last executing test programs: 12m41.938439725s ago: executing program 32 (id=191): r0 = syz_usb_connect$uac2(0x5, 0x87, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xb2, 0x80, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x5, 0x3, "a173fe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x8, 0x14, {0x8, 0x25, 0x1, 0x0, 0x3, 0x10, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x8, 0x96, {0x8, 0x25, 0x1, 0x3, 0x3, 0x1}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x40, 0x8, 0xe8, {0xe8, 0x31, "dd2ad15b72e832ed66ef4a1cab20b84d1e224f939eb97e878082982d4c999cc8f1cc25d76fcb7f35c542c3aa6c0a906f17e69c04a7e08ff17716977069b6e7a5e3f8ce592a1154f0e1cc47c600d30ffe53a0b850bdf66ee93d6bbb14c8c5e4ed528f78d76447ac3bbbdf9262d8e3d48261d45dd2847d27ca0a997a5feccfeb56561a0ad6730878a0dc87b3ddc0ac0aabac74ad16fe4e7bbdca1471162562dd75651ac51db2f3e296e2dbf9dd5539a64917dd8f5855dd0c0db25ec0d7a68b97252b85fe21edce8f4b1bc4b940a35672d875017af88dcd8c66e658aa9850c7f4a72b0f32038492"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200e6d00000048d61cc280d917f1fcd7d9be52b971c1945d7d49ffcd3714cd46f1cb583ba9cd39910d1233d0c752bc19306ef0f678d27ba0fd3cdcf16923842e3c42c35dd76d5d27a9dccf4d471b7a2237ac359270d54c81a5e15437b271b9f7f94550557c5879efb9c9502e18557d6935c2f2"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x81, 0x3, "612aba"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "efde37"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, "fa"}, &(0x7f0000000400)={0x20, 0x84, 0x2, "25a9"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "33c293"}}) 11m57.994825272s ago: executing program 33 (id=396): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x882, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000002c0)={0x48}) 3m55.617003185s ago: executing program 34 (id=2668): io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) syz_clone3(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x804) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) 3m16.543249327s ago: executing program 35 (id=2799): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, 0x0) read(r0, &(0x7f0000000180)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0xa59, 0x0, r0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000001180)={0x3, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0 0', 0x3) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fcntl$dupfd(r3, 0x406, r4) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast2}, 0x1, 0x3, 0x0, 0x2}}, 0x26) setns(0xc9, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r6, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r2, 0x1) mkdirat(r5, &(0x7f00000011c0)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x14) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 3m15.356620488s ago: executing program 36 (id=2802): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000077c0)={0x0, 0x0, &(0x7f0000007780)={&(0x7f0000003c40)=@newchain={0x4bc, 0x64, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x5, 0xd}, {0x6}}, [@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x3bbd, 0x3f6f8c40, 0x3}, {0x99, 0x8, 0x1}, 0x5e, 0x99, 0x9}}]}}, @f_tcindex={{0xc}, {0x45c, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_MASK={0x6}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x859b}, @TCA_TCINDEX_ACT={0x440, 0x7, [@m_police={0x43c, 0xf, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff07d, 0x6, 0x0, 0x7fffffff, 0x9, 0x0, 0x7, 0x86e6, 0x20000, 0xfff, 0x8, 0x9, 0x4, 0x1c, 0x3, 0x8, 0xe, 0x2, 0x6, 0xffff, 0x7f, 0x0, 0x80000000, 0x4, 0x9, 0x0, 0x9, 0x0, 0x3ff, 0x4bf, 0x101, 0x5, 0x2, 0xffff081b, 0x40, 0x4, 0x9, 0x2, 0x1, 0xbb00, 0x3, 0x6, 0x9, 0x0, 0x4, 0x9b4, 0xef, 0xfffffffc, 0x2, 0x8eab, 0x1, 0xda7, 0x5, 0x7, 0x0, 0x4, 0x4, 0x3, 0x3, 0x1, 0xd, 0x63f0, 0x8, 0x8, 0xe, 0xffffff94, 0x28, 0xfffffffe, 0xfffffe00, 0x4, 0x9, 0x401, 0x70, 0x2, 0x9, 0x4, 0xeb, 0x7, 0x7, 0xcfb6, 0x7ff, 0x0, 0x800, 0xcc, 0x400, 0x7, 0xe, 0xe, 0x8, 0x101, 0xffffffff, 0x9, 0x6, 0x5, 0x8, 0xffff, 0x1, 0x9, 0x10001, 0x4, 0x7, 0x0, 0x6, 0xffff, 0x8, 0x14a, 0x0, 0xfffffffb, 0x1, 0x8, 0x2, 0x8, 0x8000, 0x1, 0x6, 0x8, 0x7, 0x3, 0x5, 0x3a8, 0x0, 0x80, 0x8, 0x0, 0x4, 0x14a, 0x7, 0x1, 0xe, 0x2, 0x5, 0xab, 0x400000, 0x2, 0x58617cda, 0x10, 0x3, 0x3, 0x9, 0x4c, 0x10000, 0x2, 0x100, 0x7, 0x1, 0x482, 0x400, 0x80000001, 0x4, 0x9, 0x9, 0x3, 0x8, 0x8, 0x7, 0x5, 0x4, 0x493, 0x0, 0xfa, 0x0, 0x6355, 0x0, 0x8, 0x80000001, 0x738f, 0x3, 0x0, 0xf21b, 0x2, 0x5, 0x6, 0x9, 0x1ff, 0x237, 0xee9c, 0x6, 0x7fff, 0x4ca, 0x3029, 0x7, 0x8, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7, 0xfa, 0x6, 0x7, 0xffff, 0x8072, 0x3ff, 0xffffff2e, 0x8, 0x3, 0xe94c, 0x3, 0xfffffffa, 0x9, 0x81, 0x800000, 0x4, 0x400, 0x8, 0x3, 0x0, 0xffffff78, 0x6, 0x2, 0x7ff, 0x80000000, 0x2, 0x2, 0x7, 0x4, 0x7, 0x7, 0x401, 0x80000, 0x7, 0x0, 0x80000000, 0x9, 0x5, 0x4, 0x0, 0x1, 0xc, 0x6, 0x400, 0x0, 0xe9, 0x66, 0x0, 0x400, 0x9, 0x4, 0xf, 0x3, 0x9, 0x9, 0x8, 0xc6, 0xfffff5fd, 0xa, 0x3, 0x4, 0xb, 0x7, 0x9, 0x2, 0x1ec, 0x40, 0x80000001]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000080}, 0x40814) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@local, 0x200}, @local, 0x0, 0x9, 0x0, 0x82, 0xfffffffffffffffc, 0x0, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xd298, 0x4, 0x2, 0x16e}, &(0x7f0000000980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6cee, 0x8, 0x1, 0x3c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc97b, 0x8000, 0x0, 0xff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3293, 0x200, 0x3, 0xfd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb580, 0x80, 0x3, 0x18}, 0xffffffffffffffff}], 0x4, &(0x7f0000002340)={0x2e, 0x6e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xb}, 0x0, 0x0, '\x00', {0x1, 0xd1, 0x0, &(0x7f0000001340)=@buf_4k="9e910337e6f133b5b47f71fb23c3937333af995c10ba3b6e7185abace6289dd2a8b680eb83a9430da8775480710aa967eca3807d21254a50aa129565e8f7001cf7bcf55e546eab6d7b04725b02cc56c6de2b1beb2e2a37b6e24a4592c31b4dae9b920be338d798638fe9c3170beddf8918bce4b29b38831b9f72cbb45f4cdfda2804060180229786aa22e9449673b9af1d616f6cee882786b65ee4680eb988944d45b9a68c7caae182b37545750ec2e022cdcc0fcd37982ef9257b2980a4ab6baf39183901ad13e94842ea4848e2d5126a7064e0df2b80682601c21571d23d656e91ec350e8f0e45a4a01a86ad5160b8cfd6c1c53ae4be0572f86a4e824dd42ee89503937bdc0c078b54b5d1b5ed252d335cf3bfab352fc5dc7a8ac077422d5f86dda43d9f403e5971316b73d757208fa3424cc94925b53b028b1c8eb932e5d0cb5c79700012db80da5e0c1cf9c83baa39169f2b57a22a91ffe7d96777dd281f38974027baf707d568e42435d8b113a27a14522f271ea1d94cf80131e285f6b35adb1c67186b8ca1770e95806c290148eaf6915d27c81f7193fa8a215a61f0a1d74d4e1ca16853ac836104aeebb8eeb02c8402d4926ef4520bd9b312451e2276b62f1327212f0fa0cf783e643a5957f333357122ba28e0e0488add3892c766d83703bee5d1955f6b45c2776e412bacff5ffa964fa72ff8b7fff024bf34a5c0cee6ec7fdf3b57e4fc0ba90ff643279616a3af73a59731c9ad7742525fb470f83e8e238d9737cfb8ea95f0292c3b47cbb2b852602ff185f5b248432ce72c15b9ed3a83c9178209ac79a6a24f5ff3b1a125ac1a632ecb8fdf7c1b0eda1bde64beda3b3c4d861c8b57df1171e2fc2b0b505bcfd2f451e1f565785a13910a5d7683bc59fbffd6d86a2c4951a078723c8cece357da583e8c62bc37b40c737e776d45f904df55e6ccd2369a7605558dedb127cecdf3397c47d81f35f7c8f3c8ca38678a4337673aab2bd2843bcff0beff24a73b339ae1af5fa54bae139a2d9db01a3480f73937f24552af8b0332ce74ab4c77833aa770ac6df91b15ca2a2b8628cabffa4518a022cc51117a6a74359acdf686e29cb3fc4c17d486dd2287d28f9aee92464fbce97553ab1a12ef628b9b41898363aff2036dc3b738deeb57059bfe78ad3a43a4876ebfffcb995362cada388cce88c3fc4804fc410e1e7210f1d1adc7e08abaafadde0ad7976ad1d0df90080491f2362ffbf9bc4b5033599c32593f596ad739730f9392204ed7aac68669627e0626fea5c549fb8ea52fd56e2f31a5215db83fd14b585067e29696c1286d46b3177f0fa40aac88f7643582506ccc6a15d160660e1af3734eae871a1bfecb79dedbe29e95678f594c051e7c3c00d343f5d802165001fa1bec47c2bda81b99c7b1621e7689975eba65c442858e5329d59ced4ed188c31115c0a59e77cfd9163e177bec7e47ed3390c1a31c531d877ab8f06d3c12b0da1e7c2674565660eb0de9f2e2c57bc1dea49e338b639ccd9a1d62a862ba666ed8d50222237da163c647c6ab780c34d9f32e9eb7b7ca8a7821fe80f85bb57542db835ce03d1ac7810734f843de833a2e55450fd4850fac2430930001422015c3c632c87535e52483c86ea10a0b222999a3001987d3971ad7adb37f1b6b40a9c7bd4853a8084cd125cd22e2474609d3a2ff17e82fe4fea571dc06d1058d53bb5d2b2737e0d675a7644d98d8ba71a0325a5ffce9d9c7099bac265b41fc9a34dd9e6b40f9869656bff5af3d6030d92fdd6f8f8d5cd724fbcf312793060daa67fecc6f6431f0ff3a48da1b40dafc6bbb420a050bea34f69d676a97a34fa6a1be24e682985f6245dfeb44dc869f5f2ca1d6f3603ac3c7d587f083fd9b271e72daffb2b324f64dbe8f956b414669d92b9c61d61b45ce1d38eea8cce9ee1286a6bd25d5fcbf7faf32213fbf12eff506dbf868718ef257e2be5fa19a11a1238b892d3f24a3a8f02ae6747137bf711d8464f113183189ea0054213d2a1ec7e74e444fc7b0076300e42026fae4b1e63f4da42e3cf2cbb98962c67a5dc3f67aeac2d101b981810aef809ab6cf8501e50a63f7c382b757e77388142f11d9be8cf14291ab1441eef11c38b071d0221588da472398d9a2e867ce9fb66cc4ef27555fbde8180029c8dff53f6ebabdf79e6d461e8cba0b0878f75b9526818ab5a78556ab5dd1ca5cfd795a98bc11b9653611812a8840548b75dce56581c21cec181f7c776243f1d8ed7b260b8a92300c1dc44c893ce96396116d89ba90431de99416e25728fd2425e7300674bcb0bd81e228058d73250512098d8023cc853fc63acadf6342eda9438f0a19cc3814c08ca7fb94055105ee1ec841dc7b8e82410c55221a7f3ecb60ebee33ac0d7ef5840372e5725f5b7929badea61ab7aeaa9e1be232df9b0319701875289ac77d8efc64f7efbec8460c2f0ec691de748f47daff1902e64d840c8749ea1f5da96d38b3da476096fc65ba45b8420779efcfca487dd694a44588cd6097ea3b0fd7eb879192120a9ca6c7bbbbff41b10fda3d132b9afe7072d47148173630b0d7310acde6d74d7f3fc84c8f2c2959e75221a258bddfc1780d1c5e65dfbfcb6f637cbb40b8cb2a785055a63fb281654a534a0659c3579f24d2f7f03ab5d2fa435e89f5d81e39296e134d126a072a30d164fd11231a552532cea74c980b87ab69f0c602b7ca1b4cda2a0b0419e10a7d53d2ee532998be28ce1907df50b7a143bf8f9b0b23ed8252befb461ca0a17b31bc51e5fc26c26ef1846c181c804e267a5e554dd9ed6ab10ad838ba946c8bff0bcc0a58271f280d061a7a47f68630d3b7b6bbc4e9017f997136864b3f9825b8d3d520b1caab62d2a12eaedb4c2c6a4d1b43eb9916c9affa6415e24873c5bf2c50749ed651484a870dfccd6ea7803d3c093031a9900d982d7f09d36a98f4006e1ea339eb611ca7a5643ec2d17360d11a1b751f0393727bd3679bc031b53808c7279a0f19e87f30df218935396ea7697a605b89c105c45162c5e6425eb1fc432eca55d8850b7f8dc6be801a701fddc705a38a6a200fca885166a75c56e8a023816490ce72891ea4e23bc9518c4ef6f1cf85a45e5d818435b583745856f143e6c90fcc7a1fdf290d82993516244341c589ab38300d95b9a8a596f712df3d229258b3fb8121d218b3a57bea3b7ba83daf1b0a2599436ce7acd0089a20cb4ce5a5f814933249472a0dd4bb8bb6c4169f8314ec80e29fa74faed5b8148e095475e749f336fb9a44b4e5922c43b1e562e4de3554ea3b1b654dac4277cbc5137ad78f03cde8a5c1f16a0db13066565877203dea8e7b4da72414f6ef05fa3b288cb81914219465efcedcef51670be149fe15cff3033671faa1791242e9bd2ffcf529a6aa2b7035c7d4315e4fd237bbb4a6c93374dfa286e353f157db46fe4866004b0620ecf6ac0c78ccaa4ac974c3bbbcc760eff1c70c89b341eace5a8b1ef8cc01775719d9ee65b745dcd5d9556c4990a715e00c6e566ff8fd6236f1ad83298f4a6bf65b0f354231b00eced7659f5f7849a93dc1a4c284d99d33007fa6f53f9489472d6edd14ec6c04a6d49f22a2ff1c0487e8b7a32e3d6d35ad6093b7d1d265b81ab5d03e65dec669bda05a242cab8aa39b62a84883d588ae65f06a65fe4552ede4ea015f42633a8e5bb35df212bb9aaaaa46b989ad8ec370047fe8b6b195f09cd911bfae2d175287e7981eb3d68755f70635580d2e7bb97dd754674954550ebe422067a10dc343ec011f3eb62cd67d3266b0db5d1ac6d56d5ede59a6a153a8a7375118198ee700fa96bb1908d0bbc7d26622960bf93f7ef39f11e58aa578f4c48f878a00e0f509e3210c5790c48c9f367cd8b2a29af42908a7a1bc1cb31e45d4d6e036e5f361ef86c321b60b1da306564f0e81c630440db901757534bc87ff9bcb0ece8f164ba37d7f6ec9d03344368558cdd1cd3a9571a2ba2949f778934302ce96b532c30d677ab74795a9dc15132a41c5ed014bfb986e0f54986d046acd1dfb4f5e2a6a56ed3c53e1daa5e0a6830209ee0f9aa2af4ae75e634e7dbe5fa03fa3bfdaebd3f4b9d044bf0a9e7bc83574b0c591a24dd467005c9facacbd2bfd3d40f96b53a872309e0f0497182fb639edf3960ba3bd7211f02e78ea03caa6ad0c353399801f0b31e21f8e45affe1873e691c6cd65c0b2fcf6e99cb655315c74e1e788b7fbfac71c6e45071dc6d3a48ec4b793befcfb816e1b250bca878db9b646e0a848e86a6f2588587ad877d15ae77948b582bcc9465347610a1fff721eee0d773b052dd2a911b704cbe938ef784f5f8bbcd5db18c98d8e4cdafae8c90046addc72a6c032f1db4d78947eb541093b59e2da050ba1bb0bc9b1a8f419d26b5f7e209dd523447caca73ce6b937cc7cb4775bbcf320ae43f3213dd388d0e57430cb2f77cb23870fb4f1bbfd85f07dda6328275b62082941296730d777dc70e0804f298103f781133d24a1b7c3d95748ce989fe942ef283121968f7a69955e81a41ed7f5f64d06f8006ca38c6bfdbf64515853eebd460fe27b35610745f745eeb54cf75175fa7d1239e48f084f8ddc86537a163f95e576b344f3c2ac50721ce262d0e41f35cbc03e6e703b64c2f65d0aeb1cf7bc0562ae3fdc8367b1207aca79021fca61cf10a4c941ea027a12efbb3af1552f0d47fe6d519db1c9e9558eb1e43cdee716bcb6d022acaf9aa46bbe756836c2858e1441b45cf983ee34b132d387dd113918c0f86d9141cfeb68b412bcd8c2af8da26305675236ae1cb11a75bfcc187f85294b0a6c52c1739007a4bb151bfa8998014406b9f9b16f1a04f4fd84c0dc31bfdc8d261690bce1aec68153f1830bc11516834ff31a824d793924c8442565c9e8fd13ac46166e75776a1f493ce183ad0ce79098fd51df5ed0f109295c60a3f4172dda913bc9b2c0f56ca5c0bf7b63661289f4c3cee41396833bb40db8d9c3947482933e58a65254f75ac5802855cf5667efc3f23ed12e9ce825688d9d0b172150903c246edf21fb12ac611f923e6093e598c68fc3a1c02b86b9cf434c301bd8dde70942c589c0e2b8e7b029333fa8f472a513b7383e3ed2bb642bf8782baf176ace777fb0dae452fec7ab828dbb0026c7bcd5893fc1d8a3d90a672631aae63aea92cf35ae790a3a7905ea0aee0e2ca43c5b0564d4fae00e4e8aef6dbb5bc9d6fb3fc177f79546290399ba3607bf19bf0cc4e82fe222596d89a3df53bf51022c5fea39c7cc9fc1bf333370f045f89cc186dc1dc2f03a37ab48ff3a05be6dacb325d80b18a7b2429b5c55e18603bf88cb507a3603d26530e3976c4916a13fca8ce8158076d70c09b44d47140c558672627db671bc70793ce1ce61f02302cd73a64b5d3dcaea3e3dd128532227f1ee646a0f0dd74c07e915830357a3a70e488b58e55b9244a2fd854f33d646acca9faa311773cc7ff50a7d828e0959cc0b96108d14a771d3f6a6ae79367d5a89026448a6d36f3025be8c5e4b031e4176fc8fdaca8796cc7a5280acdb1decfa226022ff154732903d874b2ad324cf949bef2bed13bbf811d58781a97ab2ba4964d6f21d4f65108076d3f119355eb4cc8ebde4d053d8ccbc55c024f144d53db69b2c81008fcec2efa119024ddd714ea92fbd5d7821ead2e68a14b1aec7b2ecbb4f21b8f645b46adec51159215d9f51536647e0f147a7dda04d938e46dfaa18c03b99ac01dfa36b657390595983ed720f5831bb505b609062b8d2deeeb44ceeab2d05867b80"}}, &(0x7f00000023c0)) syz_ublk_setup_io_uring(0xf0e, &(0x7f0000002400)={0x0, 0x3a6d, 0x8000, 0x2, 0x1fd, 0x0, r6}, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500)) io_setup(0x8, &(0x7f0000000600)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_submit(r7, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0xfffffdff, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) 2m31.536963119s ago: executing program 8 (id=2883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000100)=@generic={0x8}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b32, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001300)={{r4}, r5, 0x4, @inherit={0x78, &(0x7f0000000280)=ANY=[]}, @subvolid=0x1ff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000340)={0x0, 0xfffffffffffff3e8, 0x0, [0xe91, 0x8000000000000001, 0x7, 0x0, 0x2], [0xc, 0xa, 0x7, 0x2, 0x200, 0x1, 0x8000000000000000, 0x0, 0x0, 0x4, 0x9, 0x1, 0x5, 0x59, 0x9, 0x100000000, 0x9, 0x8, 0x1, 0x1, 0x55, 0x0, 0x80, 0x1, 0x88de, 0x42d4, 0x8, 0x4, 0x1, 0x691, 0x40, 0x4, 0x1ff, 0x956, 0xb437000000, 0xac9b, 0x6c5, 0x8, 0x700, 0x9, 0x2, 0x2, 0x9, 0x1, 0x1, 0x9, 0x1, 0x40, 0x5, 0x8, 0x0, 0x4, 0x9, 0x8, 0x3, 0x9, 0x6, 0x84, 0x9, 0x4, 0x3ff, 0x2, 0x5, 0x10001, 0x8, 0x8, 0x1b01, 0x7, 0x4, 0x3, 0x7, 0x7b29, 0xffffffff7fffffff, 0xbbea, 0x0, 0x7, 0xfffffffffffffffa, 0x1, 0x5, 0x1000, 0x4, 0xb9, 0x10, 0x8, 0x7, 0x2, 0x8, 0x7, 0x3, 0x4, 0xffffffffffffff23, 0x9, 0x6, 0x800, 0x1, 0x7, 0xec6f, 0x1, 0xffffffffffffffff, 0xc, 0x8, 0x9, 0x3, 0x5, 0x100, 0x2, 0x5, 0xa1a, 0x5, 0x100, 0x2, 0x7f, 0x10, 0x5, 0x6, 0x1, 0x1, 0xffffffffffffff80, 0x1, 0x100000000, 0x30]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000780)={{r0}, r5, 0x0, @unused=[0x181, 0x7, 0x375, 0x7], @devid=r6}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x8000000000000000, 0x3f02}) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) rseq(0x0, 0x1f00, 0x0, 0x0) 2m30.285953131s ago: executing program 8 (id=2885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000004) 2m27.688133729s ago: executing program 8 (id=2896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000793000/0x4000)=nil, 0x4000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000002c0)=0x84) sched_setaffinity(r2, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xff10, 0xdb00, 0x8, 0x29}) socket$kcm(0x10, 0x2, 0x0) 2m26.879602257s ago: executing program 8 (id=2897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x400000000000828) socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) 2m23.244394776s ago: executing program 8 (id=2905): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0xd, 0x0, &(0x7f0000000100)="05004013ffffffffa000c43535", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 2m22.736507099s ago: executing program 8 (id=2907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) (fail_nth: 8) preadv(r3, 0x0, 0x0, 0x8, 0xfffffffe) 2m22.37515526s ago: executing program 37 (id=2907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) (fail_nth: 8) preadv(r3, 0x0, 0x0, 0x8, 0xfffffffe) 1m37.517831009s ago: executing program 9 (id=3018): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/1000, 0x3e8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b6aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c6dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971030b559623af8295bf776c588ef250920a927d060c9cba7c1984c58f07f2c1a138e8f3dafc2f317a7d2f63f2b47fa0506a8105249ff4aed52be5112036fa50bc3038705a62a63dd5fd2c9fe1694eff32568771c5146167e7", 0x187}, {&(0x7f0000000400)="da7933901ed0bbda0aec1d754ffd7defe2b8b6d0d53203b60329a25365c365ca8b93ec7cdd0504c6e8f1b5c78762a9d26419b4ea676a0b8652e9b814bf023b80b1044723788f659627411c876f9dd7079be97ee99f4e9b9ada2dfa84d002267df96d1a50a9be90931232c075cb77c2d2bb71ac6878750b96a8c9f2", 0x7b}, {&(0x7f0000000500)="77ab9b7f64222826002b90626edfdeb907f75fa7dcad22a2574987603286b6f6b141b0f669b1b557f87fa6e9048fb0f84edfd13e8049de886555d05b481706077c996b9bb77190014a01c4f9aa3c7889d09dd0787b870854de29648bbdaca3820737f46fd1aa1139da5234e66dea643e34c9f7da39679d4e9b571626cc8c4daa228deea7", 0x84}, {&(0x7f0000000600)="a62f9a3d", 0x4}], 0x5}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20004018) mkdir(&(0x7f00000000c0)='./nfsd\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x7ff, 0x7ff, 0x3, 0x10, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x4, 0x2, 0x5}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c90787b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e2351b57d037ad3c04594282423424d72120000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b339472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getrandom(&(0x7f0000000100)=""/62, 0x3e, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000040)=""/126, 0x7e, 0x3) 1m37.425904468s ago: executing program 3 (id=3019): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x700, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) 1m37.265474141s ago: executing program 3 (id=3021): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='off', 0x3) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000001300)="92", 0x2) ioctl$XFS_IOC_ERROR_INJECTION(r5, 0x40085874, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x20, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_MAP={0x24, 0xe, {0xc2, 0x3, 0x10001, 0x1ff, 0xfd, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m35.828153939s ago: executing program 9 (id=3025): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) read$hiddev(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xa, 0xa, 0x201}, {0x804, 0x9, 0x4, 0x45, 0x7, 0xfd, 0x1, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20c}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0xfffffff6, 0x1004}}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xc, 0x71, 0x0, 0xc, 0x9, 0x3, 0xb, 0x40, 0x82, 0x2, 0x3, 0x18, 0x3, 0xf}, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x2c, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r7, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 1m35.371232773s ago: executing program 3 (id=3028): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) read(r0, &(0x7f0000000180)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0xa59, 0x0, r0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000001180)={0x3, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) write(r2, &(0x7f0000000240), 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fcntl$dupfd(r3, 0x406, r4) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast2}, 0x1, 0x3, 0x0, 0x2}}, 0x26) setns(0xc9, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r6, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r2, 0x1) mkdirat(r5, &(0x7f00000011c0)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x14) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 1m34.013695765s ago: executing program 3 (id=3032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) 1m33.739473495s ago: executing program 9 (id=3033): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 1m33.551986628s ago: executing program 3 (id=3035): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000040)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x200000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) 1m29.440419983s ago: executing program 9 (id=3046): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) 1m29.201813665s ago: executing program 9 (id=3047): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c7010201010902240001020010000904"], 0x0) (async) syz_usb_connect$uac2(0x6, 0xb1, &(0x7f0000000040)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x30, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x6, 0x60, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0xa, 0x10}, [@multiply_unit={0x7, 0x24, 0xc, 0xa, 0xa, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0xf, 0x3, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x5, 0xff}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x8, 0x7, "74e26eb18797e887"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x6, 0x9, 0x7}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x401, 0x7f, "35b97ff1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x1f7, 0x9, 0x1, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3f, 0xee, 0x9}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x1, 0x0, 0xff, 0xf7}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) (async) r0 = io_uring_setup(0x4c33, &(0x7f00000002c0)={0x0, 0x888e, 0x40, 0x2, 0x364}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8c53d9c17f0210ecc0d96072000001ea89de2b7fb0000e60080b8787b960001000000000000000005007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) (async) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) syz_ublk_setup_io_uring(0x2e62, &(0x7f0000000340)={0x0, 0xb555, 0x80, 0x2, 0x3a1, 0x0, r0}, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) (async) syz_ublk_setup_io_uring(0x2541, &(0x7f0000000480)={0x0, 0xfe49, 0x20000, 0x3, 0x306}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) (async) r7 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x8000, 0xa80) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r9 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r9, 0x3, &(0x7f0000000180)='\x00', &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) (async) syz_ublk_add_dev(r0, r2, r5, r6, &(0x7f0000000640)={0x2e, 0xa, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x25, 0x0, r8, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x1, 0x609, 0x0, 0x0, 0x1000, 0x3, r10, 0x0, 0x44}}}, &(0x7f00000006c0)) (async) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000002440)=""/198) 1m28.940285836s ago: executing program 9 (id=3049): sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x67, ' \x00\x00\x00\x00L'}}, 0xc) 1m28.342772599s ago: executing program 38 (id=3049): sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x67, ' \x00\x00\x00\x00L'}}, 0xc) 1m27.810671837s ago: executing program 3 (id=3051): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$x25(r0, 0x0, 0x0, 0x20000005, 0x0, 0x0) 1m26.962624382s ago: executing program 39 (id=3051): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$x25(r0, 0x0, 0x0, 0x20000005, 0x0, 0x0) 43.338395763s ago: executing program 6 (id=3169): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x28ba, 0xa1, 0x4d91, 0x7fffffff, 0x3, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x108e, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xa, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffff8, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x5, 