last executing test programs: 5m10.345448589s ago: executing program 0 (id=214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x4, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x5dc}], 0x1}, 0x4) 5m8.518439095s ago: executing program 0 (id=221): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = timerfd_create(0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @private, @loopback}, 0x0) socket$alg(0x26, 0x5, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 5m7.518837088s ago: executing program 0 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) fchdir(r3) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2104048000004300"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300cfbd31600eace5383825d6a175e4db0256dd13049d3d3c7d01526821045f68f6872c43cfaf52070e2f070000000000000014d5a580b87fefefb1d69541739157a446ca6e8a17bc0689daa03615b068ae9d13fd3a47e4447d1e21563b2df0e625cfd61b8bbf1104cdb2662824605a0744af46054054d6edc9717e652b034d84900d56f15a8b3914c06e4443c4ed4162a91bf59e47820040a786b3aa08510f8bb4fca782970cd8b64ddbb53d38b94fd4f219f06785fe941009bd7753689b847ed88f6d5b07d4797e77f466ebd000574043", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x401, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x7, 0x8, 0xfffb, 0x6f1}}, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @void}, 0x41) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) unshare(0x22020600) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') syz_open_dev$video4linux(&(0x7f0000000080), 0xffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x7, 0x9, 0x2, 0x3, 0xffffffffffffffff, 0xfffffffffffffffa, 0x34f}, 0x0, 0x0, 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_POLL(r10, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a) splice(r9, 0x0, r8, 0x0, 0x18, 0x7) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf252e0000000c00990000280000120000000400d0000a00c8005050505050500000050019010e0000001e00940002001d0200000000000000020006000500000008000100000003000010009d0000000010060007000d0067001000b000001000000500235f81000500"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r11, r12+60000000}, &(0x7f00000000c0)) 5m4.442818765s ago: executing program 0 (id=246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 5m4.239012311s ago: executing program 0 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0xf, 0x0, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5m4.061244028s ago: executing program 0 (id=250): openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x18}}], 0x1, 0x40500f0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000009d00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000b40)=""/4096}, {&(0x7f0000001b40)=""/138}, {&(0x7f0000001c00)=""/103}, {&(0x7f0000001c80)=""/4096}, {&(0x7f0000002c80)=""/191}, {&(0x7f0000002d40)=""/110}, {&(0x7f0000002dc0)=""/213}], 0x0, &(0x7f0000002f00)=[@cred]}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002f40)=""/159}, {&(0x7f0000000600)=""/201}, {&(0x7f0000003100)=""/141}, {&(0x7f00000031c0)=""/156}, {&(0x7f0000003280)=""/4096}]}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000042c0)=""/48}, {&(0x7f0000004300)=""/185}, {&(0x7f00000043c0)=""/187}, {&(0x7f0000004480)=""/121}, {&(0x7f0000004500)=""/145}, {&(0x7f00000045c0)=""/40}]}}, {{&(0x7f0000004640)=@abs, 0x0, &(0x7f00000056c0)=[{&(0x7f00000046c0)=""/4096}], 0x0, &(0x7f0000005700)=[@cred, @cred, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{0x0, 0x0, &(0x7f0000007c40)=[{&(0x7f0000005800)=""/4096}, {&(0x7f0000006800)=""/110}, {&(0x7f0000006880)=""/165}, {&(0x7f0000006940)=""/203}, {&(0x7f0000006a40)=""/109}, {&(0x7f0000006ac0)=""/71}, {&(0x7f0000006b40)=""/205}, {&(0x7f0000006c40)=""/4096}], 0x0, &(0x7f0000007c80)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000007cc0), 0x0, &(0x7f0000008100)=[{&(0x7f0000007d40)=""/151}, {&(0x7f0000000500)=""/170}, {&(0x7f0000007ec0)=""/252}, {&(0x7f0000007fc0)=""/24}, {&(0x7f0000008000)=""/133}, {&(0x7f00000080c0)=""/6}], 0x0, &(0x7f0000008140)=[@cred]}}, {{&(0x7f0000008180), 0x0, &(0x7f0000008380)=[{&(0x7f0000008200)=""/141}, {&(0x7f00000082c0)=""/183}], 0x0, &(0x7f00000083c0)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000008440), 0x0, &(0x7f0000008580)=[{&(0x7f00000084c0)=""/22}, {&(0x7f0000008500)=""/39}, {&(0x7f0000008540)=""/34}], 0x0, &(0x7f00000085c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000008680), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000008740)=[@cred, @cred, @rights, @cred]}}, {{0x0, 0x0, &(0x7f0000009bc0)=[{&(0x7f00000087c0)=""/159}, {&(0x7f0000008880)=""/118}, {&(0x7f0000008900)=""/76}, {&(0x7f0000008980)=""/13}, {&(0x7f00000089c0)=""/221}, {&(0x7f0000008ac0)=""/4096}, {&(0x7f0000009ac0)=""/217}], 0x0, &(0x7f0000009c00)=[@cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred]}}], 0x8000003, 0x40000060, 0x0) 4m49.007814661s ago: executing program 32 (id=250): openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x18}}], 0x1, 0x40500f0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000009d00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000b40)=""/4096}, {&(0x7f0000001b40)=""/138}, {&(0x7f0000001c00)=""/103}, {&(0x7f0000001c80)=""/4096}, {&(0x7f0000002c80)=""/191}, {&(0x7f0000002d40)=""/110}, {&(0x7f0000002dc0)=""/213}], 0x0, &(0x7f0000002f00)=[@cred]}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002f40)=""/159}, {&(0x7f0000000600)=""/201}, {&(0x7f0000003100)=""/141}, {&(0x7f00000031c0)=""/156}, {&(0x7f0000003280)=""/4096}]}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000042c0)=""/48}, {&(0x7f0000004300)=""/185}, {&(0x7f00000043c0)=""/187}, {&(0x7f0000004480)=""/121}, {&(0x7f0000004500)=""/145}, {&(0x7f00000045c0)=""/40}]}}, {{&(0x7f0000004640)=@abs, 0x0, &(0x7f00000056c0)=[{&(0x7f00000046c0)=""/4096}], 0x0, &(0x7f0000005700)=[@cred, @cred, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{0x0, 0x0, &(0x7f0000007c40)=[{&(0x7f0000005800)=""/4096}, {&(0x7f0000006800)=""/110}, {&(0x7f0000006880)=""/165}, {&(0x7f0000006940)=""/203}, {&(0x7f0000006a40)=""/109}, {&(0x7f0000006ac0)=""/71}, {&(0x7f0000006b40)=""/205}, {&(0x7f0000006c40)=""/4096}], 0x0, &(0x7f0000007c80)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000007cc0), 0x0, &(0x7f0000008100)=[{&(0x7f0000007d40)=""/151}, {&(0x7f0000000500)=""/170}, {&(0x7f0000007ec0)=""/252}, {&(0x7f0000007fc0)=""/24}, {&(0x7f0000008000)=""/133}, {&(0x7f00000080c0)=""/6}], 0x0, &(0x7f0000008140)=[@cred]}}, {{&(0x7f0000008180), 0x0, &(0x7f0000008380)=[{&(0x7f0000008200)=""/141}, {&(0x7f00000082c0)=""/183}], 0x0, &(0x7f00000083c0)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000008440), 0x0, &(0x7f0000008580)=[{&(0x7f00000084c0)=""/22}, {&(0x7f0000008500)=""/39}, {&(0x7f0000008540)=""/34}], 0x0, &(0x7f00000085c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000008680), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000008740)=[@cred, @cred, @rights, @cred]}}, {{0x0, 0x0, &(0x7f0000009bc0)=[{&(0x7f00000087c0)=""/159}, {&(0x7f0000008880)=""/118}, {&(0x7f0000008900)=""/76}, {&(0x7f0000008980)=""/13}, {&(0x7f00000089c0)=""/221}, {&(0x7f0000008ac0)=""/4096}, {&(0x7f0000009ac0)=""/217}], 0x0, &(0x7f0000009c00)=[@cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred]}}], 0x8000003, 0x40000060, 0x0) 3m17.481674096s ago: executing program 4 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x20e, 0x2, 0x0, {{0x500, 0xcd, 0x500, 0xc3, {}, 0x0, 0x0, 0x4, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x9b\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x85e, 0x0, 0xffff}]}) r5 = openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80, 0x1}, 0x18) write(r5, &(0x7f0000000500)='A', 0x1000) 3m16.972077248s ago: executing program 4 (id=693): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) unshare(0x60000000) socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x6717, &(0x7f0000000080)={0x0, 0x1d26, 0x800, 0x4000000, 0x98}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x14, "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"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x86000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x8002, 0xffff, 0xffffffffffffffff, 0x7a, 0xaf5, 0xfffffffffffffffd, 0x6, 0x1, 0xfffffffffffffffe, 0x7, 0xaa1, 0x213, 0x3, 0x6, 0x6, 0x80000001], 0x257000, 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000040)={0x32, 0x17, 0x3, {0x29, 'my_tracefs/events/task/task_rename/enable'}}, 0x32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='freezer.self_freezing\x00', 0x275a, 0x0) fcntl$lock(r9, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x3, 0x10}) 3m15.636629364s ago: executing program 4 (id=700): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000009c0)={0x1}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$pppoe(r0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000041e41d1444d4c0ba5e386e"], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900200016000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) fchmod(r5, 0x101) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x6cd}}, './file0\x00'}) 3m13.754684047s ago: executing program 4 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x9e581, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000180)={{0x8, 0x4, &(0x7f0000000140)=[{0x80, 0x0, 0x1}, {0xc0, 0x0, 0x3}, {0x5, 0x0, 0xb86}, {0x0, 0x0, 0xffff}]}, 0xb0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f00000001c0)={r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000680)='proc\x00', 0x1008061, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x404c2, 0xc4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000600), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000440)="22cff58056bb404c4ab63c127a5fb72e52a26599", 0x14, 0x1) r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000500)=ANY=[@ANYBLOB="00fb3b0002476db1944203d7fbe0fb6b4b9b25d26111f49fc684a99d645d5afdeaec17ac66588bb392e98fde69673b722f13663944c8b3392d0c22633de78334c8e5ade85e01010938564dd7897530d3db3ebbf99770e6fef0681f62b531a3b6c51c1274039a"], 0x3b, 0x0) fsync(r3) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f00000006c0)={0x0, 0x0, 0xe, 0x59, 0x200000000003}) r5 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 3m13.753524879s ago: executing program 4 (id=711): syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6164b11d7cf302ca932e56a7ed20656372797074667320757365723a7d20"], 0x2b, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000240), &(0x7f00000001c0)="72ddb9ffa9d4", 0x6, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r7, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x3, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, 0x0, 0x0) r8 = openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r8, 0xc038563b, &(0x7f00000002c0)={0x1, 0x0, {0x0, 0x804, 0x101, 0x15}}) 3m13.430356477s ago: executing program 4 (id=716): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) 3m13.275645812s ago: executing program 33 (id=716): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) 2m55.171192865s ago: executing program 2 (id=859): syz_open_dev$usbmon(&(0x7f0000000280), 0xfffffffffffffff8, 0x0) r0 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f0000000340)) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000140)={0x7ff, 0xff, 0x1ff, 0xca9, 0x0, 0x4000}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000010004b0426bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40180000042c0400240012800b00010062726964676500031400028008000c00000000000500170001000000"], 0x44}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) write(r5, &(0x7f00000000c0)="b0", 0x1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002700)={0x3, &(0x7f0000000100)=[{0x6, 0x0, 0x5, 0xfb9f}, {0x40, 0x9, 0x5, 0xfffffffc}, {0x6, 0x4, 0x6, 0x6}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x25dfdbdf, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x40000) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2m55.120870515s ago: executing program 2 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)={0x20e, 0x2, 0x0, {{0x500, 0xcd, 0x500, 0xc3, {}, 0x0, 0x0, 0x4, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x9b\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20e) r1 = openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000540)="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") write(r1, &(0x7f0000000500)='A', 0x1000) 2m55.010407758s ago: executing program 2 (id=863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "726b1605e7bab91d", "67a39e9f0f359c798aaa3b97630f25a7", "ae420e9b", "8550f65b20a68537"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf3}], 0x4) close(r0) 2m54.722443975s ago: executing program 2 (id=866): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2m54.622255502s ago: executing program 2 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d05, &(0x7f0000000900)="00000fffff00000000000100") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x1000000, 0x3, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001300310327bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000a000001600c001400030064756d6d793000eab2ff9ebc50000000000000001e0008001300", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc894}, 0x20040850) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="ce504aae", @ANYRES16=r6, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000000006006600c78800001c00330008010000ffffffffffff0802110000010802110000000000"], 0x4c}}, 0x800) 2m54.522230633s ago: executing program 2 (id=869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a0000000030000000300000000000001000000001b001900050000000a0000060400000000000000090000000b0000000900000010000000001000000f0000000500000007000000070000001000000004000000020000000002000000000000a078000004000000ba000000020000000300000006000000000000020200000002000000000000100000000002000020e131001103000000060000000b0000000000000903000000002e00f56f4fa9b0178479476fd38f62f72a"], &(0x7f0000000580)=""/217, 0xbb, 0xd9, 0x0, 0x5}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3}, 0x94) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14ac3a00", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) r9 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) (async) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::1]:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='::1\x00', 0x0) 2m39.367014651s ago: executing program 34 (id=869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a0000000030000000300000000000001000000001b001900050000000a0000060400000000000000090000000b0000000900000010000000001000000f0000000500000007000000070000001000000004000000020000000002000000000000a078000004000000ba000000020000000300000006000000000000020200000002000000000000100000000002000020e131001103000000060000000b0000000000000903000000002e00f56f4fa9b0178479476fd38f62f72a"], &(0x7f0000000580)=""/217, 0xbb, 0xd9, 0x0, 0x5}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3}, 0x94) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14ac3a00", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) r9 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) (async) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::1]:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='::1\x00', 0x0) 6.874549959s ago: executing program 6 (id=2101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100d}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 4.73972741s ago: executing program 6 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) fchdir(r3) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2104048000004300"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300cfbd31600eace5383825d6a175e4db0256dd13049d3d3c7d01526821045f68f6872c43cfaf52070e2f070000000000000014d5a580b87fefefb1d69541739157a446ca6e8a17bc0689daa03615b068ae9d13fd3a47e4447d1e21563b2df0e625cfd61b8bbf1104cdb2662824605a0744af46054054d6edc9717e652b034d84900d56f15a8b3914c06e4443c4ed4162a91bf59e47820040a786b3aa08510f8bb4fca782970cd8b64ddbb53d38b94fd4f219f06785fe941009bd7753689b847ed88f6d5b07d4797e77f466ebd000574043", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x401, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x7, 0x8, 0xfffb, 0x6f1}}, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @void}, 0x41) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) unshare(0x22020600) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') syz_open_dev$video4linux(&(0x7f0000000080), 0xffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x7, 0x9, 0x2, 0x3, 0xffffffffffffffff, 0xfffffffffffffffa, 0x34f}, 0x0, 0x0, 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_POLL(r10, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a) splice(r9, 0x0, r8, 0x0, 0x18, 0x7) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf252e0000000c00990000280000120000000400d0000a00c8005050505050500000050019010e0000001e00940002001d0200000000000000020006000500000008000100000003000010009d0000000010060007000d0067001000b000001000000500235f81000500"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r11, r12+60000000}, &(0x7f00000000c0)) 4.631343585s ago: executing program 5 (id=2109): read$FUSE(0xffffffffffffffff, &(0x7f0000004940)={0x2020}, 0x2020) 4.62610535s ago: executing program 5 (id=2110): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x200000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.509617006s ago: executing program 1 (id=2111): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x408, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 3.47187295s ago: executing program 1 (id=2117): r0 = open(&(0x7f0000000100)='./bus\x00', 0x6c840, 0x50) finit_module(r0, 0x0, 0x5) (async) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="be56cb9e44a964000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf250f00000008000500000000000800040006000000040001801c000380060007004e210000050008000900000008000500ac141427080006000c0000000800050006000000080005000a0000000800060009000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x4c083, 0x0) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f00000000c0)={0x3ff, 0x0, 0x3003, 0x0, 0x0, {0xb, 0xea22}}) (rerun: 32) 3.428826995s ago: executing program 1 (id=2119): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x4, 0x3, 0x14, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xdb, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffc2, @private0, 0x7}}, @sadb_address={0x5, 0x17, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e24, 0x0, @private2, 0x1000}}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) (fail_nth: 3) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000000000006}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@random={'system.', 'security.capability\x00'}, &(0x7f0000000340)=""/170, 0xaa) 3.341615859s ago: executing program 3 (id=2120): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) unshare(0x60000000) socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x6717, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x14, "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"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x86000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x8002, 0xffff, 0xffffffffffffffff, 0x7a, 0xaf5, 0xfffffffffffffffd, 0x6, 0x1, 0xfffffffffffffffe, 0x7, 0xaa1, 0x213, 0x3, 0x6, 0x6, 0x80000001], 0x257000, 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f00000ce000/0x4000)=nil, 0x4000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000040)={0x32, 0x17, 0x3, {0x29, 'my_tracefs/events/task/task_rename/enable'}}, 0x32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='freezer.self_freezing\x00', 0x275a, 0x0) fcntl$lock(r9, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x3, 0x10}) 3.221246974s ago: executing program 1 (id=2121): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) r4 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 2.551611049s ago: executing program 5 (id=2122): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="4799", 0x2}], 0x1, 0x82e, 0x8001) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 2.299902513s ago: executing program 1 (id=2123): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) r4 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) 2.08188937s ago: executing program 3 (id=2124): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = timerfd_create(0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f0000000140)) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000004c0)={0x0, @private, @loopback}, 0x0) socket$alg(0x26, 0x5, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x6b, 0x4, 0xd, 0x0, 0x0, 0xff, 0x4, 0xd5, 0xe6, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x23, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) 1.615370663s ago: executing program 6 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x0, 0x4, 0x0, 0xfffffffe, 0x4}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') r3 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}}}, 0x30) ppoll(&(0x7f0000000040)=[{r2, 0x4000}, {r0, 0x2018}, {r2, 0xd0c0}, {r2, 0x2404}, {r2, 0x7000}, {r3, 0x4}, {r0}, {r2, 0x47a}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x3, 0xfffffffe]}, 0x8) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) 1.487250132s ago: executing program 6 (id=2126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x2, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @broadcast}, 0x14) 1.341628597s ago: executing program 5 (id=2127): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002700), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0xf4}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)) read$FUSE(r2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, 0x0, 0x0) creat(0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.340467834s ago: executing program 1 (id=2128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10040881) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYRESDEC]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.251735905s ago: executing program 5 (id=2129): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x408, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 1.250922076s ago: executing program 3 (id=2130): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x200000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.217675502s ago: executing program 6 (id=2131): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="41000000f20caa14433de250f7f14a2be06781c69b1b442d6dd1d46ab10bbfcd194e7626ef6cd47b58b5d4fd6524bc057925bd7f06e4363fa899a24dcfbea1e7a6eafa9338c06077ba47c061eb9eb31c5a2ce786864adaf4a2a9377b53b98ec7459394507654571428834016d2d67c1e217f56060dec2b67caa099103ac28e6516d08e2024247213b6168313bdd99b912fbce642cc492bb3acc38d2df2c384c7c92fc489b600adbf0464fc00645042422547533291a456db831c368bdb9c1b1afe6a5d31899b97fcdebf243febb4d5fcf209b0f1220d14", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000500001802c00040014000100020000007f00000100000000000000001400020002000000e000002f00000000000000000d0001007564703a73797a32000000000f0001006574683a64756d6d79300000"], 0x64}}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f00000007c0)=""/96, 0x60}], 0x2, 0x1001, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1}, 0x50) 346.299625ms ago: executing program 3 (id=2132): openat$fb1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f00000002c0)={0x18}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x109, 0x70bd26, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x80, 0x1, 0x0, 0x0, {{0x60}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x7, 0x1, 0x10, 0x8}}, @TCA_SKBEDIT_MARK={0x8}]}, {0x31, 0x6, "0b70e2de0d35bd8c9bdb1481931622126037be7e4ebfbb77802585d29e889fc9ece31b1069d920a1b67f73b8cd"}, {0xc, 0xa}, {0xc, 0x9, {0x0, 0x11bf5ad1668ed1b7}}}}]}]}, 0x98}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x109, 0x70bd26, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x80, 0x1, 0x0, 0x0, {{0x60}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x7, 0x1, 0x10, 0x8}}, @TCA_SKBEDIT_MARK={0x8}]}, {0x31, 0x6, "0b70e2de0d35bd8c9bdb1481931622126037be7e4ebfbb77802585d29e889fc9ece31b1069d920a1b67f73b8cd"}, {0xc, 0xa}, {0xc, 0x9, {0x0, 0x11bf5ad1668ed1b7}}}}]}]}, 0x98}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000001, 0x40800) mmap$usbmon(&(0x7f0000880000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x9) (async) mmap$usbmon(&(0x7f0000880000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x9) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) openat$tun(0xffffff9c, &(0x7f0000000000), 0xc001, 0x0) 261.916286ms ago: executing program 3 (id=2133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x482c3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_emit_ethernet(0x116, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xe0, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x14, '\x00', [@ra, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x96, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571"}]}]}}}}}}}, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x1, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x4000) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 228.608263ms ago: executing program 3 (id=2134): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0xa) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000580)=""/192, 0xc0}, {&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f00000006c0)=""/174, 0xae}], 0x4, &(0x7f00000007c0)=""/168, 0xa8}, 0x80}], 0x1, 0x3, 0x0) r3 = syz_ublk_setup_io_uring(0x1462, &(0x7f0000000300)={0x0, 0x6610, 0x4000, 0x3, 0xb5, 0x0, r0}, 0x0, &(0x7f0000000100), &(0x7f0000000180)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40605414, &(0x7f00000000c0)={0x2, 0x9, 0xffffffa1}) mmap$IORING_OFF_PBUF_RING(0x0, 0x37, 0x1, 0x10, r3, 0x82dd4939) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(0x0, 0x77) mlock(&(0x7f00001e6000/0x2000)=nil, 0x2000) syz_emit_ethernet(0x0, 0x0, 0x0) truncate(0x0, 0x900000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, 0x0) syslog(0x4, &(0x7f00000001c0)=""/90, 0x5a) 227.880934ms ago: executing program 5 (id=2135): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="4799", 0x2}], 0x1, 0x82e, 0x8001) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 0s ago: executing program 6 (id=2136): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1ff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, 0x0) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, 0x0, 0x1, 0x0, 0x1000000000000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x8f) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r3}, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYBLOB="fd7d0960881957e85bfaeeb2b54815e3c5a0a5f0bbea7ec8e7ac533cb665e9e26d64c172a22dc11634ce4ee73c30e16894c144380ccad37c851c50870d736ed58225529a957632"], 0x0, 0x0) kernel console output (not intermixed with test programs): 271] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 308.386749][T11271] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 308.386760][T11271] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.386769][T11271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.386779][T11271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 308.386789][T11271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.386812][T11271] [ 308.599380][T11276] Set syz0 is full, maxelem 0 reached [ 308.635063][T11277] Set syz0 is full, maxelem 0 reached [ 309.025313][T11279] jffs2: notice: (11279) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 309.296764][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1329'. [ 309.299835][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1329'. [ 309.318302][T11292] e1000e 0000:00:02.0 eth1: removed PHC [ 309.370787][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1329'. [ 309.471513][T11292] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 309.520177][ T1162] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 309.525162][ T1162] (NULL device *): queue 0 connect admin queue failed (-111). [ 309.528154][ T1162] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 309.531667][ T1162] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 309.563096][T11306] Set syz0 is full, maxelem 0 reached [ 309.745673][T11295] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 309.755061][T11295] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 310.263927][T11330] FAULT_INJECTION: forcing a failure. [ 310.263927][T11330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.270032][T11330] CPU: 2 UID: 0 PID: 11330 Comm: syz.6.1334 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.270063][T11330] Tainted: [L]=SOFTLOCKUP [ 310.270068][T11330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.270079][T11330] Call Trace: [ 310.270085][T11330] [ 310.270092][T11330] dump_stack_lvl+0x100/0x190 [ 310.270119][T11330] should_fail_ex.cold+0x5/0xa [ 310.270141][T11330] _copy_from_user+0x2e/0xd0 [ 310.270177][T11330] get_compat_msghdr+0xb3/0x480 [ 310.270197][T11330] ? __pfx_get_compat_msghdr+0x10/0x10 [ 310.270224][T11330] ___sys_sendmsg+0x1b6/0x1e0 [ 310.270248][T11330] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.270281][T11330] ? find_held_lock+0x2b/0x80 [ 310.270320][T11330] __sys_sendmsg+0x160/0x210 [ 310.270346][T11330] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.270378][T11330] ? __pfx_ksys_write+0x10/0x10 [ 310.270406][T11330] __do_fast_syscall_32+0xe7/0x970 [ 310.270432][T11330] ? lockdep_hardirqs_on+0x78/0x100 [ 310.270456][T11330] do_fast_syscall_32+0x32/0x70 [ 310.270480][T11330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.270502][T11330] RIP: 0023:0xf7f96fec [ 310.270522][T11330] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 310.270530][T11330] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 310.270549][T11330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002540 [ 310.270559][T11330] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.270569][T11330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.270579][T11330] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 310.270589][T11330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.270612][T11330] [ 310.372581][T11334] jffs2: notice: (11334) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 310.603626][T11347] Set syz0 is full, maxelem 0 reached [ 310.684601][T11354] 9p: p9: multiple sources not supported [ 311.067080][T11366] netlink: 62 bytes leftover after parsing attributes in process `syz.5.1339'. [ 311.071673][T11366] netlink: 62 bytes leftover after parsing attributes in process `syz.5.1339'. [ 311.536091][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1333'. [ 311.592418][ T9396] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 311.597713][ T9396] (NULL device *): queue 0 connect admin queue failed (-111). [ 311.608039][ T9396] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 311.618071][ T9396] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 311.759306][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 311.773492][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 311.780929][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 311.795574][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 311.971208][T11396] jffs2: notice: (11396) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 312.964999][T11403] netlink: 'syz.3.1349': attribute type 4 has an invalid length. [ 312.974528][T11403] netlink: 'syz.3.1349': attribute type 4 has an invalid length. [ 313.694713][T11434] syzkaller0: entered promiscuous mode [ 313.697546][T11434] syzkaller0: entered allmulticast mode [ 313.707597][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 313.712981][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 313.716288][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 313.720743][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 313.928947][T11439] jffs2: notice: (11439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 314.007637][T11443] FAULT_INJECTION: forcing a failure. [ 314.007637][T11443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.016758][T11443] CPU: 2 UID: 0 PID: 11443 Comm: syz.6.1361 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.016804][T11443] Tainted: [L]=SOFTLOCKUP [ 314.016812][T11443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.016823][T11443] Call Trace: [ 314.016833][T11443] [ 314.016840][T11443] dump_stack_lvl+0x100/0x190 [ 314.016868][T11443] should_fail_ex.cold+0x5/0xa [ 314.016891][T11443] _copy_from_user+0x2e/0xd0 [ 314.016920][T11443] get_compat_msghdr+0xb3/0x480 [ 314.016942][T11443] ? __pfx_get_compat_msghdr+0x10/0x10 [ 314.016969][T11443] ___sys_sendmsg+0x1b6/0x1e0 [ 314.016992][T11443] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.017025][T11443] ? find_held_lock+0x2b/0x80 [ 314.017063][T11443] __sys_sendmsg+0x160/0x210 [ 314.017088][T11443] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.017118][T11443] ? __pfx_ksys_write+0x10/0x10 [ 314.017147][T11443] __do_fast_syscall_32+0xe7/0x970 [ 314.017173][T11443] ? lockdep_hardirqs_on+0x78/0x100 [ 314.017198][T11443] do_fast_syscall_32+0x32/0x70 [ 314.017222][T11443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.017246][T11443] RIP: 0023:0xf7f96fec [ 314.017269][T11443] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 314.017277][T11443] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 314.017295][T11443] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 314.017306][T11443] RDX: 00000000000c4000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.017317][T11443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.017327][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.017337][T11443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.017360][T11443] [ 314.455475][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.475500][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.484465][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.889387][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.915501][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.923139][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.930809][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.937376][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.945928][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.954862][T11467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 315.369339][T11456] warning: `syz.6.1364' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.606929][T11491] jffs2: notice: (11491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 315.619835][ T34] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 315.695300][T11499] FAT-fs (nbd6): unable to read boot sector [ 315.700150][T11499] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1376'. [ 315.750180][ T9406] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 315.774619][ T9406] (NULL device *): queue 0 connect admin queue failed (-111). [ 315.779346][ T34] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.783600][ T9406] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 315.788817][ T34] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 315.792254][ T9406] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 315.796046][ T34] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.801107][ T34] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.809555][ T34] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.814141][ T34] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.817813][ T34] usb 10-1: Product: syz [ 315.819707][ T34] usb 10-1: Manufacturer: syz [ 315.830785][ T34] cdc_wdm 10-1:1.0: skipping garbage [ 315.833758][ T34] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 316.063085][ T1350] usb 10-1: USB disconnect, device number 6 [ 316.437014][T11544] jffs2: notice: (11544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 316.444765][T11543] Set syz0 is full, maxelem 0 reached [ 317.042755][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.045758][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.323407][T11609] jffs2: notice: (11609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 317.495072][T11623] veth0_to_batadv: entered allmulticast mode [ 317.504098][T11623] tipc: Started in network mode [ 317.505724][T11623] tipc: Node identity 5a4d6dbbb878, cluster identity 4711 [ 317.508204][T11623] tipc: Enabled bearer , priority 1 [ 317.552085][T11622] tipc: Disabling bearer [ 317.686761][T11632] FAULT_INJECTION: forcing a failure. [ 317.686761][T11632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.691706][T11632] CPU: 2 UID: 0 PID: 11632 Comm: syz.6.1398 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.691731][T11632] Tainted: [L]=SOFTLOCKUP [ 317.691736][T11632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.691745][T11632] Call Trace: [ 317.691750][T11632] [ 317.691756][T11632] dump_stack_lvl+0x100/0x190 [ 317.691778][T11632] should_fail_ex.cold+0x5/0xa [ 317.691796][T11632] _copy_from_user+0x2e/0xd0 [ 317.691820][T11632] get_compat_msghdr+0xb3/0x480 [ 317.691836][T11632] ? __pfx_get_compat_msghdr+0x10/0x10 [ 317.691857][T11632] ___sys_sendmsg+0x1b6/0x1e0 [ 317.691875][T11632] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.691901][T11632] ? find_held_lock+0x2b/0x80 [ 317.691931][T11632] __sys_sendmsg+0x160/0x210 [ 317.691951][T11632] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.691976][T11632] ? __pfx_ksys_write+0x10/0x10 [ 317.691996][T11632] __do_fast_syscall_32+0xe7/0x970 [ 317.692016][T11632] ? lockdep_hardirqs_on+0x78/0x100 [ 317.692035][T11632] do_fast_syscall_32+0x32/0x70 [ 317.692055][T11632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.692073][T11632] RIP: 0023:0xf7f96fec [ 317.692089][T11632] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 317.692096][T11632] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 317.692110][T11632] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 317.692119][T11632] RDX: 0000000000040090 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.692127][T11632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.692135][T11632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.692143][T11632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.692161][T11632] [ 317.829947][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 317.835411][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 317.838585][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 317.842832][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 318.220168][T11646] 9p: p9: multiple sources not supported [ 318.375840][T11648] 9p: p9: multiple sources not supported [ 318.489201][T11650] jffs2: notice: (11650) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 319.550790][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1412'. [ 319.588366][T11689] FAULT_INJECTION: forcing a failure. [ 319.588366][T11689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.595120][T11689] CPU: 3 UID: 0 PID: 11689 Comm: syz.5.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.595149][T11689] Tainted: [L]=SOFTLOCKUP [ 319.595156][T11689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.595166][T11689] Call Trace: [ 319.595172][T11689] [ 319.595179][T11689] dump_stack_lvl+0x100/0x190 [ 319.595204][T11689] should_fail_ex.cold+0x5/0xa [ 319.595224][T11689] _copy_from_user+0x2e/0xd0 [ 319.595253][T11689] get_compat_msghdr+0xb3/0x480 [ 319.595271][T11689] ? __pfx_get_compat_msghdr+0x10/0x10 [ 319.595297][T11689] ___sys_sendmsg+0x1b6/0x1e0 [ 319.595321][T11689] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.595352][T11689] ? find_held_lock+0x2b/0x80 [ 319.595389][T11689] __sys_sendmsg+0x160/0x210 [ 319.595443][T11689] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.595475][T11689] ? __pfx_ksys_write+0x10/0x10 [ 319.595498][T11689] __do_fast_syscall_32+0xe7/0x970 [ 319.595523][T11689] ? lockdep_hardirqs_on+0x78/0x100 [ 319.595547][T11689] do_fast_syscall_32+0x32/0x70 [ 319.595572][T11689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.595595][T11689] RIP: 0023:0xf708efec [ 319.595615][T11689] Code: Unable to access opcode bytes at 0xf708efc2. [ 319.595623][T11689] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 319.595641][T11689] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000b80 [ 319.595652][T11689] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.595662][T11689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.595671][T11689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.595681][T11689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.595704][T11689] [ 319.670558][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 319.670575][ T42] audit: type=1804 audit(1786029196.160:1099): pid=11680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1413" name="/newroot/108/file0" dev="tmpfs" ino=630 res=1 errno=0 [ 319.693330][T11699] jffs2: notice: (11699) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 319.814384][T11710] Set syz0 is full, maxelem 0 reached [ 319.919748][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 319.924249][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 319.927053][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 319.930184][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 319.977706][T11717] FAULT_INJECTION: forcing a failure. [ 319.977706][T11717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.987194][T11717] CPU: 2 UID: 0 PID: 11717 Comm: syz.5.1423 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.987225][T11717] Tainted: [L]=SOFTLOCKUP [ 319.987231][T11717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.987241][T11717] Call Trace: [ 319.987248][T11717] [ 319.987255][T11717] dump_stack_lvl+0x100/0x190 [ 319.987283][T11717] should_fail_ex.cold+0x5/0xa [ 319.987305][T11717] _copy_from_user+0x2e/0xd0 [ 319.987331][T11717] get_compat_msghdr+0xb3/0x480 [ 319.987351][T11717] ? __pfx_get_compat_msghdr+0x10/0x10 [ 319.987377][T11717] ___sys_sendmsg+0x1b6/0x1e0 [ 319.987400][T11717] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.987462][T11717] ? find_held_lock+0x2b/0x80 [ 319.987503][T11717] __sys_sendmsg+0x160/0x210 [ 319.987531][T11717] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.987565][T11717] ? __pfx_ksys_write+0x10/0x10 [ 319.987589][T11717] __do_fast_syscall_32+0xe7/0x970 [ 319.987614][T11717] ? lockdep_hardirqs_on+0x78/0x100 [ 319.987639][T11717] do_fast_syscall_32+0x32/0x70 [ 319.987664][T11717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.987687][T11717] RIP: 0023:0xf708efec [ 319.987708][T11717] Code: Unable to access opcode bytes at 0xf708efc2. [ 319.987716][T11717] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 319.987735][T11717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 319.987746][T11717] RDX: 0000000000040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.987757][T11717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.987767][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.987777][T11717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.987808][T11717] [ 320.103081][T11721] No source specified [ 320.139013][T11722] Set syz0 is full, maxelem 0 reached [ 320.525243][T11730] FAULT_INJECTION: forcing a failure. [ 320.525243][T11730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.529795][T11730] CPU: 3 UID: 0 PID: 11730 Comm: syz.5.1428 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.529823][T11730] Tainted: [L]=SOFTLOCKUP [ 320.529829][T11730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.529839][T11730] Call Trace: [ 320.529844][T11730] [ 320.529851][T11730] dump_stack_lvl+0x100/0x190 [ 320.529877][T11730] should_fail_ex.cold+0x5/0xa [ 320.529897][T11730] _copy_from_user+0x2e/0xd0 [ 320.529927][T11730] get_compat_msghdr+0xb3/0x480 [ 320.529949][T11730] ? __pfx_get_compat_msghdr+0x10/0x10 [ 320.529973][T11730] ___sys_sendmsg+0x1b6/0x1e0 [ 320.529996][T11730] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.530026][T11730] ? find_held_lock+0x2b/0x80 [ 320.530064][T11730] __sys_sendmsg+0x160/0x210 [ 320.530090][T11730] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.530112][T11730] ? __pfx_ksys_write+0x10/0x10 [ 320.530125][T11730] __do_fast_syscall_32+0xe7/0x970 [ 320.530142][T11730] ? lockdep_hardirqs_on+0x78/0x100 [ 320.530158][T11730] do_fast_syscall_32+0x32/0x70 [ 320.530174][T11730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.530189][T11730] RIP: 0023:0xf708efec [ 320.530203][T11730] Code: Unable to access opcode bytes at 0xf708efc2. [ 320.530214][T11730] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 320.530226][T11730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 320.530232][T11730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.530239][T11730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.530245][T11730] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.530251][T11730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.530265][T11730] [ 320.643816][T11732] syzkaller0: entered promiscuous mode [ 320.645750][T11732] syzkaller0: entered allmulticast mode [ 320.950968][T11755] jffs2: notice: (11755) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 321.179851][T11771] jffs2: notice: (11771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 321.450557][T11783] Set syz0 is full, maxelem 0 reached [ 321.656632][T11788] jffs2: notice: (11788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 321.763052][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1447'. [ 322.000996][ T1162] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 322.005148][ T1162] (NULL device *): queue 0 connect admin queue failed (-111). [ 322.007727][ T1162] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 322.010715][ T1162] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 322.174619][T11805] 9p: p9: multiple sources not supported [ 322.289177][T11813] No source specified [ 322.584890][T11827] FAULT_INJECTION: forcing a failure. [ 322.584890][T11827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.594562][T11827] CPU: 1 UID: 0 PID: 11827 Comm: syz.5.1456 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.594597][T11827] Tainted: [L]=SOFTLOCKUP [ 322.594605][T11827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.594618][T11827] Call Trace: [ 322.594627][T11827] [ 322.594635][T11827] dump_stack_lvl+0x100/0x190 [ 322.594665][T11827] should_fail_ex.cold+0x5/0xa [ 322.594691][T11827] _copy_from_iter+0x1f4/0x1690 [ 322.594727][T11827] ? __lock_acquire+0x49f/0x1a40 [ 322.594763][T11827] ? __pfx__copy_from_iter+0x10/0x10 [ 322.594796][T11827] ? _parse_integer_limit+0x1ac/0x220 [ 322.594830][T11827] tun_get_user+0x3ba/0x3c20 [ 322.594916][T11827] ? __pfx_tun_get_user+0x10/0x10 [ 322.594944][T11827] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 322.594978][T11827] ? find_held_lock+0x2b/0x80 [ 322.595003][T11827] ? tun_get+0x191/0x370 [ 322.595025][T11827] ? tun_get+0x191/0x370 [ 322.595054][T11827] tun_chr_write_iter+0xdc/0x200 [ 322.595082][T11827] vfs_write+0x6ac/0x1050 [ 322.595103][T11827] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 322.595152][T11827] ? __pfx_vfs_write+0x10/0x10 [ 322.595170][T11827] ? find_held_lock+0x2b/0x80 [ 322.595222][T11827] ksys_write+0x12a/0x250 [ 322.595243][T11827] ? __pfx_ksys_write+0x10/0x10 [ 322.595261][T11827] ? ksys_write+0x1ac/0x250 [ 322.595279][T11827] ? __pfx_ksys_write+0x10/0x10 [ 322.595304][T11827] __do_fast_syscall_32+0xe7/0x970 [ 322.595333][T11827] ? lockdep_hardirqs_on+0x78/0x100 [ 322.595360][T11827] do_fast_syscall_32+0x32/0x70 [ 322.595389][T11827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.595437][T11827] RIP: 0023:0xf708efec [ 322.595461][T11827] Code: Unable to access opcode bytes at 0xf708efc2. [ 322.595471][T11827] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 322.595490][T11827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 322.595502][T11827] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000 [ 322.595514][T11827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.595525][T11827] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.595536][T11827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.595559][T11827] [ 322.870509][T11834] Set syz0 is full, maxelem 0 reached [ 322.987035][T11837] Set syz0 is full, maxelem 0 reached [ 323.131528][T11840] 9p: p9: multiple sources not supported [ 323.691821][T11856] 9p: p9: multiple sources not supported [ 324.075826][ T9395] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 324.091632][ T9395] (NULL device *): queue 0 connect admin queue failed (-111). [ 324.094291][ T9395] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 324.096697][ T9395] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 324.459740][T11870] 9p: Bad value for 'rfdno' [ 324.494191][T11870] overlayfs: failed to clone upperpath [ 324.605413][T11872] jffs2: notice: (11872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 324.824543][T11878] pim6reg: entered allmulticast mode [ 325.120482][T11890] Set syz0 is full, maxelem 0 reached [ 325.443265][T11895] FAULT_INJECTION: forcing a failure. [ 325.443265][T11895] name failslab, interval 1, probability 0, space 0, times 0 [ 325.447584][T11895] CPU: 3 UID: 0 PID: 11895 Comm: syz.5.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.447602][T11895] Tainted: [L]=SOFTLOCKUP [ 325.447606][T11895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.447613][T11895] Call Trace: [ 325.447617][T11895] [ 325.447622][T11895] dump_stack_lvl+0x100/0x190 [ 325.447641][T11895] should_fail_ex.cold+0x5/0xa [ 325.447655][T11895] should_failslab+0xc2/0x120 [ 325.447671][T11895] __kmalloc_cache_noprof+0x91/0x6c0 [ 325.447685][T11895] ? io_uring_setup.cold+0x6c/0x1c2e [ 325.447703][T11895] io_uring_setup.cold+0x6c/0x1c2e [ 325.447720][T11895] ? rcu_read_lock_any_held+0x6a/0xa0 [ 325.447737][T11895] ? find_held_lock+0x2b/0x80 [ 325.447752][T11895] ? __pfx_io_uring_setup+0x10/0x10 [ 325.447765][T11895] ? ksys_write+0x190/0x250 [ 325.447778][T11895] ? __mutex_unlock_slowpath+0x35d/0x930 [ 325.447801][T11895] ? fput+0x79/0x100 [ 325.447813][T11895] ? ksys_write+0x1ac/0x250 [ 325.447823][T11895] ? __pfx_ksys_write+0x10/0x10 [ 325.447835][T11895] __ia32_sys_io_uring_setup+0xc2/0x170 [ 325.447849][T11895] __do_fast_syscall_32+0xe7/0x970 [ 325.447865][T11895] ? lockdep_hardirqs_on+0x78/0x100 [ 325.447880][T11895] do_fast_syscall_32+0x32/0x70 [ 325.447896][T11895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.447910][T11895] RIP: 0023:0xf708efec [ 325.447924][T11895] Code: Unable to access opcode bytes at 0xf708efc2. [ 325.447929][T11895] RSP: 002b:00000000f547d43c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 325.447940][T11895] RAX: ffffffffffffffda RBX: 0000000000000c41 RCX: 0000000080000808 [ 325.447947][T11895] RDX: 0000000014a3c200 RSI: 00000000f7457ff4 RDI: 000000000000000a [ 325.447953][T11895] RBP: 00000000f547d4fc R08: 0000000000000000 R09: 0000000000000000 [ 325.447960][T11895] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 325.447966][T11895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.447980][T11895] [ 325.467406][T11900] FAULT_INJECTION: forcing a failure. [ 325.467406][T11900] name fail_futex, interval 1, probability 0, space 0, times 1 [ 325.521201][T11900] CPU: 2 UID: 0 PID: 11900 Comm: syz.6.1476 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.521220][T11900] Tainted: [L]=SOFTLOCKUP [ 325.521229][T11900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.521236][T11900] Call Trace: [ 325.521240][T11900] [ 325.521245][T11900] dump_stack_lvl+0x100/0x190 [ 325.521263][T11900] should_fail_ex.cold+0x5/0xa [ 325.521276][T11900] get_futex_key+0x295/0x14f0 [ 325.521292][T11900] ? __pfx_get_futex_key+0x10/0x10 [ 325.521302][T11900] ? __lock_acquire+0x49f/0x1a40 [ 325.521321][T11900] ? _parse_integer_limit+0x1ac/0x220 [ 325.521339][T11900] futex_wait_requeue_pi+0x207/0x8a0 [ 325.521356][T11900] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 325.521386][T11900] ? __pfx_futex_wake_mark+0x10/0x10 [ 325.521404][T11900] ? rcu_read_lock_any_held+0x6a/0xa0 [ 325.521419][T11900] ? find_held_lock+0x2b/0x80 [ 325.521434][T11900] do_futex+0x414/0x440 [ 325.521447][T11900] ? __pfx_do_futex+0x10/0x10 [ 325.521458][T11900] ? __mutex_unlock_slowpath+0x35d/0x930 [ 325.521478][T11900] __ia32_sys_futex_time32+0x2f4/0x470 [ 325.521494][T11900] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 325.521507][T11900] ? fput+0x79/0x100 [ 325.521521][T11900] ? ksys_write+0x1ac/0x250 [ 325.521531][T11900] ? __pfx_ksys_write+0x10/0x10 [ 325.521544][T11900] __do_fast_syscall_32+0xe7/0x970 [ 325.521560][T11900] ? lockdep_hardirqs_on+0x78/0x100 [ 325.521581][T11900] do_fast_syscall_32+0x32/0x70 [ 325.521601][T11900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.521621][T11900] RIP: 0023:0xf7f96fec [ 325.521639][T11900] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 325.521645][T11900] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 325.521656][T11900] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 000000000000000b [ 325.521663][T11900] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000080048000 [ 325.521670][T11900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.521676][T11900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 325.521682][T11900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.521695][T11900] [ 326.149955][ T9399] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 326.156833][ T9399] (NULL device *): queue 0 connect admin queue failed (-111). [ 326.161208][ T9399] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 326.164918][ T9399] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 326.550893][T11936] 9p: p9: multiple sources not supported [ 327.280398][T11938] geneve2: entered allmulticast mode [ 327.756462][T11941] No source specified [ 327.822601][T11943] syzkaller0: entered promiscuous mode [ 327.824872][T11943] syzkaller0: entered allmulticast mode [ 327.869956][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 328.223288][T11952] syzkaller0: entered promiscuous mode [ 328.225647][T11952] syzkaller0: entered allmulticast mode [ 328.235809][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 328.242305][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 328.245099][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 328.247814][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 328.885570][T11983] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1495'. [ 328.932251][T11986] 9p: p9: multiple sources not supported [ 329.079741][ T5849] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 329.230596][ T5849] usb 10-1: Using ep0 maxpacket: 32 [ 329.234477][ T5849] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 329.238151][ T5849] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 329.242802][ T5849] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 329.247077][ T5849] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 329.251798][ T5849] usb 10-1: config 0 interface 0 has no altsetting 0 [ 329.255668][ T5849] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 329.258750][ T5849] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 329.261647][ T5849] usb 10-1: Product: syz [ 329.263099][ T5849] usb 10-1: Manufacturer: syz [ 329.264981][ T5849] usb 10-1: SerialNumber: syz [ 329.269198][ T5849] usb 10-1: config 0 descriptor?? [ 329.273769][ T5849] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 329.279392][ T5849] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 329.605695][ T5849] usb 10-1: USB disconnect, device number 7 [ 329.605754][ C2] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 329.619552][T11968] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 329.626542][T11982] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 329.649949][ T5849] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 329.724417][T11990] jffs2: notice: (11990) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 330.085062][T12007] jffs2: notice: (12007) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 330.165411][T12014] FAULT_INJECTION: forcing a failure. [ 330.165411][T12014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.171184][T12014] CPU: 3 UID: 0 PID: 12014 Comm: syz.6.1505 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.171211][T12014] Tainted: [L]=SOFTLOCKUP [ 330.171216][T12014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.171226][T12014] Call Trace: [ 330.171233][T12014] [ 330.171240][T12014] dump_stack_lvl+0x100/0x190 [ 330.171264][T12014] should_fail_ex.cold+0x5/0xa [ 330.171280][T12014] _copy_from_iter+0x1f4/0x1690 [ 330.171302][T12014] ? __asan_memset+0x23/0x50 [ 330.171315][T12014] ? __pfx__copy_from_iter+0x10/0x10 [ 330.171333][T12014] ? __pfx___alloc_skb+0x10/0x10 [ 330.171354][T12014] netlink_sendmsg+0x808/0xda0 [ 330.171396][T12014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.171410][T12014] ? apparmor_socket_sendmsg+0x15b/0x270 [ 330.171427][T12014] ____sys_sendmsg+0xa4d/0xbe0 [ 330.171439][T12014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.171452][T12014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.171470][T12014] ___sys_sendmsg+0x190/0x1e0 [ 330.171483][T12014] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.171502][T12014] ? find_held_lock+0x2b/0x80 [ 330.171524][T12014] __sys_sendmsg+0x160/0x210 [ 330.171544][T12014] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.171565][T12014] ? __pfx_ksys_write+0x10/0x10 [ 330.171586][T12014] __do_fast_syscall_32+0xe7/0x970 [ 330.171609][T12014] ? lockdep_hardirqs_on+0x78/0x100 [ 330.171633][T12014] do_fast_syscall_32+0x32/0x70 [ 330.171658][T12014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.171681][T12014] RIP: 0023:0xf7f96fec [ 330.171701][T12014] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 330.171710][T12014] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 330.171727][T12014] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 330.171738][T12014] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.171748][T12014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.171758][T12014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 330.171768][T12014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.171791][T12014] [ 330.263470][ T42] audit: type=1326 audit(1786029206.800:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 330.271564][ T42] audit: type=1326 audit(1786029206.800:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 330.278398][ T42] audit: type=1326 audit(1786029206.810:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 330.286185][ T42] audit: type=1326 audit(1786029206.810:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 330.309891][ T9399] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 330.318242][ T9399] (NULL device *): queue 0 connect admin queue failed (-111). [ 330.325066][ T9399] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 330.328212][ T9399] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 330.328527][ T42] audit: type=1326 audit(1786029206.870:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 330.345501][ T42] audit: type=1326 audit(1786029206.870:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 330.351222][T12024] jffs2: notice: (12024) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 330.354631][ T42] audit: type=1326 audit(1786029206.890:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71074eb code=0x7ffc0000 [ 330.369461][ T42] audit: type=1326 audit(1786029206.900:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 330.380633][ T42] audit: type=1326 audit(1786029206.910:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 330.394993][ T42] audit: type=1326 audit(1786029206.920:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.3.1502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 331.060389][T12034] 9p: p9: multiple sources not supported [ 331.754659][T12051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.009838][ T5849] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 332.012269][T12060] jffs2: notice: (12060) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 332.149895][ T5849] usb 10-1: device descriptor read/64, error -71 [ 332.177876][T12064] Set syz0 is full, maxelem 0 reached [ 332.262947][T12066] jffs2: notice: (12066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 332.391055][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 332.396571][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 332.400084][ T5849] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 332.403503][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 332.407059][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 332.539914][ T5849] usb 10-1: device descriptor read/64, error -71 [ 332.649976][ T5849] usb usb10-port1: attempt power cycle [ 332.824845][T12074] CIFS mount error: No usable UNC path provided in device string! [ 332.824845][T12074] [ 332.829040][T12074] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 332.989806][ T5849] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 333.008568][T12077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.011122][ T5849] usb 10-1: device descriptor read/8, error -71 [ 333.249779][ T5849] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 333.271483][ T5849] usb 10-1: device descriptor read/8, error -71 [ 333.382488][ T5849] usb usb10-port1: unable to enumerate USB device [ 333.544688][T12100] jffs2: notice: (12100) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 333.598563][T12104] tc_dump_action: action bad kind [ 333.603811][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 333.607788][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1529'. [ 333.623263][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 333.626951][T12104] bridge_slave_1: left allmulticast mode [ 333.629253][T12104] bridge_slave_1: left promiscuous mode [ 333.632198][T12104] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.638705][T12104] bridge_slave_0: left allmulticast mode [ 333.640871][T12104] bridge_slave_0: left promiscuous mode [ 333.643068][T12104] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.656948][T12109] Set syz0 is full, maxelem 0 reached [ 334.166130][T12126] 9p: p9: multiple sources not supported [ 334.200180][T12125] CIFS mount error: No usable UNC path provided in device string! [ 334.200180][T12125] [ 334.206761][T12125] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 334.469835][ T105] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 334.478192][ T105] (NULL device *): queue 0 connect admin queue failed (-111). [ 334.482556][ T105] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 334.485967][ T105] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 334.871586][T12132] CIFS mount error: No usable UNC path provided in device string! [ 334.871586][T12132] [ 334.876058][T12132] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 335.389764][T12153] jffs2: notice: (12153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 335.647768][T12175] Set syz0 is full, maxelem 0 reached [ 335.721232][T12173] cgroup: Unknown subsys name 'rlimit' [ 335.930233][T12193] 9p: Bad value for 'rfdno' [ 337.055524][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 337.061219][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 337.067721][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 337.071123][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 337.096803][T12208] CIFS mount error: No usable UNC path provided in device string! [ 337.096803][T12208] [ 337.100758][T12208] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 337.616466][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 337.647140][T12232] vlan2: entered promiscuous mode [ 337.649389][T12232] hsr0: entered promiscuous mode [ 337.652779][T12232] vlan2: entered allmulticast mode [ 337.654910][T12232] hsr0: entered allmulticast mode [ 337.656994][T12232] hsr_slave_0: entered allmulticast mode [ 337.659320][T12232] hsr_slave_1: entered allmulticast mode [ 337.666332][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 337.670670][T12232] hsr_slave_0: left promiscuous mode [ 337.678968][T12232] hsr_slave_1: left promiscuous mode [ 339.107259][T12281] No source specified [ 339.113359][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 339.127660][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 339.138391][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 339.147955][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 339.175559][T12284] jffs2: notice: (12284) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 339.233769][T12288] syzkaller0: entered promiscuous mode [ 339.236135][T12288] syzkaller0: entered allmulticast mode [ 339.424123][ T42] kauditd_printk_skb: 107 callbacks suppressed [ 339.424138][ T42] audit: type=1326 audit(1786029215.960:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.434676][T12295] FAULT_INJECTION: forcing a failure. [ 339.434676][T12295] name failslab, interval 1, probability 0, space 0, times 0 [ 339.438789][T12295] CPU: 3 UID: 0 PID: 12295 Comm: syz.6.1582 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.438808][T12295] Tainted: [L]=SOFTLOCKUP [ 339.438812][T12295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.438819][T12295] Call Trace: [ 339.438824][T12295] [ 339.438828][T12295] dump_stack_lvl+0x100/0x190 [ 339.438845][T12295] should_fail_ex.cold+0x5/0xa [ 339.438859][T12295] should_failslab+0xc2/0x120 [ 339.438876][T12295] __kmalloc_noprof+0xfc/0x820 [ 339.438891][T12295] ? aa_label_asxprint+0x75/0x130 [ 339.438907][T12295] aa_label_asxprint+0x75/0x130 [ 339.438922][T12295] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 339.438941][T12295] security_lsmprop_to_secctx+0x146/0x1a0 [ 339.438964][T12295] audit_log_subj_ctx+0x34f/0x460 [ 339.438980][T12295] ? map_id_range_up+0x2ce/0x3b0 [ 339.438996][T12295] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 339.439012][T12295] ? audit_log_format+0xe8/0x130 [ 339.439025][T12295] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 339.439041][T12295] audit_log_task_context+0x88/0xb0 [ 339.439055][T12295] ? __pfx_audit_log_task_context+0x10/0x10 [ 339.439072][T12295] audit_log_task+0x1b7/0x3a0 [ 339.439089][T12295] ? __pfx_audit_log_task+0x10/0x10 [ 339.439106][T12295] ? rcu_read_lock_any_held+0x6a/0xa0 [ 339.439121][T12295] ? find_held_lock+0x2b/0x80 [ 339.439137][T12295] audit_seccomp+0x79/0x190 [ 339.439151][T12295] __seccomp_filter+0x896/0x1140 [ 339.439165][T12295] ? __pfx___seccomp_filter+0x10/0x10 [ 339.439180][T12295] ? fput+0x79/0x100 [ 339.439193][T12295] ? ksys_write+0x1ac/0x250 [ 339.439205][T12295] __secure_computing+0x204/0x2c0 [ 339.439224][T12295] __do_fast_syscall_32+0x460/0x970 [ 339.439242][T12295] ? lockdep_hardirqs_on+0x78/0x100 [ 339.439257][T12295] do_fast_syscall_32+0x32/0x70 [ 339.439273][T12295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.439288][T12295] RIP: 0023:0xf7f96fec [ 339.439302][T12295] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 339.439308][T12295] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 339.439339][T12295] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000240 [ 339.439348][T12295] RDX: 0000000080000000 RSI: 0000000000000002 RDI: 0000000080000300 [ 339.439355][T12295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.439361][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.439367][T12295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.439381][T12295] [ 339.439387][T12295] audit: error in audit_log_subj_ctx [ 339.447949][T12285] 9p: p9: multiple sources not supported [ 339.448488][ T42] audit: type=1326 audit(1786029215.970:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.448516][ T42] audit: type=1326 audit(1786029215.970:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.540065][ T42] audit: type=1326 audit(1786029215.970:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.547595][ T42] audit: type=1326 audit(1786029215.970:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.554530][ T42] audit: type=1326 audit(1786029215.970:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.562157][ T42] audit: type=1326 audit(1786029215.970:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.569035][ T42] audit: type=1326 audit(1786029215.970:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.575993][ T42] audit: type=1326 audit(1786029215.970:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.6.1582" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 339.681822][T12300] Set syz0 is full, maxelem 0 reached [ 340.141876][T12305] Set syz0 is full, maxelem 0 reached [ 340.295195][T12310] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 340.297665][T12310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.303725][T12310] vhci_hcd vhci_hcd.0: Device attached [ 340.306850][T12311] usbip_core: unknown command [ 340.308845][T12311] vhci_hcd: unknown pdu 0 [ 340.308857][T12311] usbip_core: unknown command [ 340.313598][ T5895] vhci_hcd vhci_hcd.6: stop threads [ 340.313625][ T5895] vhci_hcd vhci_hcd.6: release socket [ 340.313644][ T5895] vhci_hcd vhci_hcd.6: disconnect device [ 340.329972][T12310] netlink: 'syz.6.1587': attribute type 1 has an invalid length. [ 340.345371][T12310] bond1: option mode: invalid value (19) [ 340.348966][T12310] bond1 (unregistering): Released all slaves [ 340.387175][T12314] : renamed from dummy0 [ 340.557143][T12317] Set syz0 is full, maxelem 0 reached [ 340.944503][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.034742][T12322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.177491][T12326] 9p: p9: multiple sources not supported [ 341.190094][ T9399] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 341.195012][ T9399] (NULL device *): queue 0 connect admin queue failed (-111). [ 341.198058][ T9399] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 341.201275][ T9399] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 341.299779][ T5851] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 341.433012][ T5851] usb 11-1: device descriptor read/64, error -71 [ 341.679988][ T5851] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 341.809813][ T5851] usb 11-1: device descriptor read/64, error -71 [ 341.920236][ T5851] usb usb11-port1: attempt power cycle [ 342.289962][ T5851] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 342.311713][ T5851] usb 11-1: device descriptor read/8, error -71 [ 342.529461][T12341] Set syz0 is full, maxelem 0 reached [ 342.559889][ T5851] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 342.580950][ T5851] usb 11-1: device descriptor read/8, error -71 [ 342.703778][ T5851] usb usb11-port1: unable to enumerate USB device [ 343.047569][T12351] sit1: entered promiscuous mode [ 343.093422][T12353] jffs2: notice: (12353) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 343.112212][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1600'. [ 343.269836][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 343.279038][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 343.282834][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 343.286572][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 344.163259][T12381] syzkaller0: entered promiscuous mode [ 344.165914][T12381] syzkaller0: entered allmulticast mode [ 344.729575][T12375] syz.5.1605 (12375) used greatest stack depth: 18832 bytes left [ 344.929187][T12411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.352253][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 345.374347][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 345.379328][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 345.383996][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 346.565568][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 346.614776][T12440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.621919][T12440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.079555][T12440] geneve2: left allmulticast mode [ 347.082127][T12440] sit1: left promiscuous mode [ 347.089757][ T5820] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.092858][ T5820] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.229774][ T5895] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.232819][ T5895] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.432303][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 347.445121][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 347.448433][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 347.455027][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 347.521448][T12463] FAULT_INJECTION: forcing a failure. [ 347.521448][T12463] name failslab, interval 1, probability 0, space 0, times 0 [ 347.528769][T12463] CPU: 1 UID: 0 PID: 12463 Comm: syz.6.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.528796][T12463] Tainted: [L]=SOFTLOCKUP [ 347.528803][T12463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.528812][T12463] Call Trace: [ 347.528820][T12463] [ 347.528827][T12463] dump_stack_lvl+0x100/0x190 [ 347.528852][T12463] should_fail_ex.cold+0x5/0xa [ 347.528872][T12463] should_failslab+0xc2/0x120 [ 347.528895][T12463] __kmalloc_cache_noprof+0x91/0x6c0 [ 347.528913][T12463] ? wakeup_source_register+0x4c/0x3e0 [ 347.528973][T12463] wakeup_source_register+0x4c/0x3e0 [ 347.529004][T12463] ep_create_wakeup_source+0x1df/0x2e0 [ 347.529025][T12463] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 347.529045][T12463] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 347.529063][T12463] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 347.529086][T12463] do_epoll_ctl_file+0x1e26/0x36e0 [ 347.529112][T12463] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 347.529132][T12463] ? find_held_lock+0x2b/0x80 [ 347.529153][T12463] ? __fget_files+0x215/0x3d0 [ 347.529173][T12463] ? __fget_files+0x21f/0x3d0 [ 347.529193][T12463] ? do_epoll_ctl+0xfd/0x1a0 [ 347.529209][T12463] do_epoll_ctl+0xfd/0x1a0 [ 347.529228][T12463] ? __pfx_do_epoll_ctl+0x10/0x10 [ 347.529253][T12463] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 347.529274][T12463] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 347.529292][T12463] ? ksys_write+0x1ac/0x250 [ 347.529308][T12463] ? __pfx_ksys_write+0x10/0x10 [ 347.529328][T12463] __do_fast_syscall_32+0xe7/0x970 [ 347.529351][T12463] ? lockdep_hardirqs_on+0x78/0x100 [ 347.529374][T12463] do_fast_syscall_32+0x32/0x70 [ 347.529396][T12463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.529417][T12463] RIP: 0023:0xf7f96fec [ 347.529438][T12463] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 347.529446][T12463] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 347.529462][T12463] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 347.529472][T12463] RDX: 0000000000000003 RSI: 0000000080000500 RDI: 0000000000000000 [ 347.529481][T12463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.529490][T12463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.529499][T12463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.529522][T12463] [ 348.127119][T12478] fuse: Bad value for 'fd' [ 349.520960][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 349.525478][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 349.527980][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 349.531192][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 349.711609][T12487] 9p: p9: multiple sources not supported [ 349.924406][T12501] 9p: p9: multiple sources not supported [ 350.246693][T12506] FAULT_INJECTION: forcing a failure. [ 350.246693][T12506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.251163][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.5.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.251182][T12506] Tainted: [L]=SOFTLOCKUP [ 350.251186][T12506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.251192][T12506] Call Trace: [ 350.251197][T12506] [ 350.251202][T12506] dump_stack_lvl+0x100/0x190 [ 350.251221][T12506] should_fail_ex.cold+0x5/0xa [ 350.251235][T12506] _copy_to_user+0x32/0xd0 [ 350.251256][T12506] simple_read_from_buffer+0xcb/0x170 [ 350.251298][T12506] proc_fail_nth_read+0x1af/0x230 [ 350.251316][T12506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.251332][T12506] ? rw_verify_area+0xce/0x6d0 [ 350.251348][T12506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.251363][T12506] vfs_read+0x1e4/0xb40 [ 350.251375][T12506] ? __pfx_vfs_read+0x10/0x10 [ 350.251385][T12506] ? find_held_lock+0x2b/0x80 [ 350.251399][T12506] ? __fget_files+0x215/0x3d0 [ 350.251412][T12506] ? __fget_files+0x21f/0x3d0 [ 350.251426][T12506] ksys_read+0x12a/0x250 [ 350.251436][T12506] ? __pfx_ksys_read+0x10/0x10 [ 350.251450][T12506] do_int80_emulation+0x14b/0x720 [ 350.251469][T12506] asm_int80_emulation+0x1a/0x20 [ 350.251481][T12506] RIP: 0023:0xf71c74eb [ 350.251491][T12506] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 350.251503][T12506] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 350.251514][T12506] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f547d5d0 [ 350.251521][T12506] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 350.251528][T12506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.251534][T12506] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.251540][T12506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.251554][T12506] [ 350.759896][T12519] CIFS mount error: No usable UNC path provided in device string! [ 350.759896][T12519] [ 350.774739][T12519] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 351.386660][T12534] FAULT_INJECTION: forcing a failure. [ 351.386660][T12534] name failslab, interval 1, probability 0, space 0, times 0 [ 351.392551][T12534] CPU: 2 UID: 0 PID: 12534 Comm: syz.5.1651 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.392581][T12534] Tainted: [L]=SOFTLOCKUP [ 351.392587][T12534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.392604][T12534] Call Trace: [ 351.392612][T12534] [ 351.392619][T12534] dump_stack_lvl+0x100/0x190 [ 351.392646][T12534] should_fail_ex.cold+0x5/0xa [ 351.392685][T12534] should_failslab+0xc2/0x120 [ 351.392711][T12534] __kmalloc_noprof+0xfc/0x820 [ 351.392733][T12534] ? __lock_acquire+0x49f/0x1a40 [ 351.392759][T12534] ? comedi_alloc_devpriv+0x22/0x60 [ 351.392787][T12534] comedi_alloc_devpriv+0x22/0x60 [ 351.392808][T12534] pcm3724_attach+0x2a/0x270 [ 351.392831][T12534] ? lockdep_init_map_type+0x5c/0x250 [ 351.392852][T12534] comedi_device_attach+0x40e/0x6b0 [ 351.392880][T12534] do_devconfig_ioctl+0x1b3/0x6d0 [ 351.392904][T12534] ? comedi_unlocked_ioctl+0x180/0x3310 [ 351.392923][T12534] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 351.392959][T12534] ? tomoyo_path_number_perm+0x46d/0x580 [ 351.392984][T12534] ? kasan_save_stack+0x3f/0x50 [ 351.393005][T12534] ? kasan_save_stack+0x30/0x50 [ 351.393025][T12534] ? kasan_save_track+0x14/0x30 [ 351.393044][T12534] ? kasan_save_free_info+0x3b/0x70 [ 351.393065][T12534] comedi_unlocked_ioctl+0x860/0x3310 [ 351.393089][T12534] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 351.393126][T12534] ? kasan_quarantine_put+0x104/0x240 [ 351.393146][T12534] ? lockdep_hardirqs_on+0x78/0x100 [ 351.393172][T12534] ? find_held_lock+0x2b/0x80 [ 351.393193][T12534] ? tomoyo_path_number_perm+0x28f/0x580 [ 351.393216][T12534] ? tomoyo_path_number_perm+0x28f/0x580 [ 351.393242][T12534] ? tomoyo_path_number_perm+0x188/0x580 [ 351.393271][T12534] comedi_compat_ioctl+0x438/0xe20 [ 351.393290][T12534] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 351.393308][T12534] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.393335][T12534] ? do_vfs_ioctl+0x226/0x13e0 [ 351.393357][T12534] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 351.393385][T12534] ? find_held_lock+0x2b/0x80 [ 351.393403][T12534] ? __fget_files+0x215/0x3d0 [ 351.393418][T12534] ? hook_file_ioctl_common+0x140/0x440 [ 351.393445][T12534] ? __fget_files+0x21f/0x3d0 [ 351.393464][T12534] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 351.393479][T12534] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 351.393507][T12534] __do_fast_syscall_32+0xe7/0x970 [ 351.393531][T12534] ? lockdep_hardirqs_on+0x78/0x100 [ 351.393555][T12534] do_fast_syscall_32+0x32/0x70 [ 351.393579][T12534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.393608][T12534] RIP: 0023:0xf708efec [ 351.393632][T12534] Code: Unable to access opcode bytes at 0xf708efc2. [ 351.393641][T12534] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 351.393659][T12534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 351.393670][T12534] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.393680][T12534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.393690][T12534] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 351.393700][T12534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.393720][T12534] [ 351.564405][ T41] libceph: connect (1)[c::]:6789 error -101 [ 351.566573][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 351.589841][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 351.596942][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 351.600852][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 351.604100][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 351.756849][T12542] dvmrp0: entered allmulticast mode [ 351.832319][ T41] libceph: connect (1)[c::]:6789 error -101 [ 351.835382][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 352.340046][ T41] libceph: connect (1)[c::]:6789 error -101 [ 352.344729][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 352.356062][T12554] CIFS mount error: No usable UNC path provided in device string! [ 352.356062][T12554] [ 352.360500][T12554] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 352.391244][T12536] ceph: No mds server is up or the cluster is laggy [ 352.505357][T12558] syzkaller0: entered promiscuous mode [ 352.507727][T12558] syzkaller0: entered allmulticast mode [ 352.894457][T12567] tmpfs: Bad value for 'mpol' [ 352.949758][ T41] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 353.100014][ T41] usb 10-1: Using ep0 maxpacket: 16 [ 353.106594][ T41] usb 10-1: config 0 has no interfaces? [ 353.113266][ T41] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 353.119714][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.126257][ T41] usb 10-1: Product: syz [ 353.127713][ T41] usb 10-1: Manufacturer: syz [ 353.136474][ T41] usb 10-1: SerialNumber: syz [ 353.142634][ T41] usb 10-1: config 0 descriptor?? [ 353.168644][ T5742] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 353.209501][T12586] Set syz0 is full, maxelem 0 reached [ 353.262079][T12590] jffs2: notice: (12590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 353.351304][ T5851] usb 10-1: USB disconnect, device number 12 [ 353.670645][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 353.679805][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 353.682342][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 353.684820][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 353.843790][T12605] 9p: p9: multiple sources not supported [ 354.319166][T12607] 9p: p9: multiple sources not supported [ 354.657593][T12626] 9p: p9: multiple sources not supported [ 355.646251][T12656] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2761322500 (353449280000 ns) > initial count (313845741312 ns). Using initial count to start timer. [ 355.750174][ T105] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 355.757779][ T105] (NULL device *): queue 0 connect admin queue failed (-111). [ 355.760623][ T105] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 355.763460][ T105] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 356.251206][T12681] 9p: p9: multiple sources not supported [ 357.200901][ T5742] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 357.205256][ T5742] Bluetooth: hci4: Injecting HCI hardware error event [ 357.210419][ T5742] Bluetooth: hci4: hardware error 0x00 [ 357.538153][T12708] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 357.836489][T12712] 9p: p9: multiple sources not supported [ 357.843381][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 357.848438][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 357.851439][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 357.854054][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 358.539166][T12726] 9p: p9: multiple sources not supported [ 358.742767][T12730] 9p: p9: multiple sources not supported [ 359.269777][ T5742] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 359.362015][T12739] FAULT_INJECTION: forcing a failure. [ 359.362015][T12739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.366981][T12740] jffs2: notice: (12740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 359.367462][T12739] CPU: 3 UID: 0 PID: 12739 Comm: syz.6.1713 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.367487][T12739] Tainted: [L]=SOFTLOCKUP [ 359.367492][T12739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.367502][T12739] Call Trace: [ 359.367508][T12739] [ 359.367515][T12739] dump_stack_lvl+0x100/0x190 [ 359.367539][T12739] should_fail_ex.cold+0x5/0xa [ 359.367560][T12739] _copy_from_iter+0x1f4/0x1690 [ 359.367589][T12739] ? __asan_memset+0x23/0x50 [ 359.367608][T12739] ? __pfx__copy_from_iter+0x10/0x10 [ 359.367632][T12739] ? __pfx___alloc_skb+0x10/0x10 [ 359.367680][T12739] netlink_sendmsg+0x808/0xda0 [ 359.367705][T12739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.367726][T12739] ? apparmor_socket_sendmsg+0x15b/0x270 [ 359.367748][T12739] ____sys_sendmsg+0xa4d/0xbe0 [ 359.367765][T12739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.367785][T12739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.367813][T12739] ___sys_sendmsg+0x190/0x1e0 [ 359.367832][T12739] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.367861][T12739] ? find_held_lock+0x2b/0x80 [ 359.367894][T12739] __sys_sendmsg+0x160/0x210 [ 359.367918][T12739] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.367946][T12739] ? __pfx_ksys_write+0x10/0x10 [ 359.367966][T12739] __do_fast_syscall_32+0xe7/0x970 [ 359.367989][T12739] ? lockdep_hardirqs_on+0x78/0x100 [ 359.368012][T12739] do_fast_syscall_32+0x32/0x70 [ 359.368034][T12739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.368054][T12739] RIP: 0023:0xf7f96fec [ 359.368074][T12739] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 359.368081][T12739] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 359.368098][T12739] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 359.368113][T12739] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.368123][T12739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.368132][T12739] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 359.368141][T12739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.368162][T12739] [ 359.423524][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1714'. [ 359.462350][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1714'. [ 359.465898][T12741] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 359.524514][T12751] raw_sendmsg: syz.5.1718 forgot to set AF_INET. Fix it! [ 359.530993][T12751] netlink: 'syz.5.1718': attribute type 2 has an invalid length. [ 359.533531][T12751] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1718'. [ 359.546031][T12751] : entered promiscuous mode [ 359.632305][T12755] netlink: 'syz.1.1720': attribute type 2 has an invalid length. [ 359.684470][T12759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.827565][T12764] jffs2: notice: (12764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 359.841597][T12764] FAULT_INJECTION: forcing a failure. [ 359.841597][T12764] name failslab, interval 1, probability 0, space 0, times 0 [ 359.845996][T12764] CPU: 3 UID: 0 PID: 12764 Comm: syz.6.1723 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.846014][T12764] Tainted: [L]=SOFTLOCKUP [ 359.846018][T12764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.846027][T12764] Call Trace: [ 359.846032][T12764] [ 359.846037][T12764] dump_stack_lvl+0x100/0x190 [ 359.846055][T12764] should_fail_ex.cold+0x5/0xa [ 359.846069][T12764] should_failslab+0xc2/0x120 [ 359.846086][T12764] __kmalloc_noprof+0xfc/0x820 [ 359.846100][T12764] ? jffs2_selected_compress+0x5d/0x5a0 [ 359.846139][T12764] jffs2_selected_compress+0x5d/0x5a0 [ 359.846152][T12764] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 359.846169][T12764] jffs2_compress+0x7f/0xa20 [ 359.846184][T12764] jffs2_write_inode_range+0x2fb/0xb80 [ 359.846204][T12764] ? __pfx_jffs2_write_inode_range+0x10/0x10 [ 359.846222][T12764] ? from_kgid+0x8f/0xd0 [ 359.846238][T12764] ? __pfx_from_kgid+0x10/0x10 [ 359.846257][T12764] jffs2_write_end+0x72c/0xea0 [ 359.846273][T12764] ? __pfx_jffs2_write_end+0x10/0x10 [ 359.846285][T12764] ? inode_to_bdi+0x9e/0x160 [ 359.846300][T12764] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 359.846318][T12764] generic_perform_write+0x513/0xa40 [ 359.846341][T12764] ? __pfx_generic_perform_write+0x10/0x10 [ 359.846357][T12764] ? __mark_inode_dirty+0x55c/0x16e0 [ 359.846376][T12764] ? mnt_put_write_access_file+0x4e/0x100 [ 359.846389][T12764] ? file_update_time_flags+0x373/0x500 [ 359.846404][T12764] __generic_file_write_iter+0x1f7/0x240 [ 359.846418][T12764] generic_file_write_iter+0xe1/0x390 [ 359.846433][T12764] vfs_write+0x6ac/0x1050 [ 359.846445][T12764] ? __pfx_generic_file_write_iter+0x10/0x10 [ 359.846459][T12764] ? __pfx_vfs_write+0x10/0x10 [ 359.846468][T12764] ? find_held_lock+0x2b/0x80 [ 359.846492][T12764] ksys_write+0x12a/0x250 [ 359.846502][T12764] ? __pfx_ksys_write+0x10/0x10 [ 359.846512][T12764] ? ksys_write+0x1ac/0x250 [ 359.846526][T12764] ? __pfx_ksys_write+0x10/0x10 [ 359.846540][T12764] __do_fast_syscall_32+0xe7/0x970 [ 359.846558][T12764] ? lockdep_hardirqs_on+0x78/0x100 [ 359.846573][T12764] do_fast_syscall_32+0x32/0x70 [ 359.846590][T12764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.846605][T12764] RIP: 0023:0xf7f96fec [ 359.846619][T12764] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 359.846624][T12764] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 359.846636][T12764] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 359.846643][T12764] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.846649][T12764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.846656][T12764] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 359.846662][T12764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.846676][T12764] [ 359.846700][T12764] jffs2: No memory for compressor allocation. Compression failed. [ 360.042525][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 360.047720][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 360.050357][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 360.053177][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 360.813824][T12775] jffs2: notice: (12775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 360.829875][T12775] overlayfs: failed to resolve './file0': -2 [ 362.069820][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 362.075166][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 362.078531][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 362.082312][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 362.800922][T12806] CUSE: unknown device info "" [ 362.802532][T12806] CUSE: unknown device info "Ö" [ 362.804253][T12806] CUSE: unknown device info "" [ 362.806093][T12806] CUSE: unknown device info "" [ 362.807744][T12806] CUSE: unknown device info "" [ 362.809316][T12806] CUSE: unknown device info "" [ 362.811021][T12806] CUSE: unknown device info "ðÿÿÿ" [ 362.812608][T12806] CUSE: unknown device info "" [ 362.814396][T12806] CUSE: unknown device info "" [ 362.815909][T12806] CUSE: unknown device info "" [ 362.817524][T12806] CUSE: unknown device info "" [ 362.819090][T12806] CUSE: unknown device info "r" [ 362.820930][T12806] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 362.822901][T12806] CUSE: unknown device info "ÿÿÿÿ" [ 362.824643][T12806] CUSE: unknown device info "" [ 362.826132][T12806] CUSE: unknown device info "€" [ 362.827974][T12806] CUSE: DEVNAME unspecified [ 362.837636][T12806] netlink: 'syz.5.1737': attribute type 21 has an invalid length. [ 362.989597][T12806] netlink: 'syz.5.1737': attribute type 1 has an invalid length. [ 362.999766][T12806] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1737'. [ 363.126869][T12819] syzkaller0: entered promiscuous mode [ 363.128913][T12819] syzkaller0: entered allmulticast mode [ 363.262273][ T1350] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 363.418062][ T1350] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 363.424206][ T1350] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 363.433598][ T1350] usb 11-1: string descriptor 0 read error: -22 [ 363.436560][ T1350] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.441074][ T1350] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.743327][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.746206][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.887795][ T1350] cdc_ncm 11-1:1.0: bind() failure [ 363.895321][ T1350] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 363.898585][ T1350] cdc_ncm 11-1:1.1: bind() failure [ 363.904273][ T1350] usb 11-1: USB disconnect, device number 8 [ 364.035319][T12851] 9p: p9: multiple sources not supported [ 364.159792][ T9399] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 364.164678][ T9399] (NULL device *): queue 0 connect admin queue failed (-111). [ 364.167443][ T9399] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 364.171132][ T9399] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 365.734398][T12880] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1749'. [ 365.945555][T12881] 9p: p9: multiple sources not supported [ 366.053282][T12883] CIFS mount error: No usable UNC path provided in device string! [ 366.053282][T12883] [ 366.056625][T12883] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 366.229994][ T9399] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 366.242519][ T9399] (NULL device *): queue 0 connect admin queue failed (-111). [ 366.249761][ T9399] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 366.253266][ T9399] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 367.630842][T12901] Set syz0 is full, maxelem 0 reached [ 367.906644][T12910] vmwgfx 0000:00:02.0: probe with driver vmwgfx failed with error -22 [ 368.312300][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 368.352118][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 368.354974][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 368.357899][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 370.389950][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 370.449799][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 370.461161][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 370.477589][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 370.782734][T12966] Set syz0 is full, maxelem 0 reached [ 370.836571][T12968] syzkaller0: entered promiscuous mode [ 370.839017][T12968] syzkaller0: entered allmulticast mode [ 370.980126][T12972] CIFS mount error: No usable UNC path provided in device string! [ 370.980126][T12972] [ 370.989762][T12972] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 371.777442][T12980] jffs2: notice: (12980) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 371.979383][T12990] 9p: Bad value for 'rfdno' [ 372.278670][T12998] 9p: p9: multiple sources not supported [ 372.493676][T13000] 9p: p9: multiple sources not supported [ 372.549868][ T105] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 372.571031][ T105] (NULL device *): queue 0 connect admin queue failed (-111). [ 372.577704][ T105] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 372.580479][ T105] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 373.090017][T13010] CIFS mount error: No usable UNC path provided in device string! [ 373.090017][T13010] [ 373.096078][T13010] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 373.435536][T13020] CIFS mount error: No usable UNC path provided in device string! [ 373.435536][T13020] [ 373.440212][T13020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 373.753243][T13028] syzkaller0: entered promiscuous mode [ 373.755101][T13028] syzkaller0: entered allmulticast mode [ 374.085938][T13043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.349768][ T41] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 374.458563][T13053] 9p: p9: multiple sources not supported [ 374.501613][T13054] 9p: p9: multiple sources not supported [ 374.521623][ T41] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.526070][ T41] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.532551][ T41] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 374.536398][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.540111][ T41] usb 10-1: Product: syz [ 374.541946][ T41] usb 10-1: Manufacturer: syz [ 374.543591][ T41] usb 10-1: SerialNumber: syz [ 374.546668][ T41] usb 10-1: config 0 descriptor?? [ 374.629957][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 374.635444][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 374.638583][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 374.642121][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 375.303044][T13062] pim6reg: left allmulticast mode [ 375.580915][T13084] Set syz0 is full, maxelem 0 reached [ 375.764588][T13086] 9p: p9: multiple sources not supported [ 376.474890][T13093] overlayfs: failed to clone upperpath [ 376.688392][T13095] tipc: Enabling of bearer rejected, failed to enable media [ 376.710015][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 376.714485][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 376.729566][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 376.739221][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 377.092369][ T1350] usb 10-1: USB disconnect, device number 13 [ 377.172477][T13121] 9p: p9: multiple sources not supported [ 378.123492][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1828'. [ 378.472861][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.475217][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.547647][T13160] 9p: p9: multiple sources not supported [ 378.641373][T13161] CIFS mount error: No usable UNC path provided in device string! [ 378.641373][T13161] [ 378.645668][T13161] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 378.789793][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 378.796397][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 378.800164][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 378.803954][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 380.680772][T13192] tipc: Enabling of bearer rejected, failed to enable media [ 380.879910][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 380.886852][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 380.892108][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 380.897869][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 381.097166][T13206] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 381.100603][T13206] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 381.771160][T13223] sd 0:0:0:0: PR command failed: 1026 [ 381.773311][T13223] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 381.775782][T13223] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 381.811905][T13227] FAULT_INJECTION: forcing a failure. [ 381.811905][T13227] name failslab, interval 1, probability 0, space 0, times 0 [ 381.815986][T13227] CPU: 2 UID: 0 PID: 13227 Comm: syz.6.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.816004][T13227] Tainted: [L]=SOFTLOCKUP [ 381.816008][T13227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.816015][T13227] Call Trace: [ 381.816021][T13227] [ 381.816026][T13227] dump_stack_lvl+0x100/0x190 [ 381.816045][T13227] should_fail_ex.cold+0x5/0xa [ 381.816056][T13227] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 381.816071][T13227] should_failslab+0xc2/0x120 [ 381.816088][T13227] kmem_cache_alloc_noprof+0x91/0x6a0 [ 381.816103][T13227] ? skb_clone+0x190/0x400 [ 381.816122][T13227] skb_clone+0x190/0x400 [ 381.816142][T13227] netlink_deliver_tap+0xaed/0xcc0 [ 381.816159][T13227] netlink_unicast+0x62b/0x850 [ 381.816174][T13227] ? __pfx_netlink_unicast+0x10/0x10 [ 381.816190][T13227] netlink_sendmsg+0x8b0/0xda0 [ 381.816205][T13227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.816220][T13227] ? apparmor_socket_sendmsg+0x15b/0x270 [ 381.816237][T13227] ____sys_sendmsg+0xa4d/0xbe0 [ 381.816249][T13227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.816262][T13227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.816280][T13227] ___sys_sendmsg+0x190/0x1e0 [ 381.816294][T13227] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.816313][T13227] ? find_held_lock+0x2b/0x80 [ 381.816340][T13227] __sys_sendmsg+0x160/0x210 [ 381.816356][T13227] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.816376][T13227] ? __pfx_ksys_write+0x10/0x10 [ 381.816391][T13227] __do_fast_syscall_32+0xe7/0x970 [ 381.816408][T13227] ? lockdep_hardirqs_on+0x78/0x100 [ 381.816423][T13227] do_fast_syscall_32+0x32/0x70 [ 381.816439][T13227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.816453][T13227] RIP: 0023:0xf7f96fec [ 381.816467][T13227] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 381.816472][T13227] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 381.816483][T13227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 381.816490][T13227] RDX: 0000000000004004 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.816496][T13227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.816503][T13227] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.816509][T13227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.816522][T13227] [ 382.006129][T13231] FAULT_INJECTION: forcing a failure. [ 382.006129][T13231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.010334][T13231] CPU: 0 UID: 0 PID: 13231 Comm: syz.6.1854 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.010353][T13231] Tainted: [L]=SOFTLOCKUP [ 382.010357][T13231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.010364][T13231] Call Trace: [ 382.010369][T13231] [ 382.010374][T13231] dump_stack_lvl+0x100/0x190 [ 382.010391][T13231] should_fail_ex.cold+0x5/0xa [ 382.010405][T13231] _copy_from_user+0x2e/0xd0 [ 382.010425][T13231] get_compat_msghdr+0xb3/0x480 [ 382.010437][T13231] ? __pfx_get_compat_msghdr+0x10/0x10 [ 382.010453][T13231] ___sys_sendmsg+0x1b6/0x1e0 [ 382.010468][T13231] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.010491][T13231] ? find_held_lock+0x2b/0x80 [ 382.010515][T13231] __sys_sendmsg+0x160/0x210 [ 382.010531][T13231] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.010551][T13231] ? __pfx_ksys_write+0x10/0x10 [ 382.010565][T13231] __do_fast_syscall_32+0xe7/0x970 [ 382.010582][T13231] ? lockdep_hardirqs_on+0x78/0x100 [ 382.010598][T13231] do_fast_syscall_32+0x32/0x70 [ 382.010614][T13231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.010629][T13231] RIP: 0023:0xf7f96fec [ 382.010643][T13231] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 382.010648][T13231] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 382.010660][T13231] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 382.010667][T13231] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.010673][T13231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.010679][T13231] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.010685][T13231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.010698][T13231] [ 382.278821][T13237] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 382.284188][T13237] overlayfs: failed to set xattr on upper [ 382.287386][T13237] overlayfs: ...falling back to redirect_dir=nofollow. [ 382.290470][T13237] overlayfs: ...falling back to index=off. [ 382.293167][T13237] overlayfs: ...falling back to uuid=null. [ 382.305283][T13237] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 382.308379][T13237] overlayfs: failed to set xattr on upper [ 382.312147][T13237] overlayfs: ...falling back to redirect_dir=nofollow. [ 382.314822][T13237] overlayfs: ...falling back to index=off. [ 382.317272][T13237] overlayfs: ...falling back to uuid=null. [ 382.800668][T13257] CIFS mount error: No usable UNC path provided in device string! [ 382.800668][T13257] [ 382.804166][T13257] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 382.950070][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 382.954128][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 382.958732][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 382.962150][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 382.976566][T13269] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 383.002673][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'. [ 383.271358][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1869'. [ 383.424379][T13292] syzkaller0: entered promiscuous mode [ 383.427047][T13292] syzkaller0: entered allmulticast mode [ 385.039385][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 385.053062][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 385.057203][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 385.064739][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 385.168758][T13352] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 385.280587][T13361] set match dimension is over the limit! [ 385.336555][T13362] set match dimension is over the limit! [ 385.586508][T13367] Set syz0 is full, maxelem 0 reached [ 385.792781][T13369] jffs2: notice: (13369) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 385.890417][T13374] jffs2: notice: (13374) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 385.990279][T13377] batadv_slave_0: entered promiscuous mode [ 385.993315][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 386.087477][T13377] batadv_slave_0 (unregistering): left promiscuous mode [ 386.090404][T13377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.659024][T13391] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1898'. [ 386.885511][T13399] jffs2: notice: (13399) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 387.090246][T13409] overlayfs: failed to clone lowerpath [ 387.108239][T13411] Set syz0 is full, maxelem 0 reached [ 387.111671][ T105] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 387.119389][ T105] (NULL device *): queue 0 connect admin queue failed (-111). [ 387.122791][ T105] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 387.125584][ T105] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 387.143404][T13410] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 387.210148][ T42] kauditd_printk_skb: 1255 callbacks suppressed [ 387.210166][ T42] audit: type=1804 audit(1786029263.750:2481): pid=13410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1906" name="file0" dev="tmpfs" ino=3059 res=1 errno=0 [ 387.266780][T13421] FAULT_INJECTION: forcing a failure. [ 387.266780][T13421] name failslab, interval 1, probability 0, space 0, times 0 [ 387.271600][T13421] CPU: 0 UID: 0 PID: 13421 Comm: syz.6.1909 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.271619][T13421] Tainted: [L]=SOFTLOCKUP [ 387.271623][T13421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.271629][T13421] Call Trace: [ 387.271634][T13421] [ 387.271638][T13421] dump_stack_lvl+0x100/0x190 [ 387.271657][T13421] should_fail_ex.cold+0x5/0xa [ 387.271670][T13421] should_failslab+0xc2/0x120 [ 387.271687][T13421] __kmalloc_noprof+0xfc/0x820 [ 387.271701][T13421] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 387.271719][T13421] kernfs_fop_write_iter+0x26a/0x5f0 [ 387.271734][T13421] vfs_write+0x6ac/0x1050 [ 387.271745][T13421] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 387.271760][T13421] ? __pfx_vfs_write+0x10/0x10 [ 387.271769][T13421] ? find_held_lock+0x2b/0x80 [ 387.271793][T13421] ksys_write+0x12a/0x250 [ 387.271803][T13421] ? __pfx_ksys_write+0x10/0x10 [ 387.271813][T13421] ? ksys_write+0x1ac/0x250 [ 387.271823][T13421] ? __pfx_ksys_write+0x10/0x10 [ 387.271836][T13421] __do_fast_syscall_32+0xe7/0x970 [ 387.271853][T13421] ? lockdep_hardirqs_on+0x78/0x100 [ 387.271868][T13421] do_fast_syscall_32+0x32/0x70 [ 387.271884][T13421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 387.271900][T13421] RIP: 0023:0xf7f96fec [ 387.271914][T13421] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 387.271919][T13421] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 387.271930][T13421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 387.271938][T13421] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.271944][T13421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.271950][T13421] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 387.271956][T13421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.271970][T13421] [ 387.302071][T13425] netlink: 'syz.3.1911': attribute type 10 has an invalid length. [ 387.344879][T13425] team0: Port device dummy0 added [ 388.036312][T13441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1917'. [ 388.037973][T13442] Set syz0 is full, maxelem 0 reached [ 388.326501][T13451] syzkaller0: entered promiscuous mode [ 388.328377][T13451] syzkaller0: entered allmulticast mode [ 388.562762][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1921'. [ 388.590143][T13458] batadv0: entered promiscuous mode [ 388.604317][T13458] macsec1: entered promiscuous mode [ 388.608298][T13458] macsec1: entered allmulticast mode [ 388.611785][T13458] batadv0: entered allmulticast mode [ 388.617981][T13458] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 388.622190][T13458] batadv0: left allmulticast mode [ 388.624579][T13458] batadv0: left promiscuous mode [ 389.199760][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 389.205474][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 389.208760][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 389.212630][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 389.243520][T13465] Set syz0 is full, maxelem 0 reached [ 389.259810][T13470] Cannot find set identified by id 2 to match [ 389.458113][T10413] libceph: connect (1)[c::]:6789 error -101 [ 389.460853][T10413] libceph: mon0 (1)[c::]:6789 connect error [ 389.467164][T13471] ceph: No mds server is up or the cluster is laggy [ 389.473857][T13480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1926'. [ 389.480608][T13480] netlink: 'syz.1.1926': attribute type 8 has an invalid length. [ 390.253941][ T42] audit: type=1326 audit(1786029266.790:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13501 comm="syz.5.1932" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 390.307654][T13506] syzkaller0: entered promiscuous mode [ 390.309985][T13506] syzkaller0: entered allmulticast mode [ 390.337731][T13506] se_device not configured yet, cannot port link [ 390.860816][T13521] 9p: p9: multiple sources not supported [ 391.279803][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 391.283935][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 391.286299][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 391.289253][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 391.599402][T13529] 9p: p9: multiple sources not supported [ 391.906176][T13532] syzkaller0: entered promiscuous mode [ 391.908248][T13532] syzkaller0: entered allmulticast mode [ 392.130326][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1943'. [ 392.137685][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1943'. [ 392.143791][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1943'. [ 392.155786][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1943'. [ 393.345466][T13569] netlink: 'syz.5.1952': attribute type 9 has an invalid length. [ 393.352399][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 393.356564][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 393.359019][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 393.362494][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 393.442664][T13573] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.688284][T13582] 9p: p9: multiple sources not supported [ 393.755642][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 393.816204][T13587] MTD: Couldn't look up './dev/mtdblock0': -2 [ 393.846336][T13589] jffs2: notice: (13589) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 394.275541][T13630] netlink: Unknown NAT attribute (type=16383, max=9) [ 394.278516][T13630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.336131][T13637] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 394.394764][ T1350] Process accounting resumed [ 394.416609][T13639] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1974'. [ 394.541150][T13651] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1974'. [ 394.554118][T13654] 9p: p9: multiple sources not supported [ 394.606122][T13655] 9p: p9: multiple sources not supported [ 395.282910][T13639] Process accounting resumed [ 395.334120][T13657] tmpfs: Bad value for 'nr_inodes' [ 395.404358][T13659] CUSE: info not properly terminated [ 395.431990][ T105] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 395.437429][ T105] (NULL device *): queue 0 connect admin queue failed (-111). [ 395.440901][ T105] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 395.444310][ T105] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 395.558597][T13670] netlink: Unknown NAT attribute (type=16383, max=9) [ 395.569733][T13670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.757993][T13681] 9p: p9: multiple sources not supported [ 395.871627][T13685] CIFS mount error: No usable UNC path provided in device string! [ 395.871627][T13685] [ 395.876414][T13685] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 396.008345][T13687] 9p: p9: multiple sources not supported [ 396.498142][T13689] FAULT_INJECTION: forcing a failure. [ 396.498142][T13689] name failslab, interval 1, probability 0, space 0, times 0 [ 396.502349][T13689] CPU: 1 UID: 0 PID: 13689 Comm: syz.5.1991 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.502368][T13689] Tainted: [L]=SOFTLOCKUP [ 396.502372][T13689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.502379][T13689] Call Trace: [ 396.502385][T13689] [ 396.502389][T13689] dump_stack_lvl+0x100/0x190 [ 396.502408][T13689] should_fail_ex.cold+0x5/0xa [ 396.502421][T13689] should_failslab+0xc2/0x120 [ 396.502438][T13689] __kmalloc_cache_noprof+0x91/0x6c0 [ 396.502450][T13689] ? kvm_irqfd+0x17f/0x1840 [ 396.502465][T13689] kvm_irqfd+0x17f/0x1840 [ 396.502474][T13689] ? irqentry_exit+0x24d/0xa00 [ 396.502490][T13689] ? lockdep_hardirqs_on+0x78/0x100 [ 396.502504][T13689] ? irqentry_exit+0x24d/0xa00 [ 396.502521][T13689] ? __pfx_kvm_irqfd+0x10/0x10 [ 396.502535][T13689] ? _copy_from_user+0x93/0xd0 [ 396.502556][T13689] kvm_vm_ioctl+0x125c/0x4180 [ 396.502573][T13689] ? tomoyo_path_number_perm+0x46d/0x580 [ 396.502590][T13689] ? stack_trace_save+0x8e/0xc0 [ 396.502606][T13689] ? __pfx_stack_trace_save+0x10/0x10 [ 396.502621][T13689] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 396.502636][T13689] ? __lock_acquire+0x49f/0x1a40 [ 396.502654][T13689] ? tomoyo_path_number_perm+0x46d/0x580 [ 396.502669][T13689] ? kasan_save_stack+0x3f/0x50 [ 396.502682][T13689] ? kasan_save_stack+0x30/0x50 [ 396.502696][T13689] ? kasan_save_track+0x14/0x30 [ 396.502708][T13689] ? kasan_save_free_info+0x3b/0x70 [ 396.502719][T13689] ? __kasan_slab_free+0x5f/0x80 [ 396.502732][T13689] ? kfree+0x22b/0x6c0 [ 396.502741][T13689] ? tomoyo_path_number_perm+0x46d/0x580 [ 396.502755][T13689] ? security_file_ioctl_compat+0xd3/0x230 [ 396.502769][T13689] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 396.502786][T13689] ? __do_fast_syscall_32+0xe7/0x970 [ 396.502804][T13689] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 396.502822][T13689] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 396.502851][T13689] ? kasan_quarantine_put+0x104/0x240 [ 396.502864][T13689] ? lockdep_hardirqs_on+0x78/0x100 [ 396.502880][T13689] ? find_held_lock+0x2b/0x80 [ 396.502898][T13689] ? tomoyo_path_number_perm+0x28f/0x580 [ 396.502918][T13689] ? tomoyo_path_number_perm+0x28f/0x580 [ 396.502944][T13689] ? tomoyo_path_number_perm+0x188/0x580 [ 396.502969][T13689] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 396.502993][T13689] ? get_pid_task+0x106/0x250 [ 396.503017][T13689] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.503035][T13689] ? do_vfs_ioctl+0x226/0x13e0 [ 396.503050][T13689] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 396.503087][T13689] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 396.503104][T13689] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 396.503120][T13689] ? find_held_lock+0x2b/0x80 [ 396.503134][T13689] ? __fget_files+0x215/0x3d0 [ 396.503144][T13689] ? hook_file_ioctl_common+0x140/0x440 [ 396.503163][T13689] ? __fget_files+0x21f/0x3d0 [ 396.503176][T13689] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 396.503191][T13689] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 396.503209][T13689] __do_fast_syscall_32+0xe7/0x970 [ 396.503225][T13689] ? lockdep_hardirqs_on+0x78/0x100 [ 396.503240][T13689] do_fast_syscall_32+0x32/0x70 [ 396.503256][T13689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.503271][T13689] RIP: 0023:0xf708efec [ 396.503290][T13689] Code: Unable to access opcode bytes at 0xf708efc2. [ 396.503295][T13689] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 396.503306][T13689] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae76 [ 396.503313][T13689] RDX: 0000000080001300 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.503320][T13689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 396.503326][T13689] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 396.503332][T13689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 396.503346][T13689] [ 396.944943][T13707] CIFS mount error: No usable UNC path provided in device string! [ 396.944943][T13707] [ 396.948217][T13707] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 397.026887][T13716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.079743][ T5841] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 397.239736][ T5841] usb 10-1: Using ep0 maxpacket: 8 [ 397.245101][ T5841] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 397.248638][ T5841] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.252558][ T5841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.255755][ T5841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.259455][ T5841] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.265178][ T5841] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 397.269220][ T5841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.480382][ T5841] usb 10-1: GET_CAPABILITIES returned 0 [ 397.482646][ T5841] usbtmc 10-1:16.0: can't read capabilities [ 397.519724][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 397.524090][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 397.526980][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 397.530202][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 397.818814][T13723] 9p: p9: multiple sources not supported [ 397.850791][T13724] CIFS mount error: No usable UNC path provided in device string! [ 397.850791][T13724] [ 397.854361][T13724] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 398.075966][ T1041] usb 10-1: USB disconnect, device number 14 [ 398.573643][T13731] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2003'. [ 398.579128][T13734] jffs2: notice: (13734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 398.902999][T13753] 9p: p9: multiple sources not supported [ 399.500398][T13755] CIFS mount error: No usable UNC path provided in device string! [ 399.500398][T13755] [ 399.503790][T13755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 399.589757][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 399.594435][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 399.597319][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 399.600412][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 399.681574][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2012'. [ 399.891432][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2012'. [ 399.916546][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 399.974544][T13768] 9p: p9: multiple sources not supported [ 400.019201][T13774] jffs2: notice: (13774) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 400.100170][T13779] syzkaller0: entered promiscuous mode [ 400.103407][T13779] syzkaller0: entered allmulticast mode [ 400.641012][T13797] 9p: p9: multiple sources not supported [ 400.882114][T13799] bond4: down delay (67108864) is not a multiple of miimon (640), value rounded to 67108480 ms [ 400.959479][T13802] jffs2: notice: (13802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 401.013188][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2024'. [ 401.017110][T13805] netlink: 'syz.5.2024': attribute type 14 has an invalid length. [ 401.039758][ T5895] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.043373][ T5895] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.059518][T13805] kvm: user requested TSC rate below hardware speed [ 401.067886][T13805] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 401.086692][ T5820] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.334536][ T5895] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.464099][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.475545][T13817] syzkaller0: entered promiscuous mode [ 401.479797][T13817] syzkaller0: entered allmulticast mode [ 401.582572][T13825] No source specified [ 401.585933][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'. [ 401.622875][T13819] veth5: entered promiscuous mode [ 401.637043][T13822] 9p: Bad value for 'rfdno' [ 401.670603][ T105] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 401.676736][ T105] (NULL device *): queue 0 connect admin queue failed (-111). [ 401.680798][ T105] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 401.686793][ T105] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 402.367801][T13849] 9p: p9: multiple sources not supported [ 402.780101][T13854] No source specified [ 403.096314][T13858] syzkaller0: entered promiscuous mode [ 403.098664][T13858] syzkaller0: entered allmulticast mode [ 403.764218][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 403.780063][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 403.782530][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 403.784966][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 405.372481][T13871] sch_fq: defrate 0 ignored. [ 405.557868][T13897] syzkaller0: entered promiscuous mode [ 405.561927][T13897] syzkaller0: entered allmulticast mode [ 405.711903][T13902] 9p: p9: multiple sources not supported [ 405.830160][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 405.858466][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 405.865598][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 405.871162][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 405.875954][T13906] 9p: p9: multiple sources not supported [ 406.650585][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 407.226444][T13954] 9p: p9: multiple sources not supported [ 407.553757][T13960] CIFS mount error: No usable UNC path provided in device string! [ 407.553757][T13960] [ 407.557266][T13960] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 407.909818][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 407.914780][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 407.919565][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 407.926228][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 407.934529][T13977] syzkaller0: entered promiscuous mode [ 407.937026][T13977] syzkaller0: entered allmulticast mode [ 407.953684][T13978] 9p: p9: multiple sources not supported [ 408.405813][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.416551][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.428076][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.432317][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.436433][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.235071][T14010] jffs2: notice: (14010) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 409.357984][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.363030][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.365362][T13983] bridge_slave_0: entered allmulticast mode [ 409.368191][T13983] bridge_slave_0: entered promiscuous mode [ 409.372566][T13983] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.375586][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.378652][T13983] bridge_slave_1: entered allmulticast mode [ 409.382747][T13983] bridge_slave_1: entered promiscuous mode [ 409.399818][T13983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.404957][T13983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.426833][T13983] team0: Port device team_slave_0 added [ 409.431657][T13983] team0: Port device team_slave_1 added [ 409.457492][T13983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.459886][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.467549][T13983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.472945][T13983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.475137][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.483468][T13983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.526386][T13983] hsr_slave_0: entered promiscuous mode [ 409.529590][T13983] hsr_slave_1: entered promiscuous mode [ 409.532656][T13983] debugfs: 'hsr0' already exists in 'hsr' [ 409.534646][T13983] Cannot create hsr debugfs directory [ 409.989801][ T9395] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 409.999481][ T9395] (NULL device *): queue 0 connect admin queue failed (-111). [ 410.007218][ T9395] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 410.019698][ T9395] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 410.266575][ T5820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.274078][ T5820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.278641][ T5820] bond0 (unregistering): Released all slaves [ 410.284819][T14032] 9p: p9: multiple sources not supported [ 410.286712][ T5820] bond1 (unregistering): Released all slaves [ 410.346148][T13983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.354943][T13983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.370754][T13983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 410.387217][T13983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.390017][ T5820] tipc: Left network mode [ 410.392394][T13983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 410.397670][T13983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.400629][T13983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.408188][T13983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.549943][ T5742] Bluetooth: hci2: command tx timeout [ 411.192379][T13983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.223801][T13983] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.281514][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.284381][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.302580][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.305730][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.377527][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.383286][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.066074][T14073] 9p: p9: multiple sources not supported [ 412.079826][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 412.089558][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 412.092730][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 412.096330][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 412.174756][T14074] 9p: p9: multiple sources not supported [ 412.629856][ T5742] Bluetooth: hci2: command tx timeout [ 412.728089][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 412.802661][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 413.229203][T13983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.236222][T13983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.484473][T14094] 9p: p9: multiple sources not supported [ 413.607607][T13983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.640405][T13983] veth0_vlan: entered promiscuous mode [ 413.646710][T13983] veth1_vlan: entered promiscuous mode [ 413.665814][T13983] veth0_macvtap: entered promiscuous mode [ 413.670646][T13983] veth1_macvtap: entered promiscuous mode [ 413.681761][T13983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.693484][T13983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.750862][ T5895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.759767][ T5895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.763714][ T5895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.767660][ T5895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.841789][ T5820] IPVS: stop unused estimator thread 0... [ 414.161359][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 414.167105][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 414.170679][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 414.174142][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 415.152607][T14115] 9p: p9: multiple sources not supported [ 415.669846][ T5742] Bluetooth: hci2: command 0x0419 tx timeout [ 415.670282][T14097] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 415.926850][T14119] kAFS: No cell specified [ 416.231848][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 416.237078][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 416.241546][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 416.245426][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 416.509858][T14097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 416.518861][T14097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 416.547130][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.552971][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.572557][ T9395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.575540][ T9395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.588255][T14146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.656563][T14148] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.839804][ T55] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 416.874591][T14160] 9p: p9: multiple sources not supported [ 417.062607][T14163] jffs2: notice: (14163) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 417.743471][ T55] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 417.747422][ T55] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.750873][ T5742] Bluetooth: hci2: command 0x0419 tx timeout [ 417.753364][ T55] usb 11-1: Product: syz [ 417.753380][ T55] usb 11-1: Manufacturer: syz [ 417.753394][ T55] usb 11-1: SerialNumber: syz [ 417.757188][ T55] usb 11-1: config 0 descriptor?? [ 417.762865][T14183] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2116'. [ 417.905521][T14192] file system registered [ 417.912149][T14192] FAULT_INJECTION: forcing a failure. [ 417.912149][T14192] name failslab, interval 1, probability 0, space 0, times 0 [ 417.916174][T14192] CPU: 3 UID: 0 PID: 14192 Comm: syz.1.2119 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.916193][T14192] Tainted: [L]=SOFTLOCKUP [ 417.916198][T14192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.916205][T14192] Call Trace: [ 417.916211][T14192] [ 417.916215][T14192] dump_stack_lvl+0x100/0x190 [ 417.916235][T14192] should_fail_ex.cold+0x5/0xa [ 417.916248][T14192] should_failslab+0xc2/0x120 [ 417.916265][T14192] __kmalloc_cache_noprof+0x91/0x6c0 [ 417.916278][T14192] ? loop_add+0xb9/0xb60 [ 417.916296][T14192] loop_add+0xb9/0xb60 [ 417.916310][T14192] ? __pfx_loop_add+0x10/0x10 [ 417.916331][T14192] ? find_held_lock+0x2b/0x80 [ 417.916345][T14192] ? __fget_files+0x215/0x3d0 [ 417.916357][T14192] loop_control_ioctl+0xae/0x620 [ 417.916372][T14192] ? __pfx_loop_control_ioctl+0x10/0x10 [ 417.916389][T14192] ? __pfx_loop_control_ioctl+0x10/0x10 [ 417.916403][T14192] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 417.916422][T14192] __do_fast_syscall_32+0xe7/0x970 [ 417.916441][T14192] ? lockdep_hardirqs_on+0x78/0x100 [ 417.916456][T14192] do_fast_syscall_32+0x32/0x70 [ 417.916473][T14192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.916488][T14192] RIP: 0023:0xf7f85fec [ 417.916503][T14192] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 417.916508][T14192] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 417.916519][T14192] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004c80 [ 417.916526][T14192] RDX: 00000000ffffffb6 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.916532][T14192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.916539][T14192] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 417.916546][T14192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.916562][T14192] [ 417.971921][T14193] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2119'. [ 418.034994][T13983] ffs_data_put(): freeing [ 418.233483][T14200] 9p: p9: multiple sources not supported [ 418.309838][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 418.315269][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 418.318606][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 418.322177][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 419.237292][T14209] Set syz0 is full, maxelem 0 reached [ 419.334369][T14210] 9p: p9: multiple sources not supported [ 419.592972][ T55] usb 11-1: USB disconnect, device number 9 [ 419.839752][ T5742] Bluetooth: hci2: command 0x0419 tx timeout [ 419.897918][T14217] syzkaller0: entered promiscuous mode [ 419.907784][T14217] syzkaller0: entered allmulticast mode [ 420.399809][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 420.403641][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 420.405342][T14233] 9p: p9: multiple sources not supported [ 420.406076][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 420.411598][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 420.958878][T14239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2132'. [ 420.961764][T14240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2132'. [ 421.337528][ T42] audit: type=1800 audit(1786029297.870:2483): pid=14253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2136" name="enable" dev="configfs" ino=54730 res=0 errno=0 [ 421.348332][T14253] [ 421.349098][T14253] ====================================================== [ 421.351614][T14253] WARNING: possible circular locking dependency detected [ 421.353877][T14253] syzkaller #0 Tainted: G L [ 421.356406][T14253] ------------------------------------------------------ [ 421.358644][T14253] syz.6.2136/14253 is trying to acquire lock: [ 421.360574][T14253] ffffffff8fd8a928 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 421.363681][T14253] [ 421.363681][T14253] but task is already holding lock: [ 421.366183][T14253] ffff888013bbbf00 (&sb->s_type->i_mutex_key#32){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 421.369462][T14253] [ 421.369462][T14253] which lock already depends on the new lock. [ 421.369462][T14253] [ 421.372844][T14253] [ 421.372844][T14253] the existing dependency chain (in reverse order) is: [ 421.375575][T14253] [ 421.375575][T14253] -> #3 (&sb->s_type->i_mutex_key#32){++++}-{4:4}: [ 421.378257][T14253] lock_acquire+0x1b9/0x370 [ 421.379857][T14253] down_write+0x8b/0x1f0 [ 421.381382][T14253] configfs_depend_item_unlocked+0xf3/0x6a0 [ 421.383340][T14253] usbg_make_tpg+0x261/0x620 [ 421.384903][T14253] target_fabric_make_tpg+0xab/0x8c0 [ 421.386713][T14253] configfs_mkdir+0x51e/0xb70 [ 421.388295][T14253] vfs_mkdir+0x361/0x850 [ 421.389750][T14253] filename_mkdirat+0x48b/0x5e0 [ 421.391395][T14253] __ia32_sys_mkdir+0x6a/0x90 [ 421.393007][T14253] __do_fast_syscall_32+0xe7/0x970 [ 421.394690][T14253] do_fast_syscall_32+0x32/0x70 [ 421.396357][T14253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.398408][T14253] [ 421.398408][T14253] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 421.400773][T14253] lock_acquire+0x1b9/0x370 [ 421.402382][T14253] __mutex_lock+0x1a4/0x1bd0 [ 421.403919][T14253] usbg_make_tpg+0x1a4/0x620 [ 421.405486][T14253] target_fabric_make_tpg+0xab/0x8c0 [ 421.407237][T14253] configfs_mkdir+0x51e/0xb70 [ 421.408875][T14253] vfs_mkdir+0x361/0x850 [ 421.410391][T14253] filename_mkdirat+0x48b/0x5e0 [ 421.412101][T14253] __ia32_sys_mkdir+0x6a/0x90 [ 421.413753][T14253] __do_fast_syscall_32+0xe7/0x970 [ 421.415656][T14253] do_fast_syscall_32+0x32/0x70 [ 421.417260][T14253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.419297][T14253] [ 421.419297][T14253] -> #1 (tpg_instances_lock){+.+.}-{4:4}: [ 421.421676][T14253] lock_acquire+0x1b9/0x370 [ 421.423216][T14253] __mutex_lock+0x1a4/0x1bd0 [ 421.424750][T14253] usbg_make_tpg+0x10b/0x620 [ 421.426378][T14253] target_fabric_make_tpg+0xab/0x8c0 [ 421.428104][T14253] configfs_mkdir+0x51e/0xb70 [ 421.429630][T14253] vfs_mkdir+0x361/0x850 [ 421.431070][T14253] filename_mkdirat+0x48b/0x5e0 [ 421.432730][T14253] __ia32_sys_mkdir+0x6a/0x90 [ 421.434289][T14253] __do_fast_syscall_32+0xe7/0x970 [ 421.435926][T14253] do_fast_syscall_32+0x32/0x70 [ 421.437567][T14253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.439606][T14253] [ 421.439606][T14253] -> #0 (&subsys->su_mutex){+.+.}-{4:4}: [ 421.441946][T14253] check_prev_add+0xeb/0xe60 [ 421.443543][T14253] __lock_acquire+0x136c/0x1a40 [ 421.445248][T14253] lock_acquire+0x1b9/0x370 [ 421.446861][T14253] __mutex_lock+0x1a4/0x1bd0 [ 421.448464][T14253] configfs_rmdir+0x5ae/0x950 [ 421.450022][T14253] vfs_rmdir+0x328/0x8a0 [ 421.451499][T14253] filename_rmdir+0x31a/0x5c0 [ 421.453144][T14253] __ia32_sys_rmdir+0x45/0x60 [ 421.454783][T14253] __do_fast_syscall_32+0xe7/0x970 [ 421.456600][T14253] do_fast_syscall_32+0x32/0x70 [ 421.458286][T14253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.460375][T14253] [ 421.460375][T14253] other info that might help us debug this: [ 421.460375][T14253] [ 421.463495][T14253] Chain exists of: [ 421.463495][T14253] &subsys->su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#32 [ 421.463495][T14253] [ 421.467774][T14253] Possible unsafe locking scenario: [ 421.467774][T14253] [ 421.470016][T14253] CPU0 CPU1 [ 421.471665][T14253] ---- ---- [ 421.473320][T14253] lock(&sb->s_type->i_mutex_key#32); [ 421.475015][T14253] lock(&opts->dep_lock); [ 421.477162][T14253] lock(&sb->s_type->i_mutex_key#32); [ 421.479526][T14253] lock(&subsys->su_mutex); [ 421.480926][T14253] [ 421.480926][T14253] *** DEADLOCK *** [ 421.480926][T14253] [ 421.483387][T14253] 3 locks held by syz.6.2136/14253: [ 421.484992][T14253] #0: ffff888022224450 (sb_writers#21){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 421.487811][T14253] #1: ffff888013bb9440 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 421.491061][T14253] #2: ffff888013bbbf00 (&sb->s_type->i_mutex_key#32){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 421.494045][T14253] [ 421.494045][T14253] stack backtrace: [ 421.495857][T14253] CPU: 2 UID: 0 PID: 14253 Comm: syz.6.2136 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.495876][T14253] Tainted: [L]=SOFTLOCKUP [ 421.495880][T14253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.495887][T14253] Call Trace: [ 421.495894][T14253] [ 421.495899][T14253] dump_stack_lvl+0x100/0x190 [ 421.495914][T14253] print_circular_bug.cold+0x178/0x1c7 [ 421.495934][T14253] check_noncircular+0x146/0x160 [ 421.495953][T14253] check_prev_add+0xeb/0xe60 [ 421.495968][T14253] ? filename_rmdir+0x31a/0x5c0 [ 421.495982][T14253] __lock_acquire+0x136c/0x1a40 [ 421.496000][T14253] lock_acquire+0x1b9/0x370 [ 421.496015][T14253] ? configfs_rmdir+0x5ae/0x950 [ 421.496029][T14253] ? __pfx___might_resched+0x10/0x10 [ 421.496046][T14253] __mutex_lock+0x1a4/0x1bd0 [ 421.496061][T14253] ? configfs_rmdir+0x5ae/0x950 [ 421.496073][T14253] ? configfs_rmdir+0x5ae/0x950 [ 421.496085][T14253] ? __pfx___mutex_lock+0x10/0x10 [ 421.496099][T14253] ? do_raw_spin_lock+0x128/0x260 [ 421.496110][T14253] ? find_held_lock+0x2b/0x80 [ 421.496123][T14253] ? fast_dput+0x2fe/0x6d0 [ 421.496136][T14253] ? do_raw_spin_unlock+0x145/0x1e0 [ 421.496153][T14253] ? _raw_spin_unlock+0x28/0x50 [ 421.496164][T14253] ? fast_dput+0x168/0x6d0 [ 421.496178][T14253] ? configfs_rmdir+0x5ae/0x950 [ 421.496189][T14253] configfs_rmdir+0x5ae/0x950 [ 421.496203][T14253] ? __pfx_configfs_rmdir+0x10/0x10 [ 421.496216][T14253] ? __pfx_down_write+0x10/0x10 [ 421.496234][T14253] vfs_rmdir+0x328/0x8a0 [ 421.496250][T14253] filename_rmdir+0x31a/0x5c0 [ 421.496262][T14253] ? __pfx_filename_rmdir+0x10/0x10 [ 421.496275][T14253] ? do_getname+0x191/0x390 [ 421.496289][T14253] __ia32_sys_rmdir+0x45/0x60 [ 421.496300][T14253] __do_fast_syscall_32+0xe7/0x970 [ 421.496315][T14253] ? lockdep_hardirqs_on+0x78/0x100 [ 421.496328][T14253] do_fast_syscall_32+0x32/0x70 [ 421.496343][T14253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.496357][T14253] RIP: 0023:0xf7f96fec [ 421.496372][T14253] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 421.496378][T14253] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 421.496389][T14253] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000000000000 [ 421.496396][T14253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.496402][T14253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.496408][T14253] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 421.496414][T14253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.496423][T14253] [ 421.613379][T14251] CIFS mount error: No usable UNC path provided in device string! [ 421.613379][T14251] [ 421.625479][T14251] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 421.909750][ T5742] Bluetooth: hci2: command 0x0419 tx timeout [ 422.358467][ T5895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.462800][ T5895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.470595][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 422.476369][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 422.478710][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 422.481924][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 422.504518][ T5895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.574441][ T5895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.674557][ T5895] bridge_slave_1: left allmulticast mode [ 422.676369][ T5895] bridge_slave_1: left promiscuous mode [ 422.678116][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.681524][ T5895] bridge_slave_0: left allmulticast mode [ 422.683282][ T5895] bridge_slave_0: left promiscuous mode [ 422.685108][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.722867][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.727278][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.731264][ T5895] bond0 (unregistering): Released all slaves [ 422.853243][ T5454] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.970342][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14 [ 423.007253][ T5895] hsr_slave_0: left promiscuous mode [ 423.009703][ T5895] hsr_slave_1: left promiscuous mode [ 423.011599][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.013959][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.016728][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.019229][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.023637][ T5895] veth1_macvtap: left promiscuous mode [ 423.025480][ T5895] veth0_macvtap: left promiscuous mode [ 423.027373][ T5895] veth1_vlan: left promiscuous mode [ 423.029181][ T5895] veth0_vlan: left promiscuous mode [ 423.091577][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 423.103788][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 423.148245][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15 [ 423.281763][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 424.551719][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 424.555728][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 424.558568][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 424.562441][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 426.630542][ T9395] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 426.636066][ T9395] (NULL device *): queue 0 connect admin queue failed (-111). [ 426.639032][ T9395] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 426.642773][ T9395] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 428.710069][ T9397] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 428.716171][ T9397] (NULL device *): queue 0 connect admin queue failed (-111). [ 428.719180][ T9397] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 428.722423][ T9397] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 430.790732][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 430.797343][ T1163] (NULL device *): queue 0 connect admin queue failed (-111). [ 430.800864][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 430.804061][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds