_exit+0x36b/0x9d0 [ 470.426884][ T7919] ? io_wq_put_and_exit+0x36b/0x9d0 [ 470.428540][ T7919] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 470.430520][ T7919] ? __pfx___might_resched+0x10/0x10 [ 470.432252][ T7919] ? io_wq_set_exit_on_idle+0x156/0x290 [ 470.434022][ T7919] io_uring_clean_tctx+0x114/0x180 [ 470.435733][ T7919] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 470.437521][ T7919] ? percpu_counter_add_batch+0xb9/0x230 [ 470.439362][ T7919] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 470.441534][ T7919] io_uring_cancel_generic+0x798/0x7f0 [ 470.443316][ T7919] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 470.445257][ T7919] ? lock_acquire+0x1d1/0x380 [ 470.446816][ T7919] ? __pfx_autoremove_wake_function+0x10/0x10 [ 470.448779][ T7919] ? do_exit+0x2b6/0x2a50 [ 470.450184][ T7919] ? rcu_is_watching+0x13/0xc0 [ 470.451701][ T7919] ? io_uring_unreg_ringfd+0xca/0x140 [ 470.453454][ T7919] do_exit+0x344/0x2a50 [ 470.454831][ T7919] ? __pfx_do_exit+0x10/0x10 [ 470.456335][ T7919] ? do_raw_spin_lock+0x128/0x260 [ 470.457980][ T7919] ? find_held_lock+0x2b/0x80 [ 470.459513][ T7919] ? get_signal+0x7e0/0x21e0 [ 470.461272][ T7919] do_group_exit+0xd5/0x2a0 [ 470.462768][ T7919] get_signal+0x1ec7/0x21e0 [ 470.464251][ T7919] ? rcu_is_watching+0x13/0xc0 [ 470.465813][ T7919] ? __pfx_get_signal+0x10/0x10 [ 470.467418][ T7919] ? do_futex+0x190/0x440 [ 470.468817][ T7919] arch_do_signal_or_restart+0x91/0x7a0 [ 470.470629][ T7919] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.472628][ T7919] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.474625][ T7919] ? xfd_validate_state+0x129/0x190 [ 470.476413][ T7919] exit_to_user_mode_loop+0x139/0x700 [ 470.478130][ T7919] ? rcu_is_watching+0x13/0xc0 [ 470.479760][ T7919] do_int80_emulation+0x555/0x650 [ 470.481430][ T7919] asm_int80_emulation+0x1a/0x20 [ 470.483056][ T7919] RIP: 0023:0xf7f74fec [ 470.484405][ T7919] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 470.486571][ T7919] RSP: 002b:00000000f54365bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 470.489222][ T7919] RAX: fffffffffffffe00 RBX: 00000000f7434f88 RCX: 0000000000000080 [ 470.492264][ T7919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 470.494838][ T7919] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 470.497359][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.499803][ T7919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.502636][ T7919] [ 470.504473][ T7919] Kernel Offset: disabled [ 470.505833][ T7919] Rebooting in 86400 seconds..