0x101, 0x5, 0xc, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x2, 0xfffff76b, 0x1, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000002, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9489, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x7, 0x7, 0x1, 0x2, 0xe, 0x2, 0x7, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc2, 0x9, 0x3, 0x4, 0x283, 0xb, 0x7, 0x40, 0x7, 0x1, 0x0, 0xff, 0x7f, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x8, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x5, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xd, 0x1, 0x1, 0xd1, 0xd, 0x2b7, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0x3, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x9, 0x382ae49b, 0xbb, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x8a, 0x5, 0x5, 0x7, 0x7, 0x0, 0x7, 0x1, 0x0, 0xffffffff, 0xdfeb, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r3, 0x29, 0xd2, 0x0, 0xfffffffffffffffe) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000003c0)={@remote}, 0x14) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000400)='ubifs\x00', 0x800002, 0x0) write(r4, &(0x7f0000000000)="2e000300010000", 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='123', 0x3) openat$cgroup_ro(r5, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) 43.070201898s ago: executing program 6 (id=3170): close(0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000200)={0x0, 0x3, 0x3, 0x1, 0x2, 0x5, 0x4, 0xe, 0x6, 0x5ef3, 0x96, 0x3}) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300000040000180150004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000040d0001007564703a73797a3200000000"], 0x54}}, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000180)={0xfffffffd, 0xffffffff}, 0x8) close(r6) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0xd, 0x12, r7, 0xe1c4d000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) 42.765345697s ago: executing program 6 (id=3173): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000af40)=ANY=[@ANYBLOB="9c2c00004400010029bd7000040000000300000004004880812c01"], 0x2c9c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000af40)=ANY=[@ANYBLOB="9c2c00004400010029bd7000040000000300000004004880812c01"], 0x2c9c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f0000000440)}, 0x10) sendmmsg(r7, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) (async) sendmmsg(r7, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 42.148128873s ago: executing program 6 (id=3175): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='proc\x00', 0x0, 0x0) 42.013572506s ago: executing program 6 (id=3177): syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="fffffffffffff5ab325f8d6381001400080045e100140065000000219001"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @remote}], 0x10) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x5, 0x24, 0x0, 0x0) (async, rerun: 64) syz_open_dev$usbfs(0x0, 0x800002001fe, 0x1afa817befb749a1) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffff8, @loopback, 0x9}}, 0x24) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x1f00) (async) syz_usb_connect(0x2, 0x24, 0x0, 0x0) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) (async) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) (async) write$sndseq(r4, &(0x7f00000000c0)=[{0x84, 0x74, 0x0, 0x8, @tick=0x9, {0xfe}, {0x7, 0x10}, @addr={0x27, 0x4}}, {0x6, 0x7, 0x2, 0x3, @time={0x1, 0x2}, {0xb, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x2}, {0x6, 0xb}}}, {0xc8, 0x1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x44}, @connect={{0x1, 0x9}, {0xf2, 0x4}}}], 0x54) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000006fc857f20bc4954c5dde6cd4766000007ffffffb702000008000000b703000004000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x9220bde6ddc693f) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x88, {}, {}, @ext={0xae, &(0x7f0000000340)="b896259ffb5612bbbc0ec47299d2bb95e8a0bd12d21db3b7e8eaccfddf70a09aedb2236ff3d63d5ab792232657526d2057725226c60e8c29146a52976462aa2a05e7630cc503ee32b7f44e824e8efa26ab9ad7cdc7f33ca59c0fa6d5f551d8a24f8d5a810506ed1b1baa98dde4b5f04145d926b407f07dd8b4fe7abfcd99270319c64ff062a81565f103d4e274e93aef04c3ce1c915531d80d921b836ee930125807917f8fe41151d27eafd0c221"}}, {0x5, 0x9, 0x3, 0x80, @time={0x6, 0x3}, {0x2, 0x7}, {0x6, 0x1}, @time=@tick=0x5}], 0x38) shutdown(r1, 0x2) close(r1) (async, rerun: 64) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80901, 0x0) 41.762965094s ago: executing program 1 (id=3179): madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9) 41.638844896s ago: executing program 1 (id=3180): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000040)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x5c}, 0x1, 0x620b, 0x0, 0x24000840}, 0x0) (async) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x440000, 0x8d) (async, rerun: 32) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x12) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) dup3(r3, r2, 0x0) (async) finit_module(r3, 0x0, 0x0) fsmount(r3, 0x1, 0x8) 41.626187194s ago: executing program 6 (id=3181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140ac1414bb0500b9f91400200000000500050002000000050001000600"], 0x6c}}, 0x0) 41.155426472s ago: executing program 40 (id=3181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140ac1414bb0500b9f91400200000000500050002000000050001000600"], 0x6c}}, 0x0) 41.109534634s ago: executing program 1 (id=3183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x42}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() prlimit64(r0, 0xe, &(0x7f00000028c0)={0x5, 0x1}, &(0x7f0000002900)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_LOCK(r3, 0xb) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000040)=""/47) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x7d}}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000002940)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0x800, [0xa4ad, 0xe, 0x4, 0xffff, 0x7, 0xf9e0, 0x57, 0x10, 0xdbfd, 0x8001, 0x9, 0xb, 0x7, 0x8, 0x1, 0xd, 0x0, 0x7, 0x2, 0x5, 0x100, 0x6, 0x4, 0x81, 0x1325, 0x7f, 0x8000, 0x3, 0x4, 0x40, 0x1, 0x33c, 0xec7b, 0x9, 0x8, 0x5, 0x8, 0x2, 0x0, 0x7, 0x7, 0x3, 0x400, 0x4, 0x101, 0x5, 0x6, 0x7], 0x9}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r6, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xe, 0x0, 0x21}, 0x10}, 0x94) 39.592344351s ago: executing program 1 (id=3187): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='proc\x00', 0x0, 0x0) 39.472652235s ago: executing program 1 (id=3189): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 39.023747239s ago: executing program 1 (id=3192): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x201, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1002, 0x5, 0x3e, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x50000, 0x400, 0x8001, 0x9, 0x1, 0x294, 0x5, 0x0, 0x981, 0x6, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x1000006, 0x5, 0x7ff, 0xf6, 0x6, 0x9a, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xe, 0x7, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0x5, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x5, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x43, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x5, 0x20000005, 0x7d, 0x9, 0x9, 0x47, 0x20000002, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x8, 0x40007ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x80000001, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x7, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x2402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x0) 38.489657052s ago: executing program 41 (id=3192): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x201, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1002, 0x5, 0x3e, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x50000, 0x400, 0x8001, 0x9, 0x1, 0x294, 0x5, 0x0, 0x981, 0x6, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x1000006, 0x5, 0x7ff, 0xf6, 0x6, 0x9a, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xe, 0x7, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0x5, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x5, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x43, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x5, 0x20000005, 0x7d, 0x9, 0x9, 0x47, 0x20000002, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x8, 0x40007ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x80000001, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x7, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x2402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x0) 12.100915558s ago: executing program 7 (id=3269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000001d00)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000100)="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", 0xfb}, {&(0x7f0000000840)="617371ee8655f4566c8caa231bd4cc78882892b3e495393d86acf8a1ff9f7aec6b5461f26521a5c599f8ffc145149e51e32316eed79b946273b113a05b5efa239c72eba1a464884abd8afac12cc1d8064b60b7250945eebff018ef204e8d3eb88507aafe26031b460700000043c63ba733c14ef3f0f51dfe310be70b9d3165022b36d4000000000000000000000000be1c5d8d782156a943238cf3c9333d9cb470dae06fe822c507ac03cf1d295a8fa5d7187aa8ab080910c7d743dbb63aab5b3a14884f99210fe036613b549f4719a4b6896b1e8fe712c800"/232, 0xe8}, {&(0x7f00000002c0)="c55c7ccb2be38afeddce07992b95f5aa2751406ce879353039bac4e55f63c84ac3a17485808f965498d009eb4b8029810401ba52c82e14e9ff1cb57b81d014576a9af6349bcbf044381161a6dbefd49c1b464e340e509979df6aff8c535d4ffcfb041cd541f44a12ada1220973d9762216ed55673227b23adbd1267f9dfec6f84bc4c3d34d5c", 0x86}, {&(0x7f0000000380)}, {&(0x7f00000005c0)="048c93c07718b48e3bfebe111c16e18befa7758befec343f6e540ea991205cc1f86614f9558a559a011eefc4a4ee75386bdab4ac5f075dbadb4801c296292c24ad2d5c377a101979e580a604546b0521e6c3aab83636b07c39fb032d950e094093f3e5328b7c7e612ce1c644cbb521677c06381280888b2d9fc870eec480072ce8088b66b1d903d37073185f15dc99ee13a2817461a382abc64d706593e17c391dea223938de4d056c5d7f370bf3cc480c9d997af2d3a861cefc799c56009685fdb1b1f0e70d6d47ace3b05e032b26bbd9053d7d", 0xd4}, {&(0x7f00000006c0)="e1d7f64ff0c83e7e1687f8ca719c0bb66e0e01ac8d4512a7e81f7b7c1bec99c286d5f64a0c05b4964f5d99ef1efb70cc645a0547216fcb48a4570e314b55c9f56fa197abc285171b89ddb0cefda1f89695b2df4394fe8577c9", 0x59}], 0x6, &(0x7f0000001d40)=ANY=[@ANYBLOB="10100000000000000401000003000000de2cfbe5637bb34cd9f4c80f3d3b66e33ceec51cadeea24b1862fd9dfc6f7d9fe9cd78d2fa630617315a4dee249ca7911e59c6ca8eb512f36482cac2e406cf8994ea76d07f0970f3a1fed15e66be405db240f744d728d9f4f09156e724ec5c30d0df780f98f8b6f70b4a84c0b64112f4ade91c3843ee3e7f0446d53faf23bbde3fb51b3bfd93b77924de8f6d6c2ddf9f81376bd2be37764d64d8982b36e28e2c0ac45151cfaf64cfdc8e425a0d2789ab8c23de7a50428d13119136fda555445d4ffef26948fd801da7ec8ab4e9df4a28ba30182072f059b9f1a4682f4a4a8032d07224932caa4c91a3fe03bf3a118a2d84a36fe62dacc901bdcdd78afcf1f035218eeba2c3c59f1d2389350575cfada5805ecaf9ab5bc77810ac4225293fec2fec11f251af6d66baffa79dfb5b0d8c948175bc1f488553f24b71c8a1fcce2dc8eedf522ddf870a9d49fe84e8b1a8abbefecd5650842c6977505cda1a5f29556a89d7ee24a10ea3ea0d6a77d78d2841c735f2c63cb9512feda888837fc3e4d720feed7d101e767abbfe6673b605f4ef7000a63221740f133f04527e58dd5bf25fa6ad1f735d25e9505037490c4495f86ac6f9d7f3d243110852885590cb72ba6b28c641c99d897b6b6016fd947cdc61382a980b9003c2f053c609ba872e85354abf402dc9d162d7672739514ce0a84dab598b4b29d1aa466dea84d5fa0f2bd9c8ac9b2a67b09e49d5b82bdcd8368a3703dd0aad661edfb139dfa95e2b4f82d4623cd0bb63e9ca5737447507476c4baeb87791680082fac22fb06e4935a61e92a3b00a536dee45274b89e123a8e491cdb23fb72df5b710562ca027c119b9850289ebfab2b9cb3778436b196b1755c60d92594ff39b134359bc4c0a0773460bc82a95adc5c09fbf686147f577a81c6b76f67ac5b80cc5306adf3dc82957bdd57d835a7677b12be403b53ed6b0e5161eb8a5a09df2f79c3719dae2a71e6df9a0c5c94a3e0870ec883b1d52d6490cd2dd67675544ff85b8dc0980b23655adb738bba0ee46d30823ba3c1532557627b40d24b7822a12ec0148af3c3fc064872f6fd55770aadc1bd9367a23fc2ddfe22199d766ec8a167aaa3eb25a66ef28822e7be88602d073f6649ffc59256a5e480b99ab8f9255f02d53438449dcada55191ec7e7e2495abce8c652eb42e8446304b17461ff1801ab747e419616b2099d5c7ee412b5af1ba562d79b5d52c36e8672b83e7b5f45d1592b089f0ad3e945742f5f9a34ca1a30879fd5963ea066281d29f49a052cd0d46f3b2b3d210977476493465d6ccf29894cfcdb3ddc2b0da0069947c50b0c6fbde955c541118f00f0e6b89427c8ec193053f2127445a7eac963a68fabb117ac2c11b75e3a6d6560df0aafe6554d3541dfb329707e625ed5ba2a7a8bb472168481837fa4067b1ae5482a76dcb65a19e7011eb99ff7489cdf61d27d99b51489eaf5feb3eccab51bdaa55db04ff2d2e54b30425aa13706483a55e8fb4121e0d6076b955f2c262e0f18cce41e46acfbf1fc28f2baaab822dfa85fadf97d70a76c5f63ff23c77ea04ae3daf20f9f7b37086a11f638dff10f53aa2abd0d8a4f8ef9178d06c900d2214017bb8bcc96854a318dd286ccaf4fef7f5aae005fa6d8a0b4d249ecba9aec8ac1fad8014764f54f3bfbb536d3e3b95f6b87c0543fc741c04c1a9a8eafc6eda9fdb6a6003f27f77026a923357d8c86d7d3046d61cfde2917029d5d65ffb6e324ccdc5b75f64fea881d11a81297dbdd91d7e727866a1782a0ddf194e6512d5d0107dab30202a0332bed2932c1ced38171796c4733b4c0d6858983aa72bc57ba693f7c649e2f024da59b88a379a0991a2f45d8f87bc435a442cb30c900da65c49c6123bde1a2fa259f2158431f56a2518d907a69af3f96695e1ab200a3f67ea6ce6b529f4d0370881e7929f2cba1539a4c9e7d0d68786e682c9eb30dfd2bef3ee3977681e9357da746be5f617ccc5b578805c0d15634c5bbd45d06b21acb5a6a2a44887965e842609afa1f8f22a31d762f63066decc2bbc6e4574d9739b52579d01175251cd323e9f76f57b00d663b14406d6c3d18b86da346b607f25e3e0c876ab128888cb15a02e3213324ed4b85f5838af4e9856a80450768e180e34dd4fce7191f5bcadcb77451da573e91c18f09781eb7e14c59c7bb4f8bab0288970fe510827a530fc7dc99b2aeb9e7ac9530ad5253f8d00b2ddac35551b79a6ad7eaf67f9014e3a8621982d9949af3f27158d823721b4e286d677c3c13a2ebc2b36d2d7c62d8a4e07be5f083351bd0ca43fdb73398fd250ce6c88502096f18a6b86c08a62733cacdb87b315d67def5689e52e5772dfd6f7d2a676e8d5e29f4b0a8f2795690d2b4ef9ce1b1bdc076096cb5838d49c2942662e358f9ccea6e0ea2fa11bdb1133e086d7c3df2df5e7943d009a624dd7a3c2232a712a2d31efc5e791e386c646828e809b28887a194989ecefd8dfbf6b55f28e8338a0ac7b56b1fdf783810c77e630630ea6fdf81032e2854d70724587ed9739b921e87b06c74d5ee58af38f73eb4b810745137d1e8bed080151dd7c824efdc12ede0e39c5ffc2fe76378557a3e0f7ec65b1862d07709da3236b58cce66c7ab4dbff4ca50db2971451fce59d00e252d40c8908369655674aa9644dea6e8ba1c59a1426b7a16ef9e9d11fe56e6affd9b541f246e108abce8c93fc29b4e8f2fbf8ef36cbe0c8e20dfcfce62ff46aadbdf02774ff69fe5a1394b630a7009d10a71e486063fdc7fd129ffeb6c41f89c51e139d37b7762f6dd29bff6846e4c2e10a680dbe45a81926c666fbf4899cc43fc1557b04e69613270691ad465b07225398f2ccf6b1204eb86a36a2967a8308f3ec5012a941504d7349db2ecfe5773ddec4fc8ecb14426ceaa67dd7a50d735cda3f646bf7c05f7081c823c197cef96537bdd708e1797fde9eb0d0e8c9c7888e0ad6c9d7cf0c414cf74e97b6d68fbe06f2824e956a01fcbc1f7ed180733ac95ddc29278052446a4a809cb42d419466887ef71771873d01f0477ef1baa8b6551114bc9d4263b050a340e8c23cdcf50aaef8008b92ed289cfc82527c0b426422b6362c821a8763652977223411896866161e8f43c69e38c0a32c163fcb88076d2e285eafdca769964e8409b6ded929feae5c16ec7f2587d70d21f83e21c0f3a858ff8de6f0c1d31c25087d504b2a4cfb7b9b3694fcf1edbb79b2731120d4dcc5154ea292c1e8118d28ae4f368edb6b17ad4b591b86a24610f72e5e797d4aabf6ab1e659bbf6df90a290027a7183af2e4171ffd69d69624f14e35695907485d157cf4b858cae35fc7c8678b9fa9c88933de81985901787c8798fef4461a38e207a4365591f49262122f9ea4cc41f3b9c1b7f415e24868ce4a3298de823e20d00752d3fffe5c84055c8cdd4f7f42972438a30fd5ea7b519d7550653e5ffac23399f5a5e5653c191b2f0d992576e7630e4b8e30eb0781672c7017c18c7331f727694968f29bcdcfd4ce150b76bfa4187276f9cfedf9c3025f0a05486edbd6c44894fe871157dfc5079083dbad8b3a4a75dc9a53f77c1cbca19cff330579377a1fb6a9388c5d09fb5aeb158d472941c8d579d5bd6ceaf224e5d88a3a4e4dec53faf4ddcb5ef7523e19757ecac95ee2c32f6dd8b687725a05161230f066239ba1d6b724d975786ebc2c381955c716a0624f806814e6844f7c04ad7f339d2e36234c9126cad2ab0343c9cafbe2d92315ffaf20e56832e45c09d5cefcd51b7c714f67169bf65981da08c83fccfabca01a0d1a363f0faa07e0d604e4fb3cae38480a20b3437ad8adba8893e96c9efdf5358a80398c78f37bcf3e16d74e8c6ba6e9222d6c27b8586b5ac5d177f1b475b9b5c65eafe7408063230bd0c41693fc31675a6e848ab56c305c7353024aed0baab7cccff68dfe13a44507620312d558b8ce9f6c2b13c6d512048021cb1421681703a0e135d4387c53fc41bcfe172ccc12b2483603a1346c48925bbb345d94f12d271551a850f3b8dd1dd91626967608eb1ed66b876c669c77342d213c1aad40b24de79d51525a6d716a5b78a6eb8c66e8eb7c2865ce0ba6a76d61092c5ccf692c09a13bf9dc80e6584e4954c0f8595b576dc0f65b3e4a04f2525513fece247c33b663347e3599602f17fffa17753654c3e97822962af76875eb3f9dcc4b86dc5700d13dfe34dcd4da2636102be761e4172d17912570e209e70e31504575f358ad9aa2e3e4613d9aa0d429100410d037b4da86cdb082e63fdce828675ca265123fc98b93129360a0e882f9e8a368884d056deb66c59c736450bd60376f9d384b401cdceafb5cfece577930f1398ca095990e2a092a9dc7d44a22d010d20a8eeb702b25bf2fd28f2d304bf266c07ccb6fc8f26faa4f30624b97a3246a99024402433593b205db64e2b933d5c9206f2027772d6c9e468adfb8766dc4478e3332b6a7b0c0f6fd223bf699cc523a9367aa1d557f039618c43a78389667bfd28ac2b83e1a9c2ecf11c5bd5ff7686843ee354717d58c1b5857aa11ceec4437136c3c4df42638f98bab117bb7f1efec1dffe9b4127b4c6364c90687d71df0000b0ec185fa17dc37778ea2c666f1e3004d1a916fc9fc01b87fdbbabe74a99c68ddfecc7151c2f4bc0cc02dee1fb3ec0c6299519d5b4ae93ed68c6b0d5a7116e35542657d828fee25f23d8fee338fd33785fc08df34624a4912b3b46a281d4ba8e2ed025a4a5f6cd9f06b1e2bf755f295266507c052cb9aa949e53fc08aa39ef4b1ae88762794c266374d4406909f05287c6e5afdd0e2a1bfc6ccb176e63a54a0de42d7372a170ea2737f0732b4b829c35eba004568f0e6c397318e8388f58887972759d8446bd0ace70c7d179512ad8e564993add61486249b35ae3cf18d19a483f12fe795ff73de6eb2c51c7c2a65ea229fd32538704e9dc89651b9e919fb1c48ed6916beb4b6463fe4af5fd62171b0f9656919f2ba0e3876c1939518bc04e2ce7196c5252d307fee193bead573a4b3dd13538f5acae48be70329a3d95f50b958e975a99e2d88e873b2604534918141cbb6277daa9a211395d44777fd65e018ad7954b679d7462eaa4f4e553e522d4fb8b325b635d12d1d5cd6abfa1420bd4e388b784789de5eac3da9862742848c425d39fb8ee412fb8703aab294c3f1d775c6b5ba9b1aadcd9d1bc59a08ef172b8d2d7ed77145552139403b53515485c8fbcdeda671718eaf1696275fbecf7a5b4804639721cbb41520dc495715bbba7c46909a4bd6e36ac78cffff186870c6573a14a318a715029dba694d6b3c8a4071f41d55567bd5f9664cc0038ceb853b538e84f30abe95c14acf0b7a5de8f63de0443bbc1da7348fe9dd493b7ff28c812548d104b9ae9bb24889d7992b0ad619abb7201a6047b692c37036f87fe194c94b6eb9429e8824ea90ecb2793a386324918d508d3b219587d198a2379bae68e1652d333fe81db27a90c50a650ec2ffdbba0b4e842476792a8d3ade8ac5caae012d1fe78a29d491731d3439a9b7e0985867e285c3b77d1dd237edc49299e62497295d71cf95eefd64f6e050d02fc3263bbf0e7b2fd922d1b22f11a45e664ba6461bef61d4aef83c0b37f9fbd5e7e9626e6f0df68cdabeb68d1b4d6d204fe8b5c0e2f9b4eb971cb8842a8d58b076ffa2c567357cecda43bf23a41039707f1ff4b303d0af1d9abf6bbcbcfe7e4e8715e00dc3ebb6ddcc4f2a666d31db8892f2fba3cc368dce69f4bcbab48413f878707fa626a8b8000000000000000e010000ffffffff353c04cd57f33f99b804308b0688b168fa8fe5945b22595c3cdb30d0d162d91059d5d58af2b9a62edca3c0485a35cdb46a6dc3349fc9040d4ae3fa7edf454fe336a38e981ea1147e405db5743e072d9e2affbb86095d33c702195c90e79aefec721a9a3398ac4162173fe6ccc20c0a964b04b0d7d6c6850ec64392a12f9f266e15548a77c2a0e60ef3ffd08ce84f597b6c6395537bda1b37d69ab875a281fc2a6defb1cc47f21a00f00000000000000010010000060000008c36a8ae6e86b1c986224652f3b96516ce5394b3545e2099e05ce44b8cc1d3a5bcafd1be558f0c4d1bd25326dd0d568f3c56c74e4eff970340864a7a339d4dad77e95cd1d8a54c5f8347b3842b61e937d7e03b4b52a801504bc8f903a7d83fe7a7302123ad6e15921e50f08e937437a44d1e698866e1ee1e87aa3b4b2e4acf4e3a1911471061dabec5810984d92859358fb6953858779fc0936cd1170a5026fde25bafb27fe8ca1104ceec6dbee8c268766d74c9a8e557b292050e0921d2521003a7eac0d4ced6eae9d888045dba7377b131e316bee338895609000000000000280000000000000001000000010100005f38813aae16ad1a077c99837ddda4aeadabf3cff11e5a004800000000000000070100000300000091089fd9b19105d9aa03e9a778435d8415c066731682b6dfa0d6ddcec48d7730d3c9f20143b2d8681ac0ab11a66c4ecb178515ce280ec66f080100000000000008010000b70000006bca1b520e8f709e4869f45ed189119f64fa2a04ae9f0c5d2726966825f55c026a82c7ccf3eb77df3fbe6cdad14f1dcf3f16a855456838d54754b50b558cb885c4dd2045721a71a6e0b0051d95724a9402fc4aa8005c38f09625a625ae5049a96ecdb1866201b0b2a2f219a1cf428fd4751f27e2514d0ac99722042232e363d771e3322c27e58e9aa46603ab79aa3232bed11125e13be6d0ac1bcc2e1c84d4e8e2552198c9d8687e7a106458bdeef678b5444c440638208dda116cb0c60784b68c0d46d4b01e086ae3d161887777d561e5bc2851dd5bdabf6efd5224c7a86196123df0cc332b4e9f6fab9c6b2fa355da519c2e4400000000100100000000000061333593ff010000b7502539335e75cc913f6ee8de67393d861420def5df44381f0dcf1bbee4f4cf64931e6041d20134c0b186472f4981daa88f2c566c89a3bd3635cecabaf6a4a244ac4c6c37929c2f872447ecb84cdcd633b8612acdbd5c77427f85fd65a1dc25cebf63e5827fe09783423f26f771774a4d50470c982d9223d3601108acbf20331e67ea57cc3070b7932f791123a9dd1fae05bcb2816740f6d5aa0641c171fbb4b60ce62b47b597d01f2924ba8cc28956ecf2337b1e7b24871bfe62db765c8bdb64369d06b4bb73ace935c0681f43cc168ed85f6057d85709c83fb2a74b724f00dabfa02fa0030f3ef17e5235dc7ad04568d37462399d93044a8600000000000010000000000000001401000000000000d800000000000000090100000a0000001812b3bbbc0930ac5c8fb0a77ae70613ef181afa88f9c8ecb0636b53307f4b67e6e64afe0118b0d0f84d28b61af83b831d5b6795702d35b563a2839ae23f0b72cb5272bb3137dbe984b131fd11d7dad041fed4b4385d2efbc0ab73e3cfefb27c8ac9ea6794218b3dbeaad9a84beccd79b5d017140084a4726391cdebd9fcddef72340f3f9d346846ffe7e48566af6262e38c2602259cd8e7d686b024d633bb8fb6b3578f2ba3ed876644d04a69dd0b32c4b9a3b9de202bd72a0e1703aab8eb60518300000000000018000000000000008800000001000080a7a300000000000028bef50d2b1105117e5bebdfc9c3e3e206b0d4b0aae2fedd0703384c36579deb4e2659886bdb119b8f2df1381ff1bc68f9ab406bd8e3d4885aaeb58f1bd9e0e17923d616312c66503fa4e993e6bd4e16d4b9"], 0x1540}}], 0x1, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x8, 0x4, 0xa, 0xd2d0, 0x10000, 0x5, 0x0, 0x91, 0xffffffff, 0x101, 0x6, 0x0, 0x7f, 0x0, 0x7, 0x40, 0x0, 0x200008, 0x100, 0xa000000}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0x3}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000380)=0x90000) getpid() unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r5], 0x4c}}, 0x20040080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070021000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007001000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0x400f, 0xd1, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x7, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="7001000010001307fefffffffcdbdf2520010000000000000000000000000002200100000000000000000058000000014e2000004e2100020a00000087000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x880}, 0x0) 10.10750454s ago: executing program 5 (id=3278): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r2 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r1, 0x0, 0xfffffe59) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001800070102000000000000fa127c000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @multicast}) r6 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582026000000000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0x100000000000f7) sync_file_range(r5, 0x1d, 0x7, 0x0) read$watch_queue(r3, &(0x7f0000000000)=""/18, 0x12) keyctl$revoke(0x3, r0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_usb_connect$uac2(0x5, 0x11d, &(0x7f0000000300)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x86a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x40, 0x60, 0x29, {0x8, 0xb, 0x0, 0x0, 0x1, 0x8, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x1, 0x30, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x1, [0xff, 0x6, 0x3, 0x7, 0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x6, [0x1]}, @source_unit={0x8, 0x24, 0xa, 0x3, 0x3, 0xc, 0x8, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x6, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xe, 0x1, 0x6, 0x40, "1d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xff31, 0x94, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa}, @as_header={0x10, 0x24, 0x1, 0x7, 0x2, 0x0, 0x3, 0x8, 0xd, 0xff}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x8, 0x2, "701f0c125d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0x80, "327d2171fb9eb02266"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0xe2, 0x8, {0x8, 0x25, 0x1, 0x80, 0xf, 0xe0, 0xfc80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x9f, 0x40, "59fbc181"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x9a, 0x5, "dc6fdcef5e8bde3c6a"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x0, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x2, 0x1, {0x8, 0x25, 0x1, 0x80, 0x0, 0x4, 0x3}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x9, 0x0, 0x9a, 0x8, 0x4d}, 0x32, &(0x7f0000000480)={0x5, 0xf, 0x32, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "c334508ddfc1582fb7f6a9a00a1701a3"}, @ssp_cap={0xc, 0x10, 0xa, 0x3b, 0x0, 0x1, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x3, 0x5}]}, 0x5, [{0x2c, &(0x7f00000005c0)=@string={0x2c, 0x3, "1d303e48c2ae2e92a79b9ebe6c2b22f57581331a2297d5541ad68f8116c06ca5821e331e269d550a08bd"}}, {0xcb, &(0x7f00000004c0)=@string={0xcb, 0x3, "be5faa3d536d0971c2cc8ee786bfd4451c88088fd9d8f164f0fc0c51d71971bdb81571d3749b43ee1918196e1e11b19c0732994d9fa1afec20fef226de8dd091077e454ce7957a21643323262092e02f3c775d38dfe79cfb4790a77cdb65417a942f77c0ebc067d9ad64ca27c49de37d72740039d2c48fa175a4774ce2e8c73b444bbf788066533de53ed66d6118b884a9843c2171ec8ff6ddc3a37a597d0fe86a82b1fe7f9cc3bb821ef29b795c5a38a05515382c8ef17a38e969492f19296f589266dd5052dca82f"}}, {0xbb, &(0x7f00000001c0)=@string={0xbb, 0x3, "d8bb1ddb23075f55199114eabc21f98f951a5f976c34ba60f1ab5bea8aec3f2081d97b5438ffceccf0e938606f72d99263a45f71a6b6283ad9c1d19cd6c7af1ed86667bbdb88bd20911ab4f24fd8236de9869201779ce6ca276024232fb33238bc092ab1f7076ce9bf21dadca8afb3ed2d53e0e1eed759aaaba72e13055068812f4ba596a5e169071ef8e7703d8fbc5cac18e2fae2fb5c16b9dbe9997ab7db9d4f921fcda25e3d950efb133355f5397877868b842ddf4e20eb"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x34, &(0x7f0000000640)=@string={0x34, 0x3, "50ab8eaed1c4f774bd9eb1087b91025bc4172a274ed33847a2cc14c9d727e62e28e1049552720b13b04a2fcbf2421f9d233f"}}]}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, &(0x7f0000000e00)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)="dd", 0x1}], 0x1) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 9.777350275s ago: executing program 7 (id=3281): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xfffffed3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000780)={0x5, [[0x4, 0x10001, 0x7, 0x4, 0x1ff, 0xffff, 0x401, 0x8000], [0x7f, 0x800, 0x3, 0x78, 0x0, 0x4, 0x62e2, 0x80], [0x401, 0x8, 0x400, 0x1, 0x0, 0x10000, 0x6c2, 0x5]], '\x00', [{0x4, 0x7fffffff, 0x1, 0x1}, {0xbbade33f, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x101, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0xfffffffa, 0x1, 0x1, 0x1}, {0x0, 0x3}, {0x1, 0x5, 0x1, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x9e98, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x7, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x3e800000}) lseek(r3, 0x2004, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @broadcast}, 0xc) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4800) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r6, 0x80079a0) sendfile(r6, r6, 0x0, 0x7e78a6f1) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x70, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x38, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0xd, 0xc9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x2, 0x3, 0x8, 0xc}, 0x23, &(0x7f0000000140)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf8, "ddfec48614bf00037af1eb15c2967d8f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x9, 0x8, 0x80}]}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000380)=@string={0x4, 0x3, "85b0"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2b, &(0x7f0000000400)=@string={0x2b, 0x3, "df89874e2c0a7f075a2d5433c77b87b0ff416212cfd18a8d61419f79121ff6cd322f4274cee45de529"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0x98, &(0x7f0000000480)=@string={0x98, 0x3, "5858b4085d967d5bf1c4689b27397aded407cdb1f85c7ec28e3ab37d3fa289f348c8ffd11ba933584806533c92521fc2838e949722f646caf262fd91fb52835e46a213e720b0666b4198a2b3e61a602250f52e8062c3d5111f2732d508319360301c7b18969bfaef70f10b1d5a641c652a62d576deddb8a953d77cd1bd29f61af74685c70e92494defb946f2a478be34d18b3f3d0981"}}]}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) pwritev(r0, &(0x7f0000001640)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f00000001c0)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) 7.370379125s ago: executing program 2 (id=3291): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000019080)='zonefs\x00', 0x2101041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @local, 0x10}, {0xa, 0x4e1d, 0x880000d, @mcast1, 0x20000}, 0xffffffffffffffff, 0x5}}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0xc, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x1feff) syz_open_procfs(0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x20, 0x70bd28, 0xfffffffb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}}, 0xfffffffffffffef6}, 0x1, 0x0, 0x0, 0x20}, 0x20044084) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xa9, 0x13, 0x42, 0x8, 0x46d, 0xc291, 0x3488, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xb, 0xb, 0x70, 0xa6, "", [{{0x9, 0x4, 0x14, 0x9c, 0x2, 0x1a, 0x12, 0xfd, 0xfa, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x9, 0x7f}}, {{0x9, 0x5, 0x16, 0x2, 0x8, 0x5, 0x8, 0x5}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xe000, 0xcb, 0x3fe, 0x400, 0x0, [{0xfc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3}, {0xf, 0x1c, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x9}, {0x1, 0xf, 0x8, '\x00', 0x9}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x5, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8}, {0x6, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xa, 0xa, '\x00', 0x8}, {0x6, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0xf, 0xf8, 0xe, '\x00', 0x81}, {0x3, 0x8, 0xd6, '\x00', 0xff}, {0x4, 0xe9, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0x26}, {0x9, 0xd0, 0x0, '\x00', 0xc}, {0x5, 0x8, 0x8, '\x00', 0x11}]}}) 6.345897668s ago: executing program 0 (id=3292): r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000004c0)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 6.21199355s ago: executing program 5 (id=3294): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000005d40), 0x1, 0x0) r1 = epoll_create1(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x3}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb8864450000b000000000041190780000000000000000fffc4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c5185934d51b57d036ad3c045942824251d7d17b5191584bcd4fbe40a5a3deb25f00523424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d07"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffef}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) syncfs(r1) pwritev2(r0, &(0x7f0000005ec0)=[{&(0x7f0000005d80)="91", 0x1}], 0x1, 0x5, 0xc7, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x814) r8 = socket(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x600) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, 0x0, 0x0, 0x120, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) 6.029927083s ago: executing program 4 (id=3295): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x10001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r4) exit(0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 5.897482487s ago: executing program 0 (id=3296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setgroups(0xefff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)={0x2, 0x0, @d}, 0x18, r1) r3 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './cgroup/../file0/file0\x00'}) keyctl$chown(0x4, r2, r4, r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getgroups(0x2, &(0x7f0000000040)=[r3, r5]) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.655129779s ago: executing program 0 (id=3297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf0) 5.153823382s ago: executing program 5 (id=3298): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000680)={0x48}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x50) r7 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x40040) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x2) 5.078070359s ago: executing program 7 (id=3299): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x18000000000002a0, 0x1d7, 0x0, &(0x7f0000000780)="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", 0x0, 0xfe, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001002dbd7000010000000a0080", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x404c055}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009561e3459b27055841475de2364f3ab69cda"], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff75}, 0x94) socket$packet(0x11, 0x2, 0x300) read$alg(0xffffffffffffffff, &(0x7f00000003c0)=""/109, 0x6d) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000380), &(0x7f0000000480)=r7}, 0x20) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000240)={0x2b, 0x906, 0x8}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0}, 0x18) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="58000000000000000000039ef5c7000000000000eb091e5b077793fe87a9693995814f86ffcb9db0647016aab9b14c48581bf9bdf8b4584d37248583dc5c35f681a9469a03077780c73748609b6e70052f5284b93b0a8787dd74c18b0c94cdee544ef6e9a0d2fe824b18a2a40d85f08014d7744894589900d4d443a52b6b4f6a6fdbb2e5a59f2c57078de14c591583ce951ff8238940374da7654b9ac305ffd30d8182", @ANYRES32=0x0, @ANYBLOB="eab0817d5050000024001280110001006272696467655f736c617665000000000c00058005001c0000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) 4.708535814s ago: executing program 2 (id=3300): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setns(r1, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 3.259620656s ago: executing program 5 (id=3301): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0xf0) 3.232470075s ago: executing program 2 (id=3302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) (async, rerun: 32) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x28, @bt={0x2d3, 0x190, 0x1, 0x2, 0xd59f82, 0x4, 0x6, 0x9, 0x8, 0x4, 0x71e, 0x13, 0x1be, 0x7f, 0x2e, 0x37, {0x0, 0x1}, 0x3, 0xed}}) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084) (async) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x880) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async, rerun: 64) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) (async, rerun: 64) umount2(&(0x7f0000000000)='./file0\x00', 0x3) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000001300)=""/4096) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffe2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.093929031s ago: executing program 7 (id=3303): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (fail_nth: 2) 2.735203344s ago: executing program 4 (id=3304): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x200088a0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x44) mmap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0xdb8ad000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x40, 0x0, 0x47, [0xfffffffc, 0x80]}}) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) mmap(&(0x7f0000feb000/0x12000)=nil, 0x12000, 0x4, 0x11, r3, 0x33259000) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 2.727377923s ago: executing program 7 (id=3305): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffe) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, 0x0, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) (rerun: 64) shutdown(r1, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x20040844) (async) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xcf84, 0x7, 0xa9, 0x1}, {0xa247, 0xf3, 0x6, 0x2}]}) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @loopback, 0x1c7a0000}}}, 0x30) 2.667163178s ago: executing program 0 (id=3306): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1d) 2.285896009s ago: executing program 0 (id=3307): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x400) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x2000000000010}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.93583597s ago: executing program 2 (id=3308): r0 = syz_open_procfs(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0) socket(0x1, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r9 = eventfd2(0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r9}]) ppoll(&(0x7f00000003c0)=[{r7, 0x110}, {r7, 0x20}], 0x2, 0x0, 0x0, 0x0) shutdown(r7, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x4048aec9, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 1.909990701s ago: executing program 4 (id=3309): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc02000000000000000000001a000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000fb1a61679198f4583293e4b677fad487af625d5512c53bb7e2c1b70723719e15aea9f0431eb53d8f870849e25e716c984677f123a02d1806533c4331185589130b40d20331974d60fceb91b55965c13d3983b0758f1e1f7e169815ff3c70bbe215005306b9e817ec9eaff4cfbb841fdc504b6266567a696655b6875d10b1b3330dd8abc1d0ec6647c7fd988cf701de24d43ff7eed0fa730c30721a460a8ab0a15462dea5e67d741fc73a88edcf08e6af33dc3fd148ea3b9d603aba018692e9249c6f9a4cb65983ef937e0a6f026bc2aea2f5c0202b139ee62511e9e51139a2d606f2808c28f0af7ab45f08f405ace02ddf40ec98f924322154418e2a7e35fc77ecaa719b49f20ca6727e23cc055c9461291108db853c12a4fae7b9be7db1d7c971e93caff92b9611c36d0ed1abda9ad8501c4168"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.769912302s ago: executing program 7 (id=3310): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="3cc81e0000004d61501d0100000000000000100000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000020c0), 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r5, 0x0, 0x0) getpriority(0x2, r6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) 1.707125847s ago: executing program 4 (id=3311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f00000007c0)=0xc) statx(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x800, 0x80, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_clone3(&(0x7f0000001b00)={0x100004000, &(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0), {0x35}, &(0x7f0000000a00)=""/176, 0xb0, &(0x7f0000000ac0)=""/4096, &(0x7f0000001ac0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r8, r8) getgroups(0x1, &(0x7f0000001b80)=[0xee01]) r10 = getpgid(0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r15}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000007ac0)={'vxcan0\x00', 0x0}) sendmmsg$sock(r1, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001e00)="486e8f731f88afb57e64a4e51270a522b9ff13354fda601bfd105bbc340310e37f3f2f7cf74157c4cb1bd6de80b0073923a7844091ed2667cb703d9805147ade9c0f3ce5b0b44d7be20cbf065abfa3b93cac954e98d7f2c5a6a42dd09b5f09415775428a5011ee748b41856c83bfe06150f489a8b0d32c9a906f981ad013901575d4f3540909be581a9e990679cc14b0b12e9664c4d6604f1302b928db01039277bb2ea2fd21d8088d3e73060c29591ea5fbe64c119fce1b1d075eb33096533966db4617d87a9febe2", 0xc9}, {&(0x7f0000001f00)="2db019fd050b21c1b30b5b532701ddcf5351a64d22efb5e2952018138824067bef1b6d6a9d259b5a452aef5daa8d6cc671e91aec5ac33c0f5666dd09bd3cef74c7fb27ecea30a0cf9e5f456c1c2ce6984682f50fea4422e33c6e1dc28a35d34060c1195aa858087c634ceeb247e2ccbf8d2bfc7486c41f685e08ef8a1af4c562fd99f0967d55d55a725d640bd10bee502e7fd470508be569afcb50908ad10c76a654f30ade356e7ee3fc5900b464dceb484fe6ec6dd4dc5a9a4fc2b72139a66c12ddde649a2a587740", 0xc9}, {&(0x7f0000002000)="a67d85dcfa1dc041c7bde145df68f939caee14aed72471de4689e29c69d54b27c7e5ccfe8ebaefbe4ac8ac26984c8d69cb0367bdb6f98d4ef982d75d3476555b56ae9c382b3497c285fb94f95423545f815be6407fa946ba67bd269ecd0631511ba839072d5df73578057c5d192523fa58a98addff6d5c1a75da98088c51d17ea7c4f0acfce4ea03", 0x88}, {&(0x7f00000021c0)="ba626e7df1513777c674add1ab39d010a16c839df7c08a3cbab6d2848cbf112c36fe2f3a0126ddb5b008cc1e96aafa24f794f2479639932e8f21706339040cc8f4e22112e27076f000c1d4a28e6f63c134430fe74ea1e58d4179b63872490db165bf", 0x62}, {&(0x7f0000002240)="1b8a425d9b4f880a94f2146d48c0b78e285fd2ac818dbc7a74d60f092b8dec06956684df9c", 0x25}, {&(0x7f0000002280)="ee5c0b7a1dd12d9fddf7bfaf0de165c954891332ad5749d7694d5150bd6e1b40b2d4715cf9c5e71dd8641d38d0470e0322edd7e167f2ce6ff9efb516043fe548f01b5f58cfb57268623b84c141823bbe75955f23c0a60fbe8f8faf4531867c9c305f518efde8414001b65cba7353a7c3f5bcf270832c3cb44ef58d1d5d16e2ef0e6a8016c6bec2a4f22e07ca171afbf39aeeb2a5c18496261bc6062cd5243d22b15b6b7261ee8de58f93a4269922b97959e60a7b5e72fc04d22808f68b485c4d69a5db6753278d2f0f570e3783b7e38dd39247fda361d271837426ee029311e1cb528a15b2aeed0708e74ad08898c40fceb35a7376374ad182eec2cf", 0xfc}, {&(0x7f0000002380)="39cf493181668f99be1283b6b35f700e2888d3c6ba456d62b770ea6e650401eb43fec2", 0x23}, {&(0x7f00000023c0)="0757fe3b4539999fa45b89158f2f0cacbc7d09567fd03015aeaba92d7b6417528b7b75ed7fcbb034c581ac06d2613f", 0x2f}, {&(0x7f0000002400)="3d5776e95ce5b36182475732c9f80ccdd7a35c8d3dff2144c765dc85eadb8a510d44697413b300a2a145cd1a26e6d8879362eb2eb952f4d867eaa263d4391b1d4300d96e86745dd462b0c18d80acf2d5b2cf55ce3489cc59b5272eb8849885e8e58e1971a494f63c2e54f1ee97cc30f0a3c9c3d504db764ba50bcc5f3ed6d118de66871d83e454621d5de333b380415992fcbf2eddc18720d1f2f8898945ecaf14e5bd98529ca72f6e0af3abef65bdcd8365b17de33fa8aa2746983d13a279720a350384788702ff7e8c49070aca2dbb039cfe2be71c3c743551b028c732ef2d73897da3d4e928aeef7b2afd77cc", 0xee}], 0x9, &(0x7f00000025c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x60}}, {{&(0x7f0000002640)=@l2tp={0x2, 0x0, @private=0xa010102, 0x4}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000026c0)="3624f4ac4aac1b61f79bd6397fafc2a72a7162a1455ac104c48f1daf8119b5478182180232f8383dc8834afa3389ac83807e849baf09af1b4af810e44e26bbb064417e9affba0669891479bcb56dd9c6e99cebd3e4f73cb932eb466271c309e43f9957e1331bbd655a108be226fc98750b0c6d52359de047fd0c1088f4371767745903eb0401fea9d12c5e6bea77d2d23ea78ae4317456218854146e0a6261c2a0ac6da7092c9cf514cc2100913b2fa88261443a082f6b90d210d346ab6b9d9e3f78c3ed2e7b2d1e4087dbc5da7520f7355bd34d2b6dad387da3d69d73ae1734cd932b", 0xe3}, {&(0x7f00000027c0)="e00bf869b1bfeb1f3ffda4959224bfd85d344a42cfcc92ed72a4d8b6a37c2af7298e7b791252b9e878401e7c5d8e4bef08a47686cae2e53b2dccfeaa4292b7f3066b3140f334010c952b35004ec836f779e5439be589bbfb78e9dbf767e080636b3163a22ad9dc5af49254c1cfbc9a20ffcdcf669a649840bee60a5311fe86e59addff00056d48494b9c472bc7103327f32550fd74601c411adc76e47af4c6927243f8be999034e60cc936c9273775d15ab4d100e5e3036f5fb76057182e7928b18475", 0xc3}, {&(0x7f00000028c0)="3a3a53058b638272827f784201e02c5fd662540e0f097fc71e5c9288edb54487c7ecc42f9affa6a0afb59bfe103811650bc72534ddf3f325ead39c1c42704fc603307c9b997e110e371a6e085191a7c46164924932a71a0bacc1d7dbc0944ad997bfa97641d7e18b98676c5ee02ba1da85a915ecc99c1f3278749df71fa18442af4886d23527d6944f881c26eb6ec483da3f9ea707a660b61742b9e8ee54e7649aa863441ef21d5e1ecbe021", 0xac}, {&(0x7f0000002980)="0afa1f3d2ab7496d1a69b582f769a59f19145ae8e9586cf5565848e95e6c1caf8686fe91cc1e5f2df9086c65bc", 0x2d}, {&(0x7f00000029c0)="a7e9c9c59a5afb802afd75aebd3b09a2e7b7f097710bb56427f27b3ae3c94bbd9a50dd3549544b2bfd26b5e1e470bbdcb46f441e929ee245b58d3fe5d3528dc3535c6fd85f1a7d5bb465ffa48f94fe3e38bfde5439899debaba1ae5e6d2a6fa4fcdcdd9964dc67d7259a40f4257057de592865f21c4807251a3bd31083d5729239ff910d15aa76e1223b1851aaec94dbf544345de8ee04c51006c585ace6bcf17c4fa6a14b489dea4aa025ad1a9af53ef7f0c77d5366601f48583093158f9c2eafa3193d423d99cb1f8e7476042bbd207a510d4d3cfbc16e4856475a5b9b4f11e7f3735f5ba615d7b9097159f97e348884544127e6939bfe", 0xf8}], 0x5, &(0x7f0000002b40)=[@mark={{0x14}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x63ad}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xd8}}, {{&(0x7f0000002c40)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}, 0x3}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000002cc0)="d0c7ede095764b4f4495722147d8429d4e2e8e731fcca88b03b0d5607cfb62306d1052a76b3b94f9bcf596514d4cc569a0b4031993", 0x35}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="9c187447cc16f00f37f61306aa9e5a5a4a8dfaa0347cf71ea4c06bb03eacd14abe9c382545b9843729b37ff3c848e9bc9edb898d9dcec425643dffe0800e3413ca77f5a20953c5f62d1b9ba18cbe197dde151fd4614f30956e8fc99fa3196b1d2cdd23efbe7c19ab3b2fb67e19b9fdd0c9cfbfb92bc210e87c7303d07c1eea5f5ac47a4fcb773d060f802deddf324f4ccc9fb1166555565f2afb430007ccaf005a01cf17a8ca48fddf0e9faadf2d4f3d954ca6223c3a", 0xb6}, {&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f0000004dc0)="97076d564847837db4ae06a2649eb7a4997312c3381fbbcebb288932a07102786118c0908e3224b31da8cd8fc69e2592c6d06db51f72f4d4008ec2ef1790abc44c35262bf31382be6b245ff8bb491d4bf7493c358532a6d37416b9ff26df3c56c5cf5baa475da2a4463ca853d991549ddeb7c20e30548bf8a075f9d05e30b66f2c63894ba684b1500e0067413c96b8f66a74c70fc7b9daeb99b667835d5eed60cd3ca9fb60ae2e036b82fbc0defaf529", 0xb0}, {&(0x7f0000004e80)="469bece2920d07746950e44fe134638222945c77ef0551ee204a0ece6973dc12e7a92355c26edff1731a6df542d505b85630a8cf904f34f4eaa003bcc5838e4a6fd597bb5384d2ee05c5920d0d8d9f002905f05eeb8dfcd5601ea2fd13ae4580a29cebcc519a08fc88ea85ad17a9f8132825876a09565f086e1bb5a0eb663cf90ab483db7a5ae8a7afea501bace7af34468801a5fb9ca693159f50fdb9c5a5e98ba193662b484dc9368b9b26e4937b9d990ace98ae0540c3ceac", 0xba}], 0x6, &(0x7f0000004fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6ef}}], 0x78}}, {{&(0x7f0000005040)=@ll={0x11, 0x15, r15, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000005600)=[{&(0x7f00000050c0)="7dd3065e0146056a4bfb60c2d05a385746acaaabc346b004ea0de46402f4787fcb97279653c56b2965925149efd469e77bf6534dee7be9c2862c0afdca99298ea31c2d37886d796ecea62f135182d8a92c47bec8a67fc3386e7daa7bfe2adeb44103c1845f0547e0cb68bb52089fc3c627ea4d6f9185a11b65d8abbe336ba84b22386668e5ac586c2bd4d1", 0x8b}, {&(0x7f0000005180)="c6b24f9926dfd9ce6aaf0c5655b8174cb6b9bfb6ac15bb8b5523fd019aae142eea2ed1e237daf4b1b9b62bc8d31552a8e4bf4b3f9395507e5e3932d1861759d4fd9255eabad7c0d59140c0a7649825ac93f90de6278d595114eb38ade6f2e3ee29256796e1f7f5c560cf0395a2ebe933996dfc4ae0a4e47af38882a354191e4059b9529ac5f51d3db69d54bb75364118d460f416bc4b1763e7b436097ac2b5c491ef5ac36d9696239ff3e8af6a784201ded701367a07469b6c54f6", 0xbb}, {&(0x7f0000005240)="54bfb8762c469cc399270e12a9ed3efe768f532c9788ffaa9dad12630e5831e8a1202a6076fadfa0182b6e77411a5e71e4b823dace8ee49da1e8d5e8df8283e88dd1fd26954e20a18f9d15a0ced98f61871f9140c6ba7ee55c22e752efd58ae8f4d25d74bae451971ea099d6e413a6267bd0e0", 0x73}, {&(0x7f00000052c0)="daa2d7fa357cbd769e12e5114a94b1e78d4a5534316c064e7ee3f7267da35a519b4ad81bdc429cbb9aa45dd4de1a30a173d60892053a809fb0906f300b5d12", 0x3f}, {&(0x7f0000005300)="46b352ac4586beba1f6669b600ecf288385aedc407905ecd4d980911f57964e60089a4ce3317b040e76653908457a10dceab437568c88af9aa9ac63f91496c74715dcfa4ca7d52d53138d0efad95d0c975d5a79f4c136e8527fd4b364933a49e099f915a0d09b00f58afe699d84133c3f04db1fd71f2bd34dd", 0x79}, {&(0x7f0000005380)="f89d9033668355d40a93644d464d9f9ed021dbd3198bab5c14e97f4d81b75fa143c285a80e090ce347feece0e45fc9bd88858225651f5b56d099508812d3869e787c69b09c6580653e9f66aec53e96071f6caf6b2779169b546935d17d8d5d6ccc175073f6ada05c40d75ff99fbdd8cc3d8031741942cae999f174b2f0148e9dd1ddb72f625db6033b1a4ec4be5a5fdd3f4a0b722aff6a7d75199b11630425b4f59382420797931f968ea7b7a14a2b5efcb05124bb92c9647598b0d5ed7b606077abe4fb5fe2967b224fba6de7d3bf2ed573416239d22cd3396d683c09cba6cd398d39b543695e2943a02c8dc581b69ed00f28c2db", 0xf5}, {&(0x7f0000005480)="158240f1282d0fdbaf958d4a26d802e807ecb572f96e09fab86534265605763e83740ba64e2524a1d44b29226e86dfa1b67e5dd40d392d8be8df861fcf1d1bb5d086fc6270378b6045882f20d2788369af0282f1a83c33fd99581d81dc0bddc27f9c114a67e819649604095053fd61f61dd751c3a27bb4f2baedb9e0100c4e6f35d038e61831fe9f86bb668e970194babe23da68844d8849822374d5d0fb339a17e240c9949f8f7e1c19ece36d607b28f4142b8123ad98d69c82ddd7773804996e14729fde1eee86b097fb294098d46520103d0da9cb959102ea82ec8e641d161bd3e02a9df3", 0xe6}, {&(0x7f0000005580)="52ec88158c7e7159f82787a27281a6b92c16720f302e66baa16e7926ce92ac1834f5294b808e70fec5c327577bbe943251a25bf56a4d6ab091e65f0dc0ae9b4425d9a68426a940bbd64a3ddf1f14d237a5149ff816262cb4250484d1597077", 0x5f}], 0x8, &(0x7f0000005680)=[@mark={{0x14, 0x1, 0x24, 0xe36f}}, @mark={{0x14}}], 0x30}}, {{&(0x7f00000056c0)=@in6={0xa, 0x4e20, 0xc, @mcast2, 0x80000001}, 0x80, &(0x7f0000007a00)=[{&(0x7f0000005740)="87e98671d723", 0x6}, {&(0x7f0000005780)="75df9c25d27a021df7b54095c7e91cef966d22b11c45e1ef872409e0ccadf35764540fabec3b0bec01c5ebd3113a5060723a7d9005082aa6aeeacb84145c83fbd0912ae5a90e801a65eeedf6d48517954571cd0d115cb7eb2b", 0x59}, {&(0x7f0000005800)="146c0a826e5794c22e213769", 0xc}, {&(0x7f0000005840)}, {&(0x7f0000006840)="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", 0x1000}, {&(0x7f0000007840)="930d5a180d1037409960ba3e7c942ca85076a77a33ab12ad23f8db502c99d690db26b5645a80f1fd75fdbdedd7a9f70f7d392ab6bc306615b539459ec098041a4d811ad3610858925fcbe923a07b775c6548879264a553feca9818cf0cf9d00a8c06592a467d5949457b2d8afa84cdc2904a4f9dcfb245ab26ba4af514e054785a4c0cd56d1dd04237d1393c95672ce7ae4c9a4751454a81f9cf092dec5fc2b50d0fbe9a0e6d0c9da5ea7b0af35fb25e0f2a76478eb074ad23c13b189b398dcf84eac27f483e359ff03df220c6f053134217cba7c0d21a796eff2f598892cdc7a135f01ec9f53234cd", 0xe9}, {&(0x7f0000007940)="4c1219524e5e27524ae5f609fc467d49f2ca6c0a355c31ad1560ce4cf782309df47eb9d5267e2e24b47e9ba8736ce95c7fbb867ed650846ac8bb2e432956d6e00b712f59f62b7dba28ecd6a5f9328b2974f3df644d4b790d0b24a9d49f5a7febdf7212649be20ad8d052d1d3990c11736128693b614b2eb26359f521c5bb9e43fc8854e833de251a9ec8a3", 0x8b}], 0x7, &(0x7f0000007a80)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}], 0x18}}, {{&(0x7f0000007b00)=@can={0x1d, r16}, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007b80)="ea84b0", 0x3}], 0x1, &(0x7f0000007c00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0xe6}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x78}}, {{&(0x7f0000007c80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000008040)=[{&(0x7f0000007d00)="52d446be1ed1b2b8fda548896cd1b310cd572d37b635e0b04edecdc62e756194dc4091753784086a169f23096da255b343844f13de5c3d437fdc54ba6fb9701433db38b460636b723a7878bbed3d790b403fbe0f99cef8f8cc7d82a0c5c60089a3b62ece78425ba672f6fa17e907936a33544b8d078ed1bab209c5615e76061819a00bcbddd318300fe9437f9a90c619da78c3e50d40e3758711f48eedb589ab4b6fe33114719ac6ed05d5265011403014ae062b35f4f9b4be14964e2a043e9a81f929cc0b3f61f0f9a39d4f6f463af496e8d21e51f022e9dc6c94e61735", 0xde}, {&(0x7f0000007e00)="c75b", 0x2}, {&(0x7f0000007e40)="2546efb264ac3f4604375406044f6f533cdd639744ff3e60f6c44fb2547bc4436c17d2785a65f95f9aaec8cddf3a1ed130c2e373ecd739e07fd7d20870c8704305659b115d1604641552d1cf6158658b984b82e146e3db881bc4b272", 0x5c}, {&(0x7f0000007ec0)="ac24de796ffb1eafa2ed3dadd46685c679b5bad161cbc3a1e3477652bd88b1d905d92e55fe2a97019413f70bd454224d32178225a01bae9684b006d71db1cb488e0da80a37748e1c8cb9306ef081173c0c2c0f5c8ca36b6c7135bf4b65a238d8eca530c0011fffb2968a2905cb5ac2a427d636a8f7dda57822e4da3d262268549f2f5bffecc7faa81f250355203c25555f2794ce1ebd3b181222f5caa34b1bf2483e0927ae28", 0xa6}, {&(0x7f0000007f80)="4724dd7444c8e5d9c81048b3fa", 0xd}, {&(0x7f0000007fc0)="8fca1adfc180ecbec9c9e04d1cf43f0e", 0x10}, {&(0x7f0000008000)="10c4c3d12836b78adb6a4756a77b54f6ec9a029a77634cb9fad8dc26ab", 0x1d}], 0x7}}, {{0x0, 0x0, &(0x7f0000008240)=[{&(0x7f00000080c0)="5ce6abf3da33d3d804e6e2198bd788ad95a1954730db5c57a708c5ec41d85e90af6fde9fd0fb4e1bb9803f12f49285577932b3601aeb379554f415cd7ff43fe6b9b6270c23c4590d6328f0379d498ba7559d2e2248a98851ec37f38b27318f2886d28c845ff1e4478da0ec0ba7a5e27ba87f6687d4", 0x75}, {&(0x7f0000008140)="e67c76fe09753b07d1e571ae42a2e4c6b31f2ee03399d30500ce482ca30fc7ad0c8d182f88b429f62659e265c54d2570af383ea461ec1af86d8f377d119e58ccde2bfc6e8e89585bd6bdc61b1b3c1599e5b89294c1a6583a7fa0b5151eda4b2e9a40a479210bf774e67287de779c46f97ea8cbd146dccf0232182f5b272ad98d919b113cc90bebf2bc603fb94ee1ef1121442cc49788e9d49ba3d65d58867219dd3c3be91ddb47dce9", 0xa9}, {&(0x7f0000008200)="8c301abc4d6b587840bc9da1fdc64257fa36f4aeb567490df12fb156873b15274df12418142bc71d3e476582", 0x2c}], 0x3, &(0x7f0000008280)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}], 0x8, 0x40000) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r12, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r12, r13, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000001d00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000001d40)=ANY=[@ANYBLOB="300000003f0002002abd7000fcdbdf2508001b8004008700f463a7be0c15ffd98483eb671aca8b00fc020000000000000000f3a4f42d160bb3af7aa322d87adb11f4af4970dbb411266dc6d8294ebe578d8a87adc5652b22b03f4c3bed9ab0e6605f03c9f7fac01cfc161c9ddabb6bcccce96207e6a887f688d7126f49042d34e563af56f513199b36e9eb71113808201500b16ddbc70d6857c1bfe0f90afbfefc7039fc7300887fd4cb7dfa6ba09d07b3bd871deedb5cd4"], 0x30}, {&(0x7f00000002c0)={0x3f0, 0x6, 0x300, 0x70bd28, 0x25dfdbfe, "", [@generic="8740274de2992056b8ec8e317b35034e7138a64f90e4996bc87a169c91485cf157952e2eab823430fd9cf72e648c77f7b5bcc34828dfe233d748db3d04d362e65730deac1097f0fed8a7245152d0431901dedbe153d37f2e96c394642cc02ef3ffaf68d7aec72b2cff645abc1146dd2239ee63492090144079e65e6b5a66d49413a9b27b35e162c387e1184b5e1beee279cfdb8ed6d08b1fea443f4dfd4ee0bafb6703ea3fff12c97f9335", @nested={0x203, 0xef, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @u32=0xe20adf3}, @generic="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", @nested={0x4, 0x29}, @nested={0x4, 0xc1}, @typed={0xf2, 0xee, 0x0, 0x0, @binary="5d5e07ada88486f4a4ca5396e01809ed7b46db1165241a731565b833a82ed9ae85aa8269d32ce428691a7a3165b63885660e9a5369ebd373f66348072613d802448b8bc42498808abb5b0086218fe62538da2951612925192589c28e1904b5e61087ce2c0463209217aa84ac36525ffc50d9939de96af36b81bf1a9a2eb951127e2009fa9ff6ce8f563d7c68cc9565f2f0874fb4d424785e45c55bd2c2191c2053ab9aaa30c84e7ece93f470ea579d47a8cd8cea083a0fbe064861afe385e4a8ba34c0e9d962dbf32e53fc544746ad69de5c643face75be50bde5f1a2701de8b90bfd272f42f9f5e157490a65d80"}]}, @typed={0x8, 0xe, 0x0, 0x0, @fd=r1}, @nested={0xb8, 0x125, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @uid=0xee01}, @generic="aa989d23f0e7fead1b0b090a9c63242c94b317866b09dedefc8a7e89c49391243a07e4806b4b83318e71de0b26d46931ba08219536106fcbef0ab5aee84397cbadf768fbd73725aaac76ff344a5c400ffbeec483a9fafa29293dc0680c1e5116617fd4657f12039cba87abe7a7640739bda3f852b8622dd80700579dedfefc91cd82a801c723064aed5cce47900ba05bac69e3270285f532947a502f429a9c98447f531c69ce4c56", @nested={0x4, 0xe7}]}, @nested={0x66, 0x71, 0x0, 0x1, [@generic="d4976076fdf3955b6c4738ab5c5bc2ae78a40cb63aea2aa67cb46c5c4df613a7182113cfcf8f38345fd622f23f0c9d1940ac29d166bcf95822c791f25acc06ac2850b1c305869e4b8bde", @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}, @nested={0x4, 0xfc}]}, @nested={0x8, 0x128, 0x0, 0x1, [@nested={0x4, 0x7d}]}]}, 0x3f0}], 0x2, &(0x7f0000001c80)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r17}}}], 0x80, 0x24000044}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r18, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r19, 0x0, {0x2, 0x0, 0x4}, 0xfd}, 0x18) sched_setscheduler(r7, 0x0, &(0x7f00000001c0)=0x5) 1.511770675s ago: executing program 2 (id=3312): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) sendmsg$key(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x10) (fail_nth: 6) 1.345878386s ago: executing program 4 (id=3313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x8040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000100)="8f3562744aa46e80c19a0bbca760ebf6b499aedf238605a318c154bcdf94ff83bccb0a988e7602b73531b21ed189325fa0ee22eb254a3c1cdf36407dcc", &(0x7f0000000140)=""/206}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x2004c810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x20}}, 0x1c) 913.597504ms ago: executing program 2 (id=3314): syz_io_uring_setup(0x7876, &(0x7f00000034c0)={0x0, 0x7646, 0x80, 0x2, 0x311}, &(0x7f0000003540), &(0x7f0000003580), &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=-', 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f00000001c0)={&(0x7f0000000140)=[{0x8000000000000000, 0x2, 0x0, {0x253c, 0xf}}, {0x6, 0x2, 0x0, {0x2}}], 0x2, 0x20, 0xfffc, 0x4}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x11b) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0) 900.463963ms ago: executing program 0 (id=3315): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 836.233613ms ago: executing program 5 (id=3316): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(&(0x7f00000007c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x8a\xe0U\xbc%\x05%\xfei\x96\xb0\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\x96yU\x9c\x0f\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V', 0x83, 0x10, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_delroute={0x38, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff7, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x8000, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x8004) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @none, 0x80}, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) 431.756299ms ago: executing program 5 (id=3317): syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x101043) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xe2) keyctl$chown(0x4, r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'nr0\x00', @multicast}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_ublk_setup_queues(r0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x2000000, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xdbf, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r12, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYBLOB="565baf9b07f3b4c1568ea91dab3aedb770993d454f9b607b31eccab7636377351d0f77f5971cff7ec66f12449effd77a2a6f2ef61f12c6ceb0acdd04385039014ee41319846849563c93b50637da1c47fd8b82770757fd101e3f2eb98e370b4911b99a829af4d838483a1a2fe02ee01e75c5079cd056b938acfaf2267020e701f4912d34f8fa19a682ee24f52be2ab85e93dbb96e28b8d55", @ANYRESDEC=r13, @ANYBLOB=':-00000000000000000002e']) 0s ago: executing program 4 (id=3318): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) kernel console output (not intermixed with test programs): 90] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0xaf4e instead [ 838.135876][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x57c9 instead [ 838.135884][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x8ebb instead [ 838.135892][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0xa24e instead [ 838.135901][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x2b77 instead [ 838.135909][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xfd18 instead [ 838.135918][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x20cd instead [ 838.135926][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xe675 instead [ 838.135935][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x5c7e instead [ 838.135943][T17390] jffs2: Further such events for this erase block will not be printed [ 838.136165][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xde4c instead [ 838.136174][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xe18b instead [ 838.136182][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xc6e4 instead [ 838.136191][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xd254 instead [ 838.136199][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x6ee4 instead [ 838.136208][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x9cab instead [ 838.136216][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x903b instead [ 838.136225][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x9641 instead [ 838.136233][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xa997 instead [ 838.136241][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xf317 instead [ 838.136250][T17390] jffs2: Further such events for this erase block will not be printed [ 838.136472][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x1b14 instead [ 838.136481][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0008 instead [ 838.136489][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xa2e7 instead [ 838.136498][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0xc638 instead [ 838.136506][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x0def instead [ 838.136515][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x9149 instead [ 838.136523][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x397e instead [ 838.136532][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x8b3c instead [ 838.136540][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x2784 instead [ 838.136549][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x4fcf instead [ 838.136556][T17390] jffs2: Further such events for this erase block will not be printed [ 838.136780][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x3dfc instead [ 838.136789][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xf4e7 instead [ 838.136797][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0xe2fc instead [ 838.136806][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x5291 instead [ 838.136814][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x5420 instead [ 838.136822][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0xe242 instead [ 838.136830][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5541 instead [ 838.136839][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x3ea2 instead [ 838.136850][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xf871 instead [ 838.136859][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xc1ca instead [ 838.136867][T17390] jffs2: Further such events for this erase block will not be printed [ 838.137092][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xef23 instead [ 838.137101][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x786f instead [ 838.137109][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x0288 instead [ 838.137118][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x9363 instead [ 838.137126][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x5b17 instead [ 838.137134][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0xb769 instead [ 838.137143][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xdb84 instead [ 838.137151][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0xf35e instead [ 838.137160][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x03f3 instead [ 838.137168][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xe708 instead [ 838.137176][T17390] jffs2: Further such events for this erase block will not be printed [ 838.137405][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x9806 instead [ 838.137413][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x6e26 instead [ 838.137422][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x8b6a instead [ 838.137430][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xa416 instead [ 838.137439][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xf267 instead [ 838.137447][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x832d instead [ 838.137456][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x3da2 instead [ 838.137465][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x3036 instead [ 838.137473][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x8063 instead [ 838.137482][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x33e0 instead [ 838.137490][T17390] jffs2: Further such events for this erase block will not be printed [ 838.137713][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x55db instead [ 838.137722][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x7cd9 instead [ 838.137730][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x80c9 instead [ 838.137739][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x0ccf instead [ 838.137747][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xd184 instead [ 838.137756][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xcbc5 instead [ 838.137764][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5c0d instead [ 838.137772][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x9794 instead [ 838.137781][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0xf778 instead [ 838.137789][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x3b06 instead [ 838.137797][T17390] jffs2: Further such events for this erase block will not be printed [ 838.138025][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xfb3a instead [ 838.138034][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x939c instead [ 838.138042][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x513c instead [ 838.138050][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x7905 instead [ 838.138059][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0xcb21 instead [ 838.138067][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x721a instead [ 838.138076][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xb50b instead [ 838.138084][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xd917 instead [ 838.138093][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x5d7e instead [ 838.138101][T17390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x6328 instead [ 838.138109][T17390] jffs2: Further such events for this erase block will not be printed [ 838.138328][T17390] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 838.138333][T17390] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 838.333423][T17397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.346200][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.689124][ T5796] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 838.758289][T17397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.917703][ T5796] usb 5-1: Using ep0 maxpacket: 32 [ 839.004712][ T5796] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 839.120105][ T5796] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 839.120125][ T5796] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.120141][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 839.120157][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.239655][ T166] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 839.263003][ T166] (NULL device *): queue 0 connect admin queue failed (-111). [ 839.263021][ T166] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 839.263032][ T166] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 839.474826][ T5796] usb 5-1: config 0 descriptor?? [ 839.476212][T17397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.476463][T17397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.297554][ T31] audit: type=1400 audit(1788317711.489:3655): avc: denied { ioctl } for pid=17395 comm="syz.4.3134" path="/dev/usbmon1" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 840.442348][ T56] usbhid 6-1:1.0: can't add hid device: -71 [ 840.442417][ T56] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 840.513283][ T56] usb 6-1: USB disconnect, device number 9 [ 841.116069][ T31] audit: type=1400 audit(1788317712.419:3656): avc: denied { getopt } for pid=17395 comm="syz.4.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 841.362742][T15658] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 841.576738][ T56] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 841.827419][T15658] (NULL device *): queue 0 connect admin queue failed (-111). [ 841.827439][T15658] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 841.827449][T15658] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 842.175238][ T56] usb 2-1: unable to get BOS descriptor or descriptor too short [ 842.219922][ T56] usb 2-1: not running at top speed; connect to a high speed hub [ 842.219941][ T56] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 842.415690][ T56] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 842.415726][ T56] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 842.415738][ T56] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 842.415749][ T56] usb 2-1: config 14 has no interface number 0 [ 842.415759][ T56] usb 2-1: config 14 has no interface number 1 [ 842.415788][ T56] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 842.415802][ T56] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 842.415815][ T56] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 842.415828][ T56] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 842.415841][ T56] usb 2-1: config 14 interface 57 has no altsetting 0 [ 842.415863][ T56] usb 2-1: config 14 interface 228 has no altsetting 0 [ 842.644280][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.644317][ T56] usb 2-1: Product: syz [ 842.644326][ T56] usb 2-1: Manufacturer: syz [ 842.644334][ T56] usb 2-1: SerialNumber: syz [ 842.983740][T17420] netlink: 'syz.2.3138': attribute type 1 has an invalid length. [ 843.777257][T17423] CIFS: VFS: UNC: path must begin with // or \\ [ 843.777288][T17423] Malformed UNC in devname [ 843.777288][T17423] [ 843.777368][T17423] CIFS: VFS: Malformed UNC in devname [ 843.777663][T17423] netlink: 'syz.5.3139': attribute type 1 has an invalid length. [ 843.777675][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3139'. [ 843.862685][T15658] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 843.877088][T15658] (NULL device *): queue 0 connect admin queue failed (-111). [ 843.877123][T15658] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 843.877140][T15658] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 843.892727][T14977] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 843.892862][ T5796] usbhid 5-1:0.0: can't add hid device: -71 [ 843.892963][ T5796] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 843.946801][ T5796] usb 5-1: USB disconnect, device number 126 [ 844.019217][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 844.060254][T14977] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 844.070642][ T56] legousbtower 2-1:14.57: interrupt endpoints not found [ 844.079087][T14977] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.079117][T14977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.122446][ T56] legousbtower 2-1:14.228: get version request failed: -71 [ 844.122534][ T56] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 844.142654][T14977] as10x_usb: device has been detected [ 844.142953][T14977] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 844.183661][T14977] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 844.193993][ T56] usb 2-1: USB disconnect, device number 34 [ 844.210313][T14977] as10x_usb: error during firmware upload part1 [ 844.217257][T14977] Registered device Abilis Systems DVB-Titan [ 844.232223][T17420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 844.328575][T17414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.328782][T17414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.368239][T17431] binder: BINDER_SET_CONTEXT_MGR already set [ 844.368258][T17431] binder: 17429:17431 ioctl 4018620d 200000004a80 returned -16 [ 844.411061][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 844.460982][T17437] FAULT_INJECTION: forcing a failure. [ 844.460982][T17437] name fail_futex, interval 1, probability 0, space 0, times 0 [ 844.461011][T17437] CPU: 0 UID: 0 PID: 17437 Comm: syz.1.3142 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.461029][T17437] Tainted: [L]=SOFTLOCKUP [ 844.461033][T17437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 844.461040][T17437] Call Trace: [ 844.461044][T17437] [ 844.461049][T17437] dump_stack_lvl+0x100/0x190 [ 844.461069][T17437] should_fail_ex.cold+0x5/0xa [ 844.461083][T17437] ? find_held_lock+0x2b/0x80 [ 844.461100][T17437] get_futex_key+0x1d0/0x14f0 [ 844.461115][T17437] ? __pfx_get_futex_key+0x10/0x10 [ 844.461130][T17437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.461148][T17437] futex_wake+0xf4/0x5e0 [ 844.461167][T17437] ? __pfx_futex_wake+0x10/0x10 [ 844.461184][T17437] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 844.461202][T17437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 844.461218][T17437] ? do_vfs_ioctl+0x226/0x13e0 [ 844.461236][T17437] do_futex+0x2b2/0x440 [ 844.461251][T17437] ? __pfx_do_futex+0x10/0x10 [ 844.461265][T17437] ? __fget_files+0x34/0x3d0 [ 844.461290][T17437] __x64_sys_futex+0x34f/0x4d0 [ 844.461306][T17437] ? __pfx___x64_sys_futex+0x10/0x10 [ 844.461322][T17437] ? selinux_file_ioctl+0xb6/0x290 [ 844.461346][T17437] do_syscall_64+0x123/0x790 [ 844.461360][T17437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.461374][T17437] RIP: 0033:0x7f7afdf9e159 [ 844.461384][T17437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.461396][T17437] RSP: 002b:00007f7afeec70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 844.461408][T17437] RAX: ffffffffffffffda RBX: 00007f7afe225fa8 RCX: 00007f7afdf9e159 [ 844.461416][T17437] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7afe225fac [ 844.461423][T17437] RBP: 00007f7afe225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 844.461430][T17437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.461436][T17437] R13: 00007f7afe226038 R14: 00007ffd0ba16ec0 R15: 00007ffd0ba16fa8 [ 844.461451][T17437] [ 844.602195][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 844.603689][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 844.715571][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 844.715594][ T9] usb 3-1: config 0 has no interface number 0 [ 844.715622][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.715643][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.754562][ T9] usb 3-1: config 0 descriptor?? [ 844.763900][ T9] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 844.817173][ T31] audit: type=1400 audit(1788317716.109:3657): avc: denied { write } for pid=17406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.938283][T17445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3143'. [ 844.967519][T17445] syzkaller1: entered promiscuous mode [ 844.974329][T17445] syzkaller1: entered allmulticast mode [ 845.000946][ T31] audit: type=1400 audit(1788317716.299:3658): avc: denied { write } for pid=17446 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.025538][ T56] usb 3-1: USB disconnect, device number 103 [ 845.248774][T17454] program syz.1.3145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 845.268828][T17454] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 845.939088][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 846.243493][T15658] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 846.270543][T15658] (NULL device *): queue 0 connect admin queue failed (-111). [ 846.278207][T15658] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 846.278221][T15658] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 846.431900][T17461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.450907][T17472] FAULT_INJECTION: forcing a failure. [ 846.450907][T17472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.450936][T17472] CPU: 0 UID: 0 PID: 17472 Comm: syz.5.3148 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.450954][T17472] Tainted: [L]=SOFTLOCKUP [ 846.450958][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 846.450966][T17472] Call Trace: [ 846.450971][T17472] [ 846.450976][T17472] dump_stack_lvl+0x100/0x190 [ 846.450999][T17472] should_fail_ex.cold+0x5/0xa [ 846.451015][T17472] _copy_to_user+0x32/0xd0 [ 846.451035][T17472] vmci_host_unlocked_ioctl+0x3df/0x2070 [ 846.451052][T17472] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 846.451069][T17472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 846.451083][T17472] ? do_vfs_ioctl+0x226/0x13e0 [ 846.451101][T17472] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 846.451118][T17472] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 846.451137][T17472] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 846.451157][T17472] ? __fget_files+0x34/0x3d0 [ 846.451175][T17472] ? selinux_file_ioctl+0x13b/0x290 [ 846.451192][T17472] ? selinux_file_ioctl+0xb6/0x290 [ 846.451211][T17472] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 846.451227][T17472] __x64_sys_ioctl+0x18e/0x210 [ 846.451246][T17472] do_syscall_64+0x123/0x790 [ 846.451263][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.451274][T17472] RIP: 0033:0x7f200df9e159 [ 846.451285][T17472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.451295][T17472] RSP: 002b:00007f200ed94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.451307][T17472] RAX: ffffffffffffffda RBX: 00007f200e225fa0 RCX: 00007f200df9e159 [ 846.451314][T17472] RDX: 0000200000000000 RSI: 00000000000007a0 RDI: 0000000000000004 [ 846.451321][T17472] RBP: 00007f200e035024 R08: 0000000000000000 R09: 0000000000000000 [ 846.451328][T17472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.451334][T17472] R13: 00007f200e226038 R14: 00007f200e225fa0 R15: 00007ffc3eba6c78 [ 846.451348][T17472] [ 846.720517][ T7686] usb 7-1: USB disconnect, device number 80 [ 846.767372][ T7686] Unregistered device Abilis Systems DVB-Titan [ 846.772870][ T7686] as10x_usb: device has been disconnected [ 846.948567][ T31] audit: type=1400 audit(1788317718.239:3659): avc: denied { write } for pid=17449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.975703][ T56] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 847.860935][ T56] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 847.871755][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.871789][ T56] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 847.871809][ T56] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 847.871823][ T56] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.921189][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.921213][ T56] usb 5-1: Product: syz [ 847.921229][ T56] usb 5-1: Manufacturer: syz [ 847.921239][ T56] usb 5-1: SerialNumber: syz [ 847.998323][T17474] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 847.998405][T17474] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 848.023599][ T56] oti6858 5-1:1.0: required endpoints missing [ 848.052242][T17496] FAULT_INJECTION: forcing a failure. [ 848.052242][T17496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.052270][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.1.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.052286][T17496] Tainted: [L]=SOFTLOCKUP [ 848.052290][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 848.052296][T17496] Call Trace: [ 848.052301][T17496] [ 848.052305][T17496] dump_stack_lvl+0x100/0x190 [ 848.052325][T17496] should_fail_ex.cold+0x5/0xa [ 848.052341][T17496] _copy_from_user+0x2e/0xd0 [ 848.052359][T17496] copy_msghdr_from_user+0x9f/0x4c0 [ 848.052374][T17496] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 848.052392][T17496] ? lock_acquire+0x1d1/0x380 [ 848.052403][T17496] ? get_pid_task+0x2a/0x250 [ 848.052420][T17496] ___sys_sendmsg+0x106/0x1e0 [ 848.052435][T17496] ? __pfx____sys_sendmsg+0x10/0x10 [ 848.052450][T17496] ? get_pid_task+0x106/0x250 [ 848.052469][T17496] ? find_held_lock+0x2b/0x80 [ 848.052492][T17496] __sys_sendmsg+0x160/0x210 [ 848.052504][T17496] ? __pfx___sys_sendmsg+0x10/0x10 [ 848.052521][T17496] do_syscall_64+0x123/0x790 [ 848.052536][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.052547][T17496] RIP: 0033:0x7f7afdf9e159 [ 848.052557][T17496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.052568][T17496] RSP: 002b:00007f7afeec7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.052580][T17496] RAX: ffffffffffffffda RBX: 00007f7afe225fa0 RCX: 00007f7afdf9e159 [ 848.052587][T17496] RDX: 00000000200080d4 RSI: 0000200000000180 RDI: 0000000000000003 [ 848.052594][T17496] RBP: 00007f7afeec7090 R08: 0000000000000000 R09: 0000000000000000 [ 848.052600][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.052607][T17496] R13: 00007f7afe226038 R14: 00007f7afe225fa0 R15: 00007ffd0ba16fa8 [ 848.052621][T17496] [ 848.339001][ T6643] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 848.353309][ T6643] (NULL device *): queue 0 connect admin queue failed (-111). [ 848.353325][ T6643] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 848.353334][ T6643] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 848.437082][ T31] audit: type=1400 audit(1788317719.729:3660): avc: denied { write } for pid=17497 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.139076][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 849.167972][ T9] usb 5-1: USB disconnect, device number 127 [ 849.264635][ T31] audit: type=1800 audit(1788317720.559:3661): pid=17505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3155" name="addr_trtype" dev="configfs" ino=75983 res=0 errno=0 [ 849.750421][ T56] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 849.758255][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 849.927786][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 849.938838][ T56] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 849.951345][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.951370][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.972892][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.972913][ T56] usb 3-1: config 0 has no interfaces? [ 849.989708][ T9] usb 6-1: config 0 descriptor?? [ 849.996795][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.996820][ T56] usb 3-1: Product: syz [ 849.996830][ T56] usb 3-1: Manufacturer: syz [ 849.996841][ T56] usb 3-1: SerialNumber: syz [ 850.022194][ T9] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 850.032788][ T56] usb 3-1: config 0 descriptor?? [ 850.248365][ T7686] usb 3-1: USB disconnect, device number 104 [ 850.333542][ T31] audit: type=1400 audit(1788317721.629:3662): avc: denied { write } for pid=17527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.405780][ T9] pwc: recv_control_msg error -71 req 02 val 2b00 [ 850.414068][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 850.421671][ T9] pwc: recv_control_msg error -71 req 04 val 1700 [ 850.430533][T14977] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 850.438210][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 850.447489][T16278] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 850.462243][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 850.469367][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 850.476161][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 850.482866][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 850.491262][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 850.491868][ T9] pwc: recv_control_msg error -71 req 02 val 2200 [ 850.506892][ T9] pwc: recv_control_msg error -71 req 06 val 0600 [ 850.513716][T16278] (NULL device *): queue 0 connect admin queue failed (-111). [ 850.513738][T16278] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 850.513750][T16278] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 850.529317][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 850.545453][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 850.554944][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 850.561545][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 850.568868][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 850.575765][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 850.582432][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 850.589617][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 850.599541][T14977] usb 2-1: device descriptor read/64, error -71 [ 850.605905][ T9] pwc: Registered as video103. [ 850.616667][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input110 [ 850.647153][ T9] usb 6-1: USB disconnect, device number 10 [ 850.721060][ T31] audit: type=1400 audit(1788317722.019:3663): avc: denied { write } for pid=17545 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.840507][T14977] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 850.979707][T14977] usb 2-1: device descriptor read/64, error -71 [ 851.090136][T14977] usb usb2-port1: attempt power cycle [ 851.247657][ T31] audit: type=1400 audit(1788317722.539:3664): avc: denied { write } for pid=17549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.369306][ T56] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 851.391662][ T31] audit: type=1400 audit(1788317722.689:3665): avc: denied { write } for pid=17571 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.429596][T14977] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 851.449573][T14977] usb 2-1: device descriptor read/8, error -71 [ 851.520833][ T56] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 851.531582][ T56] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 851.531609][ T56] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 851.531633][ T56] usb 5-1: config 4 has no interface number 0 [ 851.531653][ T56] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 851.574795][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.574819][ T56] usb 5-1: Product: syz [ 851.574835][ T56] usb 5-1: Manufacturer: syz [ 851.574845][ T56] usb 5-1: SerialNumber: syz [ 851.701572][T14977] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 851.729372][T14977] usb 2-1: device descriptor read/8, error -71 [ 851.836278][T17564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.845779][T14977] usb usb2-port1: unable to enumerate USB device [ 851.854899][T17564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.969802][T17582] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 851.993768][T17582] No source specified [ 852.127067][T15658] IPVS: starting estimator thread 0... [ 852.139998][ T31] audit: type=1400 audit(1788317723.439:3666): avc: denied { write } for pid=17574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.221690][T17589] IPVS: using max 77 ests per chain, 184800 per kthread [ 852.381805][ T31] audit: type=1400 audit(1788317723.679:3667): avc: denied { write } for pid=17595 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.529013][T14977] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 852.580990][T15658] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 852.595936][T15658] (NULL device *): queue 0 connect admin queue failed (-111). [ 852.595952][T15658] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 852.595989][T15658] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 852.650499][T17599] kvm: pic: non byte read [ 852.655067][T17599] kvm: pic: non byte read [ 852.655206][T17599] kvm: pic: non byte read [ 852.655343][T17599] kvm: pic: non byte read [ 852.670828][T17599] kvm: pic: non byte read [ 852.675387][T17599] kvm: pic: non byte read [ 852.682152][T17599] kvm: pic: non byte read [ 852.686960][T17599] kvm: pic: non byte read [ 852.692513][T17599] kvm: pic: non byte read [ 852.697172][T17599] kvm: pic: non byte read [ 852.703672][T14977] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 852.722143][T14977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.722199][T14977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.722232][T14977] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 852.722247][T14977] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.778086][T14977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.778107][T14977] usb 6-1: Product: syz [ 852.778137][T14977] usb 6-1: Manufacturer: syz [ 852.778147][T14977] usb 6-1: SerialNumber: syz [ 852.808660][T14977] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 852.822241][T14977] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 852.833045][T14977] usbserial_generic 6-1:1.0: generic converter detected [ 852.848277][T14977] usb 6-1: generic converter now attached to ttyUSB0 [ 853.113967][T17594] syzkaller0: entered promiscuous mode [ 853.119555][T17594] syzkaller0: entered allmulticast mode [ 853.177060][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177079][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177092][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177736][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177745][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177752][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177759][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177766][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177773][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177779][T17594] tc action pedit offset must be on 32 bit boundaries [ 853.177791][T17594] 0: reclassify loop, rule prio 0, protocol 800 [ 853.431690][ T31] audit: type=1400 audit(1788317724.729:3668): avc: denied { write } for pid=17605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.610576][ T5796] usb 6-1: USB disconnect, device number 11 [ 853.622160][ T5796] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 853.632421][ T5796] usbserial_generic 6-1:1.0: device disconnected [ 853.773927][ T31] audit: type=1400 audit(1788317725.069:3669): avc: denied { write } for pid=17634 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.953343][ T166] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.314194][ T56] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 854.557590][ T56] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 854.557622][ T56] dib0700: firmware download failed at 7 with -22 [ 854.898446][ T6630] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 854.924651][ T6630] (NULL device *): queue 0 connect admin queue failed (-111). [ 854.924681][ T6630] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 854.924698][ T6630] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 854.949520][ T56] usb 5-1: USB disconnect, device number 2 [ 855.063288][ T31] audit: type=1400 audit(1788317726.359:3670): avc: denied { write } for pid=17637 comm="syz.1.3183" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 855.209056][T17642] comedi comedi3: dt2817: I/O base address or length out of range [ 855.321331][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 855.333292][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 855.343956][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 855.359433][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 855.368766][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 855.505960][ T56] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 855.553445][ T166] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.672848][ T56] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 855.684500][ T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 855.684523][ T56] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 855.707154][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.707176][ T56] usb 6-1: Product: syz [ 855.707191][ T56] usb 6-1: Manufacturer: syz [ 855.707201][ T56] usb 6-1: SerialNumber: syz [ 855.861280][ T166] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.963511][ T56] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 856.084344][ T31] audit: type=1400 audit(1788317727.369:3671): avc: denied { write } for pid=17650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.132161][ T166] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.167170][ T5796] usb 6-1: USB disconnect, device number 12 [ 856.218350][ T5796] usblp0: removed [ 856.244854][T17675] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.3191'. [ 856.333747][ T31] audit: type=1400 audit(1788317727.629:3672): avc: denied { write } for pid=17690 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.373117][T17687] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.3191'. [ 856.757305][ T31] audit: type=1400 audit(1788317728.049:3673): avc: denied { getopt } for pid=17698 comm="syz.4.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 856.928508][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3196'. [ 856.981518][ T1162] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 856.997627][ T1162] (NULL device *): queue 0 connect admin queue failed (-111). [ 856.997644][ T1162] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 856.997654][ T1162] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 857.071141][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 857.299263][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 857.460269][T14864] Bluetooth: hci2: command tx timeout [ 857.522481][ T56] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 857.857931][ T56] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 857.857959][ T56] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 857.857981][ T56] usb 5-1: config 1 interface 0 has no altsetting 0 [ 857.928111][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 857.952278][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 857.988406][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 858.001334][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 858.028113][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.042583][T17707] FAULT_INJECTION: forcing a failure. [ 858.042583][T17707] name failslab, interval 1, probability 0, space 0, times 0 [ 858.042613][T17707] CPU: 0 UID: 0 PID: 17707 Comm: syz.2.3195 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.042629][T17707] Tainted: [L]=SOFTLOCKUP [ 858.042633][T17707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 858.042640][T17707] Call Trace: [ 858.042644][T17707] [ 858.042649][T17707] dump_stack_lvl+0x100/0x190 [ 858.042668][T17707] should_fail_ex.cold+0x5/0xa [ 858.042684][T17707] should_failslab+0xc2/0x120 [ 858.042698][T17707] __kmalloc_noprof+0xfc/0x840 [ 858.042710][T17707] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 858.042726][T17707] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 858.042741][T17707] genl_family_rcv_msg_doit+0xc7/0x300 [ 858.042754][T17707] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 858.042770][T17707] ? bpf_lsm_capable+0x9/0x10 [ 858.042785][T17707] ? security_capable+0x80/0x260 [ 858.042802][T17707] genl_rcv_msg+0x560/0x800 [ 858.042815][T17707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 858.042826][T17707] ? __lock_acquire+0x4c5/0x1ec0 [ 858.042837][T17707] ? __pfx_ila_xlat_nl_cmd_add_mapping+0x10/0x10 [ 858.042859][T17707] netlink_rcv_skb+0x159/0x420 [ 858.042876][T17707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 858.042887][T17707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 858.042909][T17707] ? netlink_deliver_tap+0x1ae/0xcc0 [ 858.042927][T17707] genl_rcv+0x28/0x40 [ 858.042943][T17707] netlink_unicast+0x585/0x850 [ 858.042961][T17707] ? __pfx_netlink_unicast+0x10/0x10 [ 858.042981][T17707] netlink_sendmsg+0x8b0/0xda0 [ 858.043000][T17707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.043018][T17707] ? selinux_socket_sendmsg+0x198/0x2f0 [ 858.043037][T17707] ____sys_sendmsg+0xa4d/0xbe0 [ 858.043050][T17707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.043067][T17707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.043084][T17707] ? lock_acquire+0x1d1/0x380 [ 858.043095][T17707] ? get_pid_task+0x2a/0x250 [ 858.043111][T17707] ___sys_sendmsg+0x190/0x1e0 [ 858.043126][T17707] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.043140][T17707] ? get_pid_task+0x106/0x250 [ 858.043160][T17707] ? find_held_lock+0x2b/0x80 [ 858.043183][T17707] __sys_sendmsg+0x160/0x210 [ 858.043194][T17707] ? __pfx___sys_sendmsg+0x10/0x10 [ 858.043212][T17707] do_syscall_64+0x123/0x790 [ 858.043227][T17707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.043239][T17707] RIP: 0033:0x7f4af7d9e159 [ 858.043248][T17707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.043259][T17707] RSP: 002b:00007f4af5fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.043271][T17707] RAX: ffffffffffffffda RBX: 00007f4af8026090 RCX: 00007f4af7d9e159 [ 858.043278][T17707] RDX: 0000000000008050 RSI: 0000200000000040 RDI: 0000000000000008 [ 858.043285][T17707] RBP: 00007f4af5fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 858.043292][T17707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.043298][T17707] R13: 00007f4af8026128 R14: 00007f4af8026090 R15: 00007ffd0a8b7288 [ 858.043312][T17707] [ 858.059974][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.059989][ T56] usb 5-1: Product: syz [ 858.059998][ T56] usb 5-1: Manufacturer: щ [ 858.060007][ T56] usb 5-1: SerialNumber: syz [ 858.092243][T17699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 858.092309][T17699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 858.292674][ T5796] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 858.464231][ T5796] usb 3-1: Using ep0 maxpacket: 32 [ 858.494805][ T5796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 858.494840][ T5796] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 858.525957][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.525983][ T5796] usb 3-1: Product: 팃ꖩ낈茞틱íŸåªŒ7æ‘” [ 858.526000][ T5796] usb 3-1: SerialNumber: syz [ 858.685523][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.685780][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.788618][ T166] bridge_slave_1: left allmulticast mode [ 858.788643][ T166] bridge_slave_1: left promiscuous mode [ 858.788760][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.833535][ T56] usb 5-1: USB disconnect, device number 3 [ 858.865330][ T166] bridge_slave_0: left allmulticast mode [ 858.873944][ T166] bridge_slave_0: left promiscuous mode [ 858.874069][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.978177][ T5796] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 858.995296][ T5796] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 859.013606][ T31] audit: type=1400 audit(1788317730.309:3674): avc: denied { write } for pid=17695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.061250][ T6629] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 859.085055][ T6629] (NULL device *): queue 0 connect admin queue failed (-111). [ 859.085078][ T6629] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 859.085095][ T6629] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 859.188072][ T5796] usb 3-1: USB disconnect, device number 105 [ 859.305367][T13630] udevd[13630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 859.378882][ T31] audit: type=1400 audit(1788317730.679:3675): avc: denied { write } for pid=17724 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.544124][T14864] Bluetooth: hci2: command tx timeout [ 859.624952][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.640645][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.650185][ T166] bond0 (unregistering): Released all slaves [ 859.829130][T17733] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3199'. [ 859.829155][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3199'. [ 859.829170][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3199'. [ 860.129683][ T166] hsr_slave_0: left promiscuous mode [ 860.140445][ T166] hsr_slave_1: left promiscuous mode [ 860.140879][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.140893][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.166893][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.166913][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.184099][T14864] Bluetooth: hci0: command tx timeout [ 860.214836][ T166] veth1_macvtap: left promiscuous mode [ 860.214869][ T166] veth0_macvtap: left promiscuous mode [ 860.214922][ T166] veth1_vlan: left promiscuous mode [ 860.214954][ T166] veth0_vlan: left promiscuous mode [ 860.782110][ T31] audit: type=1400 audit(1788317732.079:3676): avc: denied { write } for pid=17738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.890374][ T31] audit: type=1400 audit(1788317732.189:3677): avc: denied { listen } for pid=17764 comm="syz.4.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 860.983348][ T31] audit: type=1400 audit(1788317732.279:3678): avc: denied { write } for pid=17768 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.023263][ T166] team0 (unregistering): Port device team_slave_1 removed [ 861.061275][ T166] team0 (unregistering): Port device team_slave_0 removed [ 861.127811][ T31] audit: type=1400 audit(1788317732.419:3679): avc: denied { lock } for pid=17773 comm="syz.2.3207" path="socket:[77253]" dev="sockfs" ino=77253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 861.152946][ T6629] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 861.153051][ T6629] (NULL device *): queue 0 connect admin queue failed (-111). [ 861.153063][ T6629] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 861.153072][ T6629] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 861.286033][T17777] netlink: 'syz.2.3208': attribute type 1 has an invalid length. [ 861.322604][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 861.385697][T17777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 861.609425][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 861.619055][T14864] Bluetooth: hci2: command tx timeout [ 861.760759][ T166] IPVS: stop unused estimator thread 0... [ 861.760923][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 861.767900][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 861.786528][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 861.786551][ T10] usb 3-1: config 0 has no interface number 0 [ 861.786572][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 861.786592][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.824008][ T10] usb 3-1: config 0 descriptor?? [ 861.837551][ T10] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 861.872802][T17785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 861.910956][T17656] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.918293][T17656] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.926528][T17656] bridge_slave_0: entered allmulticast mode [ 861.938501][T17656] bridge_slave_0: entered promiscuous mode [ 861.958534][T17656] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.966977][T17656] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.978579][T17656] bridge_slave_1: entered allmulticast mode [ 861.998791][T17656] bridge_slave_1: entered promiscuous mode [ 862.120237][T17656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.146699][T17656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.252830][T17656] team0: Port device team_slave_0 added [ 862.259828][T14864] Bluetooth: hci0: command tx timeout [ 862.280092][T17656] team0: Port device team_slave_1 added [ 862.296225][ T5796] usb 3-1: USB disconnect, device number 106 [ 862.427920][ T31] audit: type=1400 audit(1788317733.719:3680): avc: denied { write } for pid=17786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.566384][ T166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.588745][ T31] audit: type=1400 audit(1788317733.879:3681): avc: denied { write } for pid=17808 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.737322][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 862.749648][T17656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.749666][T17656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.749686][T17656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.802585][T17656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.809870][T17656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.809897][T17656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.096363][ T166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.187183][T17656] hsr_slave_0: entered promiscuous mode [ 863.187651][T17656] hsr_slave_1: entered promiscuous mode [ 863.187936][T17656] debugfs: 'hsr0' already exists in 'hsr' [ 863.187948][T17656] Cannot create hsr debugfs directory [ 863.221182][ T6629] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 863.242607][ T6629] (NULL device *): queue 0 connect admin queue failed (-111). [ 863.242640][ T6629] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 863.242652][ T6629] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 863.250484][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 863.276108][ T5796] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 863.405017][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 863.413341][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 863.413366][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 863.421295][ T5796] usb 3-1: device descriptor read/64, error -71 [ 863.437410][ T10] usb 6-1: config 1 has an invalid interface number: 93 but max is 0 [ 863.437432][ T10] usb 6-1: config 1 has no interface number 0 [ 863.437458][ T10] usb 6-1: config 1 interface 93 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 863.437476][ T10] usb 6-1: config 1 interface 93 has no altsetting 0 [ 863.474729][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.474752][ T10] usb 6-1: Product: syz [ 863.474767][ T10] usb 6-1: Manufacturer: syz [ 863.474777][ T10] usb 6-1: SerialNumber: syz [ 863.520042][ T166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.661682][ T5796] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 863.705126][T14864] Bluetooth: hci2: command tx timeout [ 863.743654][ T166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.780674][ T31] audit: type=1400 audit(1788317735.079:3682): avc: denied { write } for pid=17818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.804197][ T5796] usb 3-1: device descriptor read/64, error -71 [ 863.894651][ T10] peak_usb 6-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 863.903433][ T10] peak_usb 6-1:1.93: unable to read PCAN-USB serial number (err -22) [ 863.912682][ T5796] usb usb3-port1: attempt power cycle [ 863.944888][ T10] peak_usb 6-1:1.93: probe with driver peak_usb failed with error -22 [ 863.971410][ T10] usb 6-1: USB disconnect, device number 13 [ 864.020804][ T31] audit: type=1400 audit(1788317735.309:3683): avc: denied { write } for pid=17842 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.117329][T17709] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.117384][T17709] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.117457][T17709] bridge_slave_0: entered allmulticast mode [ 864.138740][T17709] bridge_slave_0: entered promiscuous mode [ 864.157498][T17709] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.157555][T17709] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.157627][T17709] bridge_slave_1: entered allmulticast mode [ 864.174801][T17709] bridge_slave_1: entered promiscuous mode [ 864.235697][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7 [ 864.249499][ T5796] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 864.258039][T17709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.270211][ T5796] usb 3-1: device descriptor read/8, error -71 [ 864.281930][T17709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.299393][ T56] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 864.458482][T17709] team0: Port device team_slave_0 added [ 864.502855][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.511118][ T5796] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 864.527314][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 864.527348][ T56] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 864.544850][ T56] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 864.544869][ T56] usb 5-1: can't read configurations, error -71 [ 864.545145][ T5796] usb 3-1: device descriptor read/8, error -71 [ 864.586944][T17709] team0: Port device team_slave_1 added [ 864.608829][ T166] bridge_slave_1: left allmulticast mode [ 864.608853][ T166] bridge_slave_1: left promiscuous mode [ 864.609129][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.632236][ T166] bridge_slave_0: left allmulticast mode [ 864.639067][ T7686] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 864.646873][ T166] bridge_slave_0: left promiscuous mode [ 864.652785][ T5796] usb usb3-port1: unable to enumerate USB device [ 864.659946][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.779961][ T7686] usb 6-1: device descriptor read/64, error -71 [ 864.910649][ T166] bond1 (unregistering): (slave geneve2): Releasing active interface [ 864.947284][ T31] audit: type=1400 audit(1788317736.239:3684): avc: denied { write } for pid=17852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.974445][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.987605][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.998043][ T166] bond0 (unregistering): Released all slaves [ 865.010527][ T166] bond1 (unregistering): Released all slaves [ 865.029506][ T7686] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 865.069930][T17709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.069948][T17709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.069968][T17709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.070704][T17709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.070723][T17709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.070737][T17709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.162938][ T7686] usb 6-1: device descriptor read/64, error -71 [ 865.263783][ T31] audit: type=1400 audit(1788317736.559:3685): avc: denied { write } for pid=17863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.287856][ T7686] usb usb6-port1: attempt power cycle [ 865.299890][ T6636] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 865.315118][ T6636] (NULL device *): queue 0 connect admin queue failed (-111). [ 865.315141][ T6636] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 865.315153][ T6636] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 865.371532][ T31] audit: type=1400 audit(1788317736.669:3686): avc: denied { mounton } for pid=17864 comm="syz.4.3219" path="/57/file0" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 865.562103][ T5266] 8021q: adding VLAN 0 to HW filter on device eth8 [ 865.592615][T17709] hsr_slave_0: entered promiscuous mode [ 865.599847][T17709] hsr_slave_1: entered promiscuous mode [ 865.606732][T17709] debugfs: 'hsr0' already exists in 'hsr' [ 865.606755][T17709] Cannot create hsr debugfs directory [ 865.621235][ T7686] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 865.641744][ T7686] usb 6-1: device descriptor read/8, error -71 [ 865.844761][ T166] hsr_slave_0: left promiscuous mode [ 865.852303][ T166] hsr_slave_1: left promiscuous mode [ 865.852682][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.852695][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.875520][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.875543][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.884851][ T7686] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 865.901724][ T7686] usb 6-1: device descriptor read/8, error -71 [ 865.916475][ T166] veth1_macvtap: left promiscuous mode [ 865.924579][ T166] veth0_macvtap: left promiscuous mode [ 865.930221][ T166] veth1_vlan: left promiscuous mode [ 865.930255][ T166] veth0_vlan: left promiscuous mode [ 866.010243][ T7686] usb usb6-port1: unable to enumerate USB device [ 866.125115][T17876] FAULT_INJECTION: forcing a failure. [ 866.125115][T17876] name failslab, interval 1, probability 0, space 0, times 0 [ 866.149585][T17876] CPU: 0 UID: 0 PID: 17876 Comm: syz.2.3220 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.149605][T17876] Tainted: [L]=SOFTLOCKUP [ 866.149610][T17876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 866.149617][T17876] Call Trace: [ 866.149621][T17876] [ 866.149626][T17876] dump_stack_lvl+0x100/0x190 [ 866.149647][T17876] should_fail_ex.cold+0x5/0xa [ 866.149663][T17876] should_failslab+0xc2/0x120 [ 866.149677][T17876] __kmalloc_noprof+0xfc/0x840 [ 866.149687][T17876] ? rcu_is_watching+0x13/0xc0 [ 866.149702][T17876] ? tomoyo_realpath_from_path+0xb6/0x690 [ 866.149717][T17876] tomoyo_realpath_from_path+0xb6/0x690 [ 866.149732][T17876] tomoyo_path_number_perm+0x23c/0x580 [ 866.149748][T17876] ? tomoyo_path_number_perm+0x22e/0x580 [ 866.149766][T17876] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 866.149787][T17876] ? __lock_acquire+0x4c5/0x1ec0 [ 866.149805][T17876] ? __fget_files+0x34/0x3d0 [ 866.149818][T17876] ? find_held_lock+0x2b/0x80 [ 866.149832][T17876] ? hook_file_ioctl_common+0x140/0x440 [ 866.149848][T17876] ? __fget_files+0x21f/0x3d0 [ 866.149863][T17876] security_file_ioctl+0xd3/0x230 [ 866.149881][T17876] __x64_sys_ioctl+0xb7/0x210 [ 866.149900][T17876] do_syscall_64+0x123/0x790 [ 866.149914][T17876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.149925][T17876] RIP: 0033:0x7f4af7d9e159 [ 866.149935][T17876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.149947][T17876] RSP: 002b:00007f4af5ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.149958][T17876] RAX: ffffffffffffffda RBX: 00007f4af8025fa0 RCX: 00007f4af7d9e159 [ 866.149966][T17876] RDX: 0000200000000400 RSI: 00000000c008561c RDI: 0000000000000003 [ 866.149973][T17876] RBP: 00007f4af5ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 866.149979][T17876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.149986][T17876] R13: 00007f4af8026038 R14: 00007f4af8025fa0 R15: 00007ffd0a8b7288 [ 866.150000][T17876] [ 866.190278][T17876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 866.660177][ T31] audit: type=1400 audit(1788317737.949:3687): avc: denied { write } for pid=17871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.796024][ T31] audit: type=1400 audit(1788317738.089:3688): avc: denied { write } for pid=17887 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.883999][ T166] team0 (unregistering): Port device team_slave_1 removed [ 866.905669][ T166] team0 (unregistering): Port device team_slave_0 removed [ 867.102467][T17890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3222'. [ 867.151415][ T5266] 8021q: adding VLAN 0 to HW filter on device eth17 [ 867.381303][ T6627] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 867.397385][ T6627] (NULL device *): queue 0 connect admin queue failed (-111). [ 867.397409][ T6627] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 867.397421][ T6627] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 867.820710][T15618] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 867.883073][ T31] audit: type=1400 audit(1788317739.179:3689): avc: denied { write } for pid=17891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.920675][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 867.979928][T15618] usb 3-1: Using ep0 maxpacket: 16 [ 867.985334][T15618] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.995430][T15618] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.995455][T15618] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 867.995469][T15618] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 867.995486][T15618] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 2 [ 867.995500][T15618] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 868.039640][ T5796] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 868.040717][T15618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 868.040731][T15618] usb 3-1: SerialNumber: syz [ 868.042887][T17897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 868.042948][T17897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 868.081275][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 868.108806][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 868.108838][ T10] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 868.126889][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 868.126915][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 868.151105][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.151140][ T10] usb 6-1: Product: syz [ 868.151156][ T10] usb 6-1: Manufacturer: syz [ 868.151166][ T10] usb 6-1: SerialNumber: syz [ 868.232559][ T5796] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 868.246159][ T5796] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 868.246186][ T5796] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 868.246207][ T5796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 868.246223][ T5796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 868.302608][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.302631][ T5796] usb 5-1: Product: syz [ 868.302647][ T5796] usb 5-1: Manufacturer: syz [ 868.302658][ T5796] usb 5-1: SerialNumber: syz [ 868.344526][ T31] audit: type=1400 audit(1788317739.639:3690): avc: denied { write } for pid=17912 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.397147][T15618] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 868.418119][T17909] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 868.418198][T17909] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 868.439802][ T5796] oti6858 5-1:1.0: oti6858 converter detected [ 868.454816][ T5796] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 868.464995][T15618] usb 3-1: USB disconnect, device number 111 [ 868.626984][T17656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 868.650766][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.651173][T17656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 868.686928][ T10] usb 6-1: USB disconnect, device number 18 [ 868.726793][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.410617][T17905] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 869.426198][ T9] usb 5-1: USB disconnect, device number 6 [ 869.457190][T17656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 869.469875][ T1162] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 869.485076][ T1162] (NULL device *): queue 0 connect admin queue failed (-111). [ 869.485104][ T1162] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 869.485116][ T1162] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 869.515202][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 869.515508][ T9] oti6858 5-1:1.0: device disconnected [ 869.538528][T13721] udevd[13721]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 869.567090][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.580270][T17656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 869.632776][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.797954][T17920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.923158][T17709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.070460][ T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 870.156637][T17709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.180587][ T31] audit: type=1400 audit(1788317741.479:3691): avc: denied { write } for pid=17916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.220279][T17937] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 870.229035][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 870.235863][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 870.235894][ T9] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 870.253427][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 870.253454][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 870.280623][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.280645][ T9] usb 3-1: Product: syz [ 870.280661][ T9] usb 3-1: Manufacturer: syz [ 870.280671][ T9] usb 3-1: SerialNumber: syz [ 870.332970][T17937] xt_hashlimit: size too large, truncated to 1048576 [ 870.427708][T17940] xt_hashlimit: size too large, truncated to 1048576 [ 870.469354][T17709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.516624][ T31] audit: type=1400 audit(1788317741.809:3692): avc: denied { write } for pid=17941 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.722837][T17709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.822084][T17656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.878358][ T31] audit: type=1400 audit(1788317742.169:3693): avc: denied { unmount } for pid=16803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 870.909350][T17656] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.921037][T15658] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.921088][T15658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.949705][ T9] usb 3-1: USB disconnect, device number 112 [ 870.972938][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.972991][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.041630][T13658] udevd[13658]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 871.541937][T15658] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 871.558397][T15658] (NULL device *): queue 0 connect admin queue failed (-111). [ 871.558419][T15658] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 871.558436][T15658] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 871.637529][ T31] audit: type=1400 audit(1788317742.929:3694): avc: denied { write } for pid=17948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.858074][ T31] audit: type=1400 audit(1788317743.149:3695): avc: denied { write } for pid=17970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.892342][T17709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 871.921725][T17709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.932226][T17709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 871.952835][T17709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.953285][T17709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 871.982193][T17709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 871.995827][T17709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 872.013947][T17709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.237404][T17709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.273953][T17709] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.295567][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.295638][ T6636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.327990][T15658] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.328057][T15658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.362993][T17656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.501745][T17989] xt_hashlimit: size too large, truncated to 1048576 [ 872.720342][T17993] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.750160][T18002] xt_hashlimit: size too large, truncated to 1048576 [ 872.816805][T17993] bridge_slave_0 (unregistering): left allmulticast mode [ 872.816831][T17993] bridge_slave_0 (unregistering): left promiscuous mode [ 872.816876][T17993] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.851090][T15581] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 873.010911][T15581] usb 3-1: Using ep0 maxpacket: 16 [ 873.020776][T15581] usb 3-1: unable to get BOS descriptor or descriptor too short [ 873.020809][T15581] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 873.046451][T15581] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 873.046481][T15581] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 873.075782][T15581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.075805][T15581] usb 3-1: Product: syz [ 873.075821][T15581] usb 3-1: Manufacturer: syz [ 873.075831][T15581] usb 3-1: SerialNumber: syz [ 873.207742][ T31] audit: type=1400 audit(1788317744.499:3696): avc: denied { write } for pid=17986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.418482][T17656] veth0_vlan: entered promiscuous mode [ 873.490881][T17656] veth1_vlan: entered promiscuous mode [ 873.506895][T15581] usb 3-1: USB disconnect, device number 113 [ 873.545648][ T31] audit: type=1400 audit(1788317744.839:3697): avc: denied { write } for pid=18027 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.615124][T17656] veth0_macvtap: entered promiscuous mode [ 873.621691][ T6627] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 873.639015][ T6627] (NULL device *): queue 0 connect admin queue failed (-111). [ 873.639040][ T6627] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 873.639058][ T6627] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 873.728353][T17656] veth1_macvtap: entered promiscuous mode [ 873.765502][T13721] udevd[13721]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 873.822608][T17656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.842711][T17656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.880434][ T6629] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.880469][ T6629] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.880501][ T6629] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.880521][ T6629] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.952785][ T5266] 8021q: adding VLAN 0 to HW filter on device eth18 [ 874.211334][T15658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.211358][T15658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.276728][ T31] audit: type=1400 audit(1788317745.569:3698): avc: denied { watch_mount } for pid=18033 comm="syz.5.3236" path="/28" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 874.318030][T14864] Bluetooth: hci1: connection err: -111 [ 874.342304][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.352563][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.400482][T17709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.507042][ T31] audit: type=1326 audit(1788317745.799:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.4.3237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945bb9e159 code=0x7ffc0000 [ 874.507079][ T31] audit: type=1326 audit(1788317745.799:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.4.3237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945bb9e159 code=0x7ffc0000 [ 874.564134][ T7686] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 874.579363][T17709] veth0_vlan: entered promiscuous mode [ 874.595936][ T31] audit: type=1326 audit(1788317745.889:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.4.3237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f945bb9e159 code=0x7ffc0000 [ 874.637849][T17709] veth1_vlan: entered promiscuous mode [ 874.701560][T17709] veth0_macvtap: entered promiscuous mode [ 874.721949][T17709] veth1_macvtap: entered promiscuous mode [ 874.739546][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 874.750714][ T7686] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 874.766751][ T7686] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 874.766778][ T7686] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 874.766798][ T7686] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 874.766815][ T7686] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 874.826179][ T7686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.826204][ T7686] usb 3-1: Product: syz [ 874.826220][ T7686] usb 3-1: Manufacturer: syz [ 874.826230][ T7686] usb 3-1: SerialNumber: syz [ 874.856926][T18044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 874.856994][T18044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 874.874739][ T7686] oti6858 3-1:1.0: oti6858 converter detected [ 874.896570][T17709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.913272][ T7686] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 874.954257][T17709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.051602][T16278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.051727][T16278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.051828][T16278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.051894][T16278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.878687][ T6630] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 875.893380][ T6630] (NULL device *): queue 0 connect admin queue failed (-111). [ 875.893397][ T6630] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 875.893407][ T6630] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 875.902812][T18042] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 875.957314][ T9] usb 3-1: USB disconnect, device number 114 [ 875.991831][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 876.006135][ T9] oti6858 3-1:1.0: device disconnected [ 876.199011][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.199033][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.378063][T15658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.378085][T15658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.555171][ T31] audit: type=1400 audit(1788317747.849:3702): avc: denied { write } for pid=18047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 876.774333][ T31] audit: type=1400 audit(1788317748.069:3703): avc: denied { map } for pid=18072 comm="syz.0.3193" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 876.829865][T18073] ceph: No mds server is up or the cluster is laggy [ 876.840997][ T9] libceph: connect (1)[c::]:6789 error -101 [ 876.841106][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 876.912194][ T31] audit: type=1400 audit(1788317748.209:3704): avc: denied { write } for pid=18074 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.024106][T18071] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3239'. [ 877.120571][T14977] libceph: connect (1)[c::]:6789 error -101 [ 877.120676][T14977] libceph: mon0 (1)[c::]:6789 connect error [ 877.137166][T18071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.243914][T18071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.311624][T18073] ceph: No mds server is up or the cluster is laggy [ 877.318582][ T9] libceph: connect (1)[c::]:6789 error -101 [ 877.318678][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 877.354914][T18071] bond0 (unregistering): Released all slaves [ 877.404707][ T5266] 8021q: adding VLAN 0 to HW filter on device eth19 [ 877.447362][T18087] No such timeout policy "syz1" [ 877.855291][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3243'. [ 877.881745][T18096] usb usb7: check_ctrlrecip: process 18096 (syz.4.3243) requesting ep 01 but needs 81 [ 877.893017][T18096] usb usb7: usbfs: process 18096 (syz.4.3243) did not claim interface 0 before use [ 877.940189][ T166] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 877.955137][ T166] (NULL device *): queue 0 connect admin queue failed (-111). [ 877.955160][ T166] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 877.955178][ T166] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 878.163131][T18104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.176104][T18104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.505680][ T31] audit: type=1400 audit(1788317749.799:3705): avc: denied { write } for pid=18091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.637335][T18112] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 878.648477][T18120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3248'. [ 878.648497][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 878.674148][T18115] vlan2: entered promiscuous mode [ 878.683812][T18115] bond0: entered promiscuous mode [ 878.690334][T18115] bond_slave_0: entered promiscuous mode [ 878.696874][T18115] bond_slave_1: entered promiscuous mode [ 878.714032][T18125] FAULT_INJECTION: forcing a failure. [ 878.714032][T18125] name failslab, interval 1, probability 0, space 0, times 0 [ 878.714057][T18125] CPU: 0 UID: 0 PID: 18125 Comm: syz.5.3249 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.714073][T18125] Tainted: [L]=SOFTLOCKUP [ 878.714077][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 878.714083][T18125] Call Trace: [ 878.714088][T18125] [ 878.714092][T18125] dump_stack_lvl+0x100/0x190 [ 878.714113][T18125] should_fail_ex.cold+0x5/0xa [ 878.714128][T18125] should_failslab+0xc2/0x120 [ 878.714142][T18125] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 878.714154][T18125] ? __alloc_skb+0x5b7/0x710 [ 878.714172][T18125] ? __alloc_skb+0x140/0x710 [ 878.714191][T18125] __alloc_skb+0x140/0x710 [ 878.714206][T18125] ? __alloc_skb+0x5b7/0x710 [ 878.714222][T18125] ? __pfx___alloc_skb+0x10/0x10 [ 878.714242][T18125] netlink_alloc_large_skb+0x69/0x150 [ 878.714260][T18125] netlink_sendmsg+0x680/0xda0 [ 878.714279][T18125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.714297][T18125] ? selinux_socket_sendmsg+0x198/0x2f0 [ 878.714316][T18125] ____sys_sendmsg+0xa4d/0xbe0 [ 878.714329][T18125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.714346][T18125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.714362][T18125] ? lock_acquire+0x1d1/0x380 [ 878.714374][T18125] ? get_pid_task+0x2a/0x250 [ 878.714389][T18125] ___sys_sendmsg+0x190/0x1e0 [ 878.714409][T18125] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.714424][T18125] ? get_pid_task+0x106/0x250 [ 878.714443][T18125] ? find_held_lock+0x2b/0x80 [ 878.714466][T18125] __sys_sendmsg+0x160/0x210 [ 878.714477][T18125] ? __pfx___sys_sendmsg+0x10/0x10 [ 878.714495][T18125] do_syscall_64+0x123/0x790 [ 878.714509][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.714521][T18125] RIP: 0033:0x7f200df9e159 [ 878.714531][T18125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.714542][T18125] RSP: 002b:00007f200ed94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.714554][T18125] RAX: ffffffffffffffda RBX: 00007f200e225fa0 RCX: 00007f200df9e159 [ 878.714561][T18125] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 878.714568][T18125] RBP: 00007f200ed94090 R08: 0000000000000000 R09: 0000000000000000 [ 878.714574][T18125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.714581][T18125] R13: 00007f200e226038 R14: 00007f200e225fa0 R15: 00007ffc3eba6c78 [ 878.714595][T18125] [ 879.081711][ T31] audit: type=1400 audit(1788317750.379:3706): avc: denied { write } for pid=18126 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.116604][ T31] audit: type=1800 audit(1788317750.409:3707): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3248" name="addr_traddr" dev="configfs" ino=79559 res=0 errno=0 [ 879.242198][T18134] Bluetooth: MGMT ver 1.23 [ 879.357801][ T5266] 8021q: adding VLAN 0 to HW filter on device eth20 [ 879.389760][T14977] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 879.609260][T14977] usb 5-1: Using ep0 maxpacket: 8 [ 879.616686][T14977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 879.616721][T14977] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40 [ 879.634964][T14977] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 879.652046][T14977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 879.652068][T14977] usb 5-1: Product: syz [ 879.652082][T14977] usb 5-1: Manufacturer: syz [ 879.652093][T14977] usb 5-1: SerialNumber: syz [ 879.687511][T14977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.696179][T14977] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 879.721776][T14977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.731173][T14977] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 879.746033][T14977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.873794][T14977] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 879.966326][T13630] udevd[13630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 879.994834][ T7686] usb 5-1: USB disconnect, device number 7 [ 880.042573][T16278] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 880.060015][T16278] (NULL device *): queue 0 connect admin queue failed (-111). [ 880.060038][T16278] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 880.060051][T16278] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 880.090014][ T31] audit: type=1400 audit(1788317751.389:3708): avc: denied { setattr } for pid=18171 comm="syz.5.3258" name="NETLINK" dev="sockfs" ino=79725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 880.168823][T18172] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3258'. [ 880.206622][ T31] audit: type=1400 audit(1788317751.489:3709): avc: denied { setattr } for pid=18164 comm="syz.2.3257" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 880.241321][T14977] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 880.391398][ T31] audit: type=1400 audit(1788317751.689:3710): avc: denied { write } for pid=18142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.417033][T14977] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 880.438680][T14977] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.438712][T14977] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 880.463163][T14977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.463184][T14977] usb 8-1: Product: syz [ 880.463199][T14977] usb 8-1: Manufacturer: syz [ 880.463210][T14977] usb 8-1: SerialNumber: syz [ 880.497209][T14977] cdc_mbim 8-1:1.0: skipping garbage [ 880.621642][ T31] audit: type=1400 audit(1788317751.919:3711): avc: denied { write } for pid=18188 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.658522][T18190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.673473][T18190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.378219][T18170] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 881.499515][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 881.650540][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 881.661310][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 881.661340][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.661365][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.661379][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 881.716561][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 881.716598][ T10] usb 6-1: Manufacturer: syz [ 881.734506][ T10] usb 6-1: config 0 descriptor?? [ 881.751561][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 881.807807][T18170] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 881.815391][T14977] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 881.815404][T14977] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 881.869546][ T5731] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 882.012830][ T31] audit: type=1400 audit(1788317753.309:3712): avc: denied { bind } for pid=18184 comm="syz.5.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 882.037431][ T5731] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 882.056659][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 882.056702][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.080008][T18170] openvswitch: netlink: IP tunnel dst address not specified [ 882.099996][T16278] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 882.126740][T16278] (NULL device *): queue 0 connect admin queue failed (-111). [ 882.126767][T16278] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 882.126784][T16278] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 882.183287][T14977] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 882.192478][T14977] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 882.295483][ T5731] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -71 [ 882.370699][ T5731] usb 5-1: USB disconnect, device number 8 [ 882.379370][ T31] audit: type=1400 audit(1788317753.669:3713): avc: denied { write } for pid=18195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 882.418241][T14977] wwan wwan0: port wwan0mbim0 attached [ 882.507679][T14977] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 06:6b:dd:d4:85:af [ 882.543165][T14977] usb 8-1: USB disconnect, device number 9 [ 882.543941][T14977] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 882.641217][T14977] wwan wwan0: port wwan0mbim0 disconnected [ 882.750845][ T31] audit: type=1400 audit(1788317754.039:3714): avc: denied { write } for pid=18215 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.164766][ T31] audit: type=1400 audit(1788317754.459:3715): avc: denied { node_bind } for pid=18229 comm="syz.2.3270" src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 883.275332][T18230] random: crng reseeded on system resumption [ 883.281773][ T31] audit: type=1400 audit(1788317754.569:3716): avc: denied { write } for pid=18229 comm="syz.2.3270" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 883.334457][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 883.334518][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 883.362521][ T10] usb 6-1: USB disconnect, device number 19 [ 883.614243][T18237] FAULT_INJECTION: forcing a failure. [ 883.614243][T18237] name failslab, interval 1, probability 0, space 0, times 0 [ 883.614274][T18237] CPU: 0 UID: 0 PID: 18237 Comm: syz.5.3271 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.614291][T18237] Tainted: [L]=SOFTLOCKUP [ 883.614295][T18237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 883.614307][T18237] Call Trace: [ 883.614311][T18237] [ 883.614316][T18237] dump_stack_lvl+0x100/0x190 [ 883.614337][T18237] should_fail_ex.cold+0x5/0xa [ 883.614353][T18237] should_failslab+0xc2/0x120 [ 883.614367][T18237] __kmalloc_node_noprof+0xff/0x880 [ 883.614379][T18237] ? qdisc_alloc+0xbb/0xb30 [ 883.614395][T18237] qdisc_alloc+0xbb/0xb30 [ 883.614408][T18237] ? _raw_read_unlock+0x28/0x50 [ 883.614420][T18237] qdisc_create+0x70/0x1060 [ 883.614430][T18237] ? do_raw_read_unlock+0x3f/0x70 [ 883.614446][T18237] tc_modify_qdisc+0xdcf/0x2120 [ 883.614458][T18237] ? __mutex_lock+0x829/0x1bd0 [ 883.614472][T18237] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 883.614496][T18237] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 883.614507][T18237] rtnetlink_rcv_msg+0x3c9/0xe90 [ 883.614521][T18237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 883.614537][T18237] ? ref_tracker_free+0x37e/0x6c0 [ 883.614551][T18237] netlink_rcv_skb+0x159/0x420 [ 883.614568][T18237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 883.614581][T18237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 883.614602][T18237] ? netlink_deliver_tap+0x1ae/0xcc0 [ 883.614621][T18237] netlink_unicast+0x585/0x850 [ 883.614639][T18237] ? __pfx_netlink_unicast+0x10/0x10 [ 883.614659][T18237] netlink_sendmsg+0x8b0/0xda0 [ 883.614678][T18237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.614696][T18237] ? selinux_socket_sendmsg+0x198/0x2f0 [ 883.614715][T18237] ____sys_sendmsg+0xa4d/0xbe0 [ 883.614728][T18237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.614745][T18237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 883.614762][T18237] ? lock_acquire+0x1d1/0x380 [ 883.614773][T18237] ? get_pid_task+0x2a/0x250 [ 883.614788][T18237] ___sys_sendmsg+0x190/0x1e0 [ 883.614804][T18237] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.614818][T18237] ? get_pid_task+0x106/0x250 [ 883.614838][T18237] ? find_held_lock+0x2b/0x80 [ 883.614861][T18237] __sys_sendmsg+0x160/0x210 [ 883.614872][T18237] ? __pfx___sys_sendmsg+0x10/0x10 [ 883.614891][T18237] do_syscall_64+0x123/0x790 [ 883.614905][T18237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.614916][T18237] RIP: 0033:0x7f200df9e159 [ 883.614926][T18237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.614938][T18237] RSP: 002b:00007f200ed94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.614949][T18237] RAX: ffffffffffffffda RBX: 00007f200e225fa0 RCX: 00007f200df9e159 [ 883.614956][T18237] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 883.614963][T18237] RBP: 00007f200ed94090 R08: 0000000000000000 R09: 0000000000000000 [ 883.614970][T18237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.614976][T18237] R13: 00007f200e226038 R14: 00007f200e225fa0 R15: 00007ffc3eba6c78 [ 883.614991][T18237] [ 884.026989][ T31] audit: type=1400 audit(1788317755.319:3717): avc: denied { write } for pid=18219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.092523][T18245] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 884.171860][T18245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 884.181883][ T6627] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 884.200416][ T6627] (NULL device *): queue 0 connect admin queue failed (-111). [ 884.200440][ T6627] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 884.200457][ T6627] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 884.531362][ T31] audit: type=1400 audit(1788317755.829:3718): avc: denied { write } for pid=18253 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.579409][T14977] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 884.602974][T18256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.603179][T18256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.698149][ T31] audit: type=1326 audit(1788317755.989:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18260 comm="syz.5.3275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200df9e159 code=0x7ffc0000 [ 884.733898][ T31] audit: type=1326 audit(1788317756.029:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18260 comm="syz.5.3275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f200df9e159 code=0x7ffc0000 [ 884.733936][ T31] audit: type=1326 audit(1788317756.029:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18260 comm="syz.5.3275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200df9e159 code=0x7ffc0000 [ 884.760752][T14977] usb 3-1: Using ep0 maxpacket: 8 [ 884.761936][T14977] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 884.809475][T14977] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 884.809491][T14977] usb 3-1: config 0 has no interface number 0 [ 884.809511][T14977] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 884.809526][T14977] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.809544][T14977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.841503][T14977] usb 3-1: config 0 descriptor?? [ 884.890318][T14977] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 885.067409][T18245] iowarrior 3-1:0.1: Error -90 while submitting URB [ 885.140950][T14977] usb 3-1: USB disconnect, device number 115 [ 885.399761][T15581] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 885.549187][T15581] usb 6-1: Using ep0 maxpacket: 16 [ 885.554775][T15581] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 885.566120][T15581] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.566150][T15581] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.566172][T15581] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 885.566187][T15581] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 885.616011][T15581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 885.616032][T15581] usb 6-1: SerialNumber: syz [ 885.636935][T18279] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 885.647118][T15581] hub 6-1:1.0: bad descriptor, ignoring hub [ 885.654088][T15581] hub 6-1:1.0: probe with driver hub failed with error -5 [ 885.661824][T15581] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 885.739855][T14977] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 885.900171][T14977] usb 5-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 885.910605][T14977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.910650][T14977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.929998][ T5731] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 885.939982][T14977] usb 5-1: config 0 descriptor?? [ 885.953889][T14977] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 886.103114][ T5731] usb 8-1: device descriptor read/64, error -71 [ 886.265299][ T6627] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 886.280796][ T6627] (NULL device *): queue 0 connect admin queue failed (-111). [ 886.280819][ T6627] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 886.280830][ T6627] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 886.349003][ T5731] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 886.365266][T14977] pwc: recv_control_msg error -71 req 02 val 2b00 [ 886.372071][T14977] pwc: recv_control_msg error -71 req 02 val 2700 [ 886.378656][T14977] pwc: recv_control_msg error -71 req 04 val 1700 [ 886.385508][T14977] pwc: recv_control_msg error -71 req 02 val 2c00 [ 886.393283][T14977] pwc: recv_control_msg error -71 req 04 val 1000 [ 886.401252][T14977] pwc: recv_control_msg error -71 req 04 val 1300 [ 886.412448][T14977] pwc: recv_control_msg error -71 req 04 val 1400 [ 886.419825][T14977] pwc: recv_control_msg error -71 req 02 val 2000 [ 886.426963][T14977] pwc: recv_control_msg error -71 req 02 val 2100 [ 886.427271][T14977] pwc: recv_control_msg error -71 req 02 val 2200 [ 886.434969][T14977] pwc: recv_control_msg error -71 req 06 val 0600 [ 886.441883][T14977] pwc: recv_control_msg error -71 req 04 val 1500 [ 886.443159][T14977] pwc: recv_control_msg error -71 req 02 val 2500 [ 886.443473][T14977] pwc: recv_control_msg error -71 req 02 val 2400 [ 886.464354][T14977] pwc: recv_control_msg error -71 req 02 val 2600 [ 886.479070][ T5731] usb 8-1: device descriptor read/64, error -71 [ 886.487138][T14977] pwc: recv_control_msg error -71 req 02 val 2900 [ 886.495932][T14977] pwc: recv_control_msg error -71 req 02 val 2800 [ 886.503352][T14977] pwc: recv_control_msg error -71 req 04 val 1100 [ 886.511509][T14977] pwc: recv_control_msg error -71 req 04 val 1200 [ 886.554739][T14977] pwc: Registered as video103. [ 886.570105][T14977] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input111 [ 886.589264][ T5731] usb usb8-port1: attempt power cycle [ 886.601194][T14977] usb 5-1: USB disconnect, device number 9 [ 886.788069][T18320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.788279][T18320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.929105][ T5731] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 886.949401][ T5731] usb 8-1: device descriptor read/8, error -71 [ 886.977805][T18330] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 887.107893][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 887.107915][ T31] audit: type=1400 audit(1788317758.399:3744): avc: denied { write } for pid=18313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.201401][ T5731] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 887.232228][ T5731] usb 8-1: device descriptor read/8, error -71 [ 887.340270][ T5731] usb usb8-port1: unable to enumerate USB device [ 887.405780][ T31] audit: type=1400 audit(1788317758.699:3745): avc: denied { write } for pid=18338 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.664147][ T31] audit: type=1400 audit(1788317758.959:3746): avc: denied { bind } for pid=18344 comm="syz.4.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 887.816840][T18352] binder: 18350:18352 ioctl c00c620f 200000000500 returned -22 [ 888.343267][ T6636] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 888.426334][ T6636] (NULL device *): queue 0 connect admin queue failed (-111). [ 888.426363][ T6636] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 888.426380][ T6636] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 888.773744][T18353] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 888.773780][T18353] SELinux: failed to load policy [ 888.895398][T18360] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 888.953233][ T7686] usb 6-1: USB disconnect, device number 20 [ 889.051327][ T5731] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 889.081032][T18360] CIFS: VFS: Error connecting to socket. Aborting operation. [ 889.121617][ T31] audit: type=1400 audit(1788317760.419:3747): avc: denied { write } for pid=18342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.149939][T18360] CIFS: VFS: cifs_mount failed w/return code = -111 [ 889.235222][ T5731] usb 3-1: unable to get BOS descriptor or descriptor too short [ 889.243242][ T5731] usb 3-1: not running at top speed; connect to a high speed hub [ 889.243259][ T5731] usb 3-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=34.88 [ 889.267578][ T5731] usb 3-1: config 11 has an invalid interface number: 20 but max is 0 [ 889.267600][ T5731] usb 3-1: config 11 has no interface number 0 [ 889.267627][ T5731] usb 3-1: config 11 interface 20 altsetting 156 has an endpoint descriptor with address 0x16, changing to 0x6 [ 889.267644][ T5731] usb 3-1: config 11 interface 20 has no altsetting 0 [ 889.307272][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.307301][ T5731] usb 3-1: Product: syz [ 889.307317][ T5731] usb 3-1: Manufacturer: syz [ 889.307327][ T5731] usb 3-1: SerialNumber: syz [ 889.461539][ T31] audit: type=1400 audit(1788317760.759:3748): avc: denied { write } for pid=18376 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.598527][ T5731] usb 3-1: USB disconnect, device number 116 [ 890.350764][T18397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.353181][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3298'. [ 890.434620][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3299'. [ 890.499060][ T6627] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 890.516398][ T6627] (NULL device *): queue 0 connect admin queue failed (-111). [ 890.516414][ T6627] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 890.516425][ T6627] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 891.850013][ T31] audit: type=1400 audit(1788317763.139:3749): avc: denied { write } for pid=18383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 892.067979][T18421] FAULT_INJECTION: forcing a failure. [ 892.067979][T18421] name failslab, interval 1, probability 0, space 0, times 0 [ 892.083291][T18421] CPU: 0 UID: 0 PID: 18421 Comm: syz.7.3303 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.083310][T18421] Tainted: [L]=SOFTLOCKUP [ 892.083314][T18421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 892.083321][T18421] Call Trace: [ 892.083325][T18421] [ 892.083329][T18421] dump_stack_lvl+0x100/0x190 [ 892.083349][T18421] should_fail_ex.cold+0x5/0xa [ 892.083365][T18421] should_failslab+0xc2/0x120 [ 892.083379][T18421] __kmalloc_noprof+0xfc/0x840 [ 892.083392][T18421] ? __pfx_dynamic_dname+0x10/0x10 [ 892.083403][T18421] ? tomoyo_encode2+0xfb/0x3c0 [ 892.083417][T18421] tomoyo_encode2+0xfb/0x3c0 [ 892.083430][T18421] tomoyo_encode+0x29/0x50 [ 892.083440][T18421] tomoyo_realpath_from_path+0x18c/0x690 [ 892.083455][T18421] tomoyo_path_number_perm+0x23c/0x580 [ 892.083471][T18421] ? tomoyo_path_number_perm+0x22e/0x580 [ 892.083488][T18421] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 892.083509][T18421] ? __lock_acquire+0x4c5/0x1ec0 [ 892.083527][T18421] ? __fget_files+0x34/0x3d0 [ 892.083541][T18421] ? find_held_lock+0x2b/0x80 [ 892.083555][T18421] ? hook_file_ioctl_common+0x140/0x440 [ 892.083571][T18421] ? __fget_files+0x21f/0x3d0 [ 892.083586][T18421] security_file_ioctl+0xd3/0x230 [ 892.083604][T18421] __x64_sys_ioctl+0xb7/0x210 [ 892.083622][T18421] do_syscall_64+0x123/0x790 [ 892.083636][T18421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.083648][T18421] RIP: 0033:0x7f7b0559e159 [ 892.083657][T18421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.083668][T18421] RSP: 002b:00007f7b0648a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.083679][T18421] RAX: ffffffffffffffda RBX: 00007f7b05825fa0 RCX: 00007f7b0559e159 [ 892.083686][T18421] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 892.083693][T18421] RBP: 00007f7b0648a090 R08: 0000000000000000 R09: 0000000000000000 [ 892.083700][T18421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.083707][T18421] R13: 00007f7b05826038 R14: 00007f7b05825fa0 R15: 00007ffc4a6ee098 [ 892.083721][T18421] [ 892.323732][T18421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.382604][ T31] audit: type=1400 audit(1788317763.679:3750): avc: denied { write } for pid=18419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 892.573318][ T31] audit: type=1400 audit(1788317763.869:3751): avc: denied { bind } for pid=18429 comm="syz.0.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 892.593829][ T166] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 892.625201][ T166] (NULL device *): queue 0 connect admin queue failed (-111). [ 892.625227][ T166] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 892.625250][ T166] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 892.708413][ T31] audit: type=1400 audit(1788317763.999:3752): avc: denied { mounton } for pid=18411 comm="syz.2.3302" path="/161/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 892.835612][ T31] audit: type=1400 audit(1788317764.129:3753): avc: denied { setattr } for pid=18411 comm="syz.2.3302" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 893.008497][T18428] bridge0: port 3(netdevsim0) entered blocking state [ 893.008549][T18428] bridge0: port 3(netdevsim0) entered disabled state [ 893.008644][T18428] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 893.092779][T18428] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 893.093383][T18428] bridge0: port 3(netdevsim0) entered blocking state [ 893.093438][T18428] bridge0: port 3(netdevsim0) entered forwarding state [ 893.451428][ T31] audit: type=1400 audit(1788317764.749:3754): avc: denied { write } for pid=18436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.599101][T14977] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 893.657429][ T31] audit: type=1400 audit(1788317764.949:3755): avc: denied { write } for pid=18467 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.745887][T18470] FAULT_INJECTION: forcing a failure. [ 893.745887][T18470] name failslab, interval 1, probability 0, space 0, times 0 [ 893.745918][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.2.3312 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.745935][T18470] Tainted: [L]=SOFTLOCKUP [ 893.745939][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 893.745945][T18470] Call Trace: [ 893.745949][T18470] [ 893.745954][T18470] dump_stack_lvl+0x100/0x190 [ 893.745974][T18470] should_fail_ex.cold+0x5/0xa [ 893.745989][T18470] should_failslab+0xc2/0x120 [ 893.746004][T18470] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 893.746016][T18470] ? __alloc_skb+0x140/0x710 [ 893.746035][T18470] __alloc_skb+0x140/0x710 [ 893.746051][T18470] ? __alloc_skb+0x5b7/0x710 [ 893.746067][T18470] ? __pfx___alloc_skb+0x10/0x10 [ 893.746083][T18470] ? lockdep_hardirqs_on+0x7d/0x110 [ 893.746096][T18470] ? xfrm_policy_flush+0x3a4/0x450 [ 893.746109][T18470] ? __local_bh_enable_ip+0xa5/0x120 [ 893.746123][T18470] unicast_flush_resp+0x27/0x160 [ 893.746137][T18470] pfkey_spdflush+0xc9/0x250 [ 893.746150][T18470] ? __pfx_pfkey_spdflush+0x10/0x10 [ 893.746162][T18470] ? kfree_skbmem+0x19f/0x210 [ 893.746176][T18470] ? sk_skb_reason_drop+0x114/0x1b0 [ 893.746188][T18470] ? pfkey_broadcast+0x28c/0x420 [ 893.746201][T18470] ? __pfx_pfkey_spdflush+0x10/0x10 [ 893.746215][T18470] pfkey_process+0x5c3/0x810 [ 893.746232][T18470] ? trace_contention_end+0x126/0x160 [ 893.746246][T18470] ? __pfx_pfkey_process+0x10/0x10 [ 893.746258][T18470] ? pfkey_sendmsg+0x41a/0x840 [ 893.746279][T18470] ? __pfx___alloc_skb+0x10/0x10 [ 893.746299][T18470] pfkey_sendmsg+0x428/0x840 [ 893.746314][T18470] ____sys_sendmsg+0xa4d/0xbe0 [ 893.746327][T18470] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 893.746341][T18470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.746357][T18470] ? lock_acquire+0x1d1/0x380 [ 893.746368][T18470] ? get_pid_task+0x2a/0x250 [ 893.746384][T18470] ___sys_sendmsg+0x190/0x1e0 [ 893.746399][T18470] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.746414][T18470] ? get_pid_task+0x106/0x250 [ 893.746433][T18470] ? find_held_lock+0x2b/0x80 [ 893.746457][T18470] __sys_sendmsg+0x160/0x210 [ 893.746468][T18470] ? __pfx___sys_sendmsg+0x10/0x10 [ 893.746486][T18470] do_syscall_64+0x123/0x790 [ 893.746500][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.746511][T18470] RIP: 0033:0x7f4af7d9e159 [ 893.746521][T18470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.746532][T18470] RSP: 002b:00007f4af5ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.746543][T18470] RAX: ffffffffffffffda RBX: 00007f4af8025fa0 RCX: 00007f4af7d9e159 [ 893.746551][T18470] RDX: 0000000000000010 RSI: 00002000000020c0 RDI: 0000000000000003 [ 893.746558][T18470] RBP: 00007f4af5ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 893.746564][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.746571][T18470] R13: 00007f4af8026038 R14: 00007f4af8025fa0 R15: 00007ffd0a8b7288 [ 893.746585][T18470] [ 893.761067][T14977] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 893.775436][T14977] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.775460][T14977] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 893.775472][T14977] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 893.775485][T14977] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 893.775507][T14977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.425717][ T31] audit: type=1400 audit(1788317765.719:3756): avc: denied { read } for pid=18460 comm="syz.7.3310" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 894.659598][ T6627] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 894.675439][ T6627] (NULL device *): queue 0 connect admin queue failed (-111). [ 894.675456][ T6627] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 894.675466][ T6627] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 894.701337][ T5731] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 894.859321][ T5731] usb 3-1: Using ep0 maxpacket: 32 [ 894.864808][ T5731] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 894.877219][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.877243][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.877283][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.902484][ T5731] usb 3-1: config 0 descriptor?? [ 894.924263][ T5731] hub 3-1:0.0: USB hub found [ 894.960218][T18488] netlink: 'syz.5.3317': attribute type 11 has an invalid length. [ 895.027090][ T31] audit: type=1400 audit(1788317766.319:3757): avc: denied { write } for pid=18473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.142561][T14864] Bluetooth: hci2: failed to read key size for handle 200 [ 895.142638][T14864] [ 895.152039][T14864] ====================================================== [ 895.159030][T14864] WARNING: possible circular locking dependency detected [ 895.166019][T14864] syzkaller #0 Tainted: G L [ 895.171963][T14864] ------------------------------------------------------ [ 895.178956][T14864] kworker/u9:0/14864 is trying to acquire lock: [ 895.185161][T14864] ffffffff90f7e480 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x3f/0x4b0 [ 895.194354][T14864] [ 895.194354][T14864] but task is already holding lock: [ 895.201688][T14864] ffffffff90f51940 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_cc_read_enc_key_size+0x333/0xec0 [ 895.211741][T14864] [ 895.211741][T14864] which lock already depends on the new lock. [ 895.211741][T14864] [ 895.222112][T14864] [ 895.222112][T14864] the existing dependency chain (in reverse order) is: [ 895.231103][T14864] [ 895.231103][T14864] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 895.238807][T14864] lock_acquire+0x1d1/0x380 [ 895.243806][T14864] __mutex_lock+0x1a4/0x1bd0 [ 895.248899][T14864] hci_remote_features_evt+0x485/0x9b0 [ 895.254852][T14864] hci_event_packet+0x8e9/0xcd0 [ 895.260198][T14864] hci_rx_work+0x451/0xfc0 [ 895.265119][T14864] process_one_work+0xac7/0x1b10 [ 895.270552][T14864] worker_thread+0x5ef/0xe50 [ 895.275644][T14864] kthread+0x373/0x450 [ 895.280226][T14864] ret_from_fork+0x730/0xd60 [ 895.285307][T14864] ret_from_fork_asm+0x1a/0x30 [ 895.290567][T14864] [ 895.290567][T14864] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 895.297827][T14864] lock_acquire+0x1d1/0x380 [ 895.302822][T14864] __mutex_lock+0x1a4/0x1bd0 [ 895.307904][T14864] l2cap_chan_connect+0xac/0x2050 [ 895.313428][T14864] l2cap_sock_connect+0x37a/0x770 [ 895.318944][T14864] kernel_connect+0x107/0x160 [ 895.324113][T14864] rfcomm_dlc_open+0x838/0xac0 [ 895.329371][T14864] rfcomm_sock_connect+0x42c/0x690 [ 895.334975][T14864] __sys_connect_file+0x146/0x1a0 [ 895.340493][T14864] __sys_connect+0x141/0x170 [ 895.345576][T14864] __x64_sys_connect+0x72/0xb0 [ 895.350835][T14864] do_syscall_64+0x123/0x790 [ 895.355916][T14864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.362300][T14864] [ 895.362300][T14864] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 895.369647][T14864] check_prev_add+0xeb/0xe60 [ 895.374727][T14864] __lock_acquire+0x1492/0x1ec0 [ 895.380066][T14864] lock_acquire+0x1d1/0x380 [ 895.385059][T14864] __mutex_lock+0x1a4/0x1bd0 [ 895.390140][T14864] rfcomm_security_cfm+0x3f/0x4b0 [ 895.395665][T14864] hci_cc_read_enc_key_size+0x3a8/0xec0 [ 895.401705][T14864] hci_cmd_complete_evt+0x342/0xa20 [ 895.407393][T14864] hci_event_packet+0x51c/0xcd0 [ 895.412738][T14864] hci_rx_work+0x451/0xfc0 [ 895.417649][T14864] process_one_work+0xac7/0x1b10 [ 895.423087][T14864] worker_thread+0x5ef/0xe50 [ 895.428182][T14864] kthread+0x373/0x450 [ 895.432749][T14864] ret_from_fork+0x730/0xd60 [ 895.437837][T14864] ret_from_fork_asm+0x1a/0x30 [ 895.443093][T14864] [ 895.443093][T14864] other info that might help us debug this: [ 895.443093][T14864] [ 895.453288][T14864] Chain exists of: [ 895.453288][T14864] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 895.453288][T14864] [ 895.465762][T14864] Possible unsafe locking scenario: [ 895.465762][T14864] [ 895.473181][T14864] CPU0 CPU1 [ 895.478514][T14864] ---- ---- [ 895.483847][T14864] lock(hci_cb_list_lock); [ 895.488320][T14864] lock(&hdev->lock); [ 895.494877][T14864] lock(hci_cb_list_lock); [ 895.501866][T14864] lock(rfcomm_mutex); [ 895.505990][T14864] [ 895.505990][T14864] *** DEADLOCK *** [ 895.505990][T14864] [ 895.514100][T14864] locks held by kworker/u9:0/14864: 4, last CPU#0: [ 895.520569][T14864] #0: ffff888054528940 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 895.530979][T14864] #1: ffffc9000451fd08 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 895.542337][T14864] #2: ffff888076fec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_cc_read_enc_key_size+0xc2/0xec0 [ 895.552305][T14864] #3: ffffffff90f51940 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_cc_read_enc_key_size+0x333/0xec0 [ 895.562792][T14864] [ 895.562792][T14864] stack backtrace: [ 895.568653][T14864] CPU: 0 UID: 0 PID: 14864 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.579738][T14864] Tainted: [L]=SOFTLOCKUP [ 895.584030][T14864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 895.594055][T14864] Workqueue: hci2 hci_rx_work [ 895.598708][T14864] Call Trace: [ 895.601960][T14864] [ 895.604864][T14864] dump_stack_lvl+0x100/0x190 [ 895.609515][T14864] print_circular_bug.cold+0x178/0x1be [ 895.614954][T14864] check_noncircular+0x146/0x160 [ 895.619869][T14864] ? lock_acquire+0x1d1/0x380 [ 895.624532][T14864] check_prev_add+0xeb/0xe60 [ 895.629091][T14864] __lock_acquire+0x1492/0x1ec0 [ 895.633913][T14864] ? l2cap_security_cfm+0x90b/0x1240 [ 895.639167][T14864] lock_acquire+0x1d1/0x380 [ 895.643640][T14864] ? rfcomm_security_cfm+0x3f/0x4b0 [ 895.648809][T14864] ? __pfx___might_resched+0x10/0x10 [ 895.654063][T14864] __mutex_lock+0x1a4/0x1bd0 [ 895.658622][T14864] ? rfcomm_security_cfm+0x3f/0x4b0 [ 895.663790][T14864] ? rfcomm_security_cfm+0x3f/0x4b0 [ 895.668959][T14864] ? __pfx___mutex_lock+0x10/0x10 [ 895.673954][T14864] ? __pfx___mutex_lock+0x10/0x10 [ 895.678948][T14864] ? __pfx_bt_err+0x10/0x10 [ 895.683423][T14864] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 895.689024][T14864] ? rfcomm_security_cfm+0x3f/0x4b0 [ 895.694190][T14864] rfcomm_security_cfm+0x3f/0x4b0 [ 895.699188][T14864] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 895.704796][T14864] hci_cc_read_enc_key_size+0x3a8/0xec0 [ 895.710315][T14864] hci_cmd_complete_evt+0x342/0xa20 [ 895.715485][T14864] hci_event_packet+0x51c/0xcd0 [ 895.720310][T14864] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 895.726009][T14864] ? __pfx_hci_event_packet+0x10/0x10 [ 895.731355][T14864] ? lockdep_hardirqs_on+0x7d/0x110 [ 895.736535][T14864] hci_rx_work+0x451/0xfc0 [ 895.740936][T14864] process_one_work+0xac7/0x1b10 [ 895.745851][T14864] ? __pfx_process_one_work+0x10/0x10 [ 895.751198][T14864] ? lock_acquire+0x1d1/0x380 [ 895.755850][T14864] ? __pfx_hci_rx_work+0x10/0x10 [ 895.760762][T14864] worker_thread+0x5ef/0xe50 [ 895.765330][T14864] ? __pfx_worker_thread+0x10/0x10 [ 895.770415][T14864] ? kthread+0x13a/0x450 [ 895.774631][T14864] ? __pfx_worker_thread+0x10/0x10 [ 895.779726][T14864] kthread+0x373/0x450 [ 895.783769][T14864] ? __pfx_kthread+0x10/0x10 [ 895.788332][T14864] ret_from_fork+0x730/0xd60 [ 895.792894][T14864] ? __pfx_ret_from_fork+0x10/0x10 [ 895.797975][T14864] ? __switch_to+0x800/0x10f0 [ 895.802624][T14864] ? __pfx_kthread+0x10/0x10 [ 895.807190][T14864] ret_from_fork_asm+0x1a/0x30 [ 895.811929][T14864] [ 895.849564][ T5731] hub 3-1:0.0: 1 port detected [ 895.855489][T18492] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 895.885227][T18499] netlink: 'syz.4.3318': attribute type 1 has an invalid length. [ 895.893107][T18499] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3318'. [ 895.902207][T18499] netlink: 'syz.4.3318': attribute type 2 has an invalid length. [ 895.910135][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'. [ 895.943969][ T31] audit: type=1400 audit(1788317767.239:3758): avc: denied { write } for pid=18498 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.031117][ T5731] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 896.043136][ T5731] usbhid 3-1:0.0: can't add hid device: -71 [ 896.043180][ T5731] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 896.079956][ T5731] usb 3-1: USB disconnect, device number 117 [ 896.300945][ T31] audit: type=1400 audit(1788317767.599:3759): avc: denied { write } for pid=18502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.740155][ T6627] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 896.755855][ T6627] (NULL device *): queue 0 connect admin queue failed (-111). [ 896.755878][ T6627] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 896.755889][ T6627] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 896.905378][T14977] gud 8-1:1.0: probe with driver gud failed with error -71 [ 896.923401][T14977] usb 8-1: USB disconnect, device number 14 [ 898.157518][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 898.157537][ T31] audit: type=1400 audit(1788317769.449:3765): avc: denied { write } for pid=18554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 898.216029][ T31] audit: type=1400 audit(1788317769.509:3766): avc: denied { write } for pid=18565 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 898.819525][T16278] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 898.833809][T16278] (NULL device *): queue 0 connect admin queue failed (-111). [ 898.841453][T16278] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 898.849257][T16278] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 900.899187][ T1162] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 900.914970][ T1162] (NULL device *): queue 0 connect admin queue failed (-111). [ 900.922608][ T1162] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 900.922621][ T1162] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 902.980051][ T6627] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 902.994367][ T6627] (NULL device *): queue 0 connect admin queue failed (-111). [ 902.994383][ T6627] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 902.994393][ T6627] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 905.060061][ T1162] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvme" [ 905.075047][ T1162] (NULL device *): queue 0 connect admin queue failed (-111). [ 905.075069][ T1162] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 905.075080][ T1162] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds