last executing test programs: 1m34.400267624s ago: executing program 3 (id=2793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r5, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 1m32.194227782s ago: executing program 3 (id=2798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a72"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 1m29.34629862s ago: executing program 3 (id=2806): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0xffff8001}, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={r5, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r7, 0xc0106440, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 1m27.539969645s ago: executing program 3 (id=2808): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='0', 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1m26.019619854s ago: executing program 3 (id=2812): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x22a1d, 0xffb3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES64, @ANYRES32=0x0, @ANYRES16], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, 0x0, &(0x7f0000001700)=@udp}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000280), &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x23d1) socket(0x28, 0x801, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000540)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x16, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0x7]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x0, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee13920811fd7002dc8aada05a7c0bda82f7ff87fdc11bc4ec00", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x4000003, 0x6]}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xffffffff80000001) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) 1m25.099366506s ago: executing program 3 (id=2814): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000080), 0x4) r6 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x200) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m9.728685003s ago: executing program 32 (id=2814): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000080), 0x4) r6 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x200) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 16.660382397s ago: executing program 4 (id=2952): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec8"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 16.511080234s ago: executing program 5 (id=2953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x34, 0x0, 0x2}]}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x48040) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in, @in=@local, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x4d2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 14.802358165s ago: executing program 4 (id=2956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x5}, 0x8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00') bind$tipc(r2, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x404c22, 0x1}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x1}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000280)={r1, 0x0, 0x1c5a00, &(0x7f0000000180)={@align=0x4, {0xff, 0x6, 0xac5e, 0x1ffffffffffffffe}}, 0x1000, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)=0x8}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040), 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) 13.969190467s ago: executing program 4 (id=2958): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r3, 0x11b, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='nsfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000240)="4a108e973e9575d10623442f9acad896f9bb5ba0783ca5af57b2c6d83ffa6be98fbac470f7028e22adcb3d004dfbd92f6f25b126c5c35bbb4c94b162790829f73ab41c7ad5317a27fcbb6de49f87be75a9707c6796a0f77c2919dadf7ea00367282b93d9b3c3386ceb331084e6d5cff2570b6ea95f7ee571ebb49b368f0a2af78411e7dc93abe97751d965088c367e9e76c40cfc038b332b1f59e18170896752cb5b3062cd7c59baad76a6a94f01400647ecc53acc5fe675b64955cf257b89422b8ded86effc69afdeb78c2fb843e2fb68ed84707e578198cf56496761b5ba4c9e66ebc0bdca79f6c2beee22134a59e8f5b65bc61770ae", 0xf7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000000)=""/2, &(0x7f0000001080)=0x2) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f00000000c0)={0x81}) read$FUSE(r5, &(0x7f0000003640)={0x2020}, 0x2020) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x7, 'pimreg0\x00', {0xb}, 0x6}) 11.640685115s ago: executing program 2 (id=2962): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) io_uring_setup(0x74ff, &(0x7f0000000100)={0x0, 0xe850, 0x40, 0x2, 0x77, 0x0, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4087, 0xff7}], 0x1, 0xf72, 0xfc000000) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x424, 0x3f3, 0x400, 0x70bd28, 0x25dfdbfe, {0x3f307fea8a46b145, 0x0, 0x3c, [0x4, 0xdd7, 0x2, 0x6, 0x0, 0x86, 0x0, 0x5, 0xb, 0x10001, 0x8, 0x5, 0x9, 0x4, 0x7, 0x1, 0xfffffffb, 0xe70f, 0x401, 0x7, 0x4, 0x200, 0x5, 0x4, 0x1, 0x6, 0xffffffff, 0x3, 0xa9, 0x2, 0x7ff, 0xff, 0xffffffff, 0x9, 0x6, 0x6, 0x0, 0x7, 0x7f5, 0x1, 0x4, 0x3, 0x5, 0x8, 0x412, 0x281, 0x2, 0x40000, 0xe5, 0x5, 0x9, 0x4, 0x101, 0x6, 0x4, 0x4, 0xfffffc01, 0x4, 0x7f, 0x4, 0x5, 0x3, 0xc17, 0xffff], [0x0, 0x1, 0x7, 0x6, 0x10001, 0x3, 0x8, 0x7, 0x9b, 0xa, 0x2, 0x7, 0x5, 0x8, 0x7fffffff, 0x0, 0xe, 0x5, 0x4, 0x4, 0xfffffffa, 0x81, 0x46e8, 0x80, 0x2, 0xf, 0x8, 0x5, 0x4, 0xfffffffc, 0x7ff, 0x6, 0x9, 0x3ff, 0x40, 0x2, 0x9, 0x0, 0x3, 0x1, 0xffff, 0xf45000, 0xffffffff, 0x8, 0x1, 0x7fff, 0x35, 0x2, 0x7, 0x3, 0x3, 0x8, 0x1, 0x475, 0x0, 0x1, 0x7, 0x704d, 0x7, 0x401, 0x32f, 0xff, 0xfff80000, 0x6], [0x98, 0x80c, 0xff, 0x6, 0x5, 0x6, 0x100, 0x3, 0x3c2fe155, 0x80, 0xfffffffe, 0x6, 0x8, 0x0, 0x9, 0x1000, 0x1000, 0x1ff, 0x1, 0xffffffff, 0xa, 0x3, 0x9, 0x1, 0x3, 0x9, 0x8, 0x3b26, 0x0, 0x2, 0x4, 0x6, 0x2, 0x9, 0x1, 0x8, 0x1000, 0x2, 0xfffffffe, 0x0, 0x2, 0x2637, 0x4, 0xfffffffd, 0xf3, 0x7b1d, 0x3, 0x140db06c, 0x200, 0x6, 0x6, 0x6, 0x9, 0x3, 0xf, 0x7f7f, 0x8000, 0xffff, 0xb5b, 0x4, 0x18a, 0x2, 0x0, 0x9], [0x2, 0x80, 0x5, 0x5, 0x5, 0x3, 0x9, 0x3, 0x66af, 0x6, 0x7, 0xd7, 0x0, 0x3, 0xa4a, 0x9, 0x8, 0x0, 0x6, 0xc59a, 0x5, 0x100, 0x8, 0x4d, 0x1000, 0x4b0db32b, 0x0, 0x800, 0x4, 0x1, 0xffffff19, 0x1000, 0x56, 0x7, 0x34, 0xffff, 0x1, 0x6, 0x5, 0x4, 0x80000001, 0x6, 0x16, 0x0, 0x3, 0x1, 0x3, 0x10, 0x1, 0x7fffffff, 0x10001, 0xfffffffd, 0xfffffff8, 0xf, 0x744b, 0x0, 0x0, 0xd, 0x7, 0xc, 0x9, 0x2, 0xff, 0x7fffffff], 0x4, ['%#*\x00']}, ["", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x11}, 0x4000) accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) 10.647550986s ago: executing program 2 (id=2964): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, 0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x801, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2000c054) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000021) readv(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r4, 0x400, 0x2) syz_open_dev$hiddev(0x0, 0x0, 0x0) 10.604251485s ago: executing program 5 (id=2965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cd"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 9.528201317s ago: executing program 1 (id=2967): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec8"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 9.527295632s ago: executing program 5 (id=2968): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r1, 0x29, 0x3c, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x20}]}}, 0x0, 0x4e}, 0x28) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000540)={0x1, 0x2, 0xe65, 0x400000005, 0x6, 0x5, 0x8, 0xcc3, 0x0, 0x100000a, 0x100400, 0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) r4 = syz_io_uring_setup(0x20c6, &(0x7f0000000300)={0x0, 0xfa61, 0x400, 0x3, 0x2a6}, &(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000480)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e0a03"], 0xd) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) r7 = open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = dup(r7) fanotify_mark(r8, 0x1, 0x48000047, r9, 0x0) r10 = syz_io_uring_setup(0xf02, &(0x7f0000000080)={0x0, 0xb3fe, 0xc00, 0x2, 0xfffffffe, 0x0, r9}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) fcntl$F_SET_FILE_RW_HINT(r10, 0x40e, &(0x7f0000000100)=0x5) 7.523024075s ago: executing program 2 (id=2970): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) renameat(r5, &(0x7f00000000c0)='./file1\x00', r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x4003) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 7.23051996s ago: executing program 1 (id=2971): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x1ff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r4, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x3, 0x12) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0/file0', [{0x20, 'keyring\x00'}], 0xa, "c607d2d9aac4c03f10c5db9437673063645b4cf6ca6b69e549675032d1e1ecff8ce82c2a1bccb70fc1059e3fac2e0f98f8f8e7b939bab8eea8732070ed239e64455e20a7df7f85caf56ce3cec6144b8a2d60d24cff3b27922c40be19e439b62390b2e5e101d156ecdb7f7b0d8d6b819f8e3a8e7ab6b6aa7388b4736711e1277fc85c8a5b33"}, 0x9f) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) madvise(&(0x7f00001ae000/0x1000)=nil, 0x1000, 0xb) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r8, 0x0, 0x0}) open(&(0x7f0000000040)='./file0/file0\x00', 0x10102, 0x30) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r8, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000180)={0x8, r9}) 6.088772164s ago: executing program 4 (id=2973): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n', 0x1e) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0xfdef) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001bc0)=""/4096, 0xfdef}], 0x1}, 0x10020) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60018000120018000000000000000000000000000931601000000000000c204000000ff050200020000000000000800"/78], 0x0) dup(r4) 6.085208318s ago: executing program 1 (id=2974): r0 = gettid() r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20160100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) capget(&(0x7f0000000100)={0x19980330, r6}, &(0x7f0000000240)={0x88, 0x401, 0x3, 0x2, 0x51e2, 0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000)={0x12, 0x0, 0x3}) 6.04644498s ago: executing program 0 (id=2975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec835"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 6.045098493s ago: executing program 2 (id=2976): r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40c1}, 0x40008d2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4004004) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4840) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc}) r4 = open(0x0, 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x9000) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000240)) 5.097833862s ago: executing program 0 (id=2977): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x1, 0xffffb313, 0x40, "1ae34e6566ff7b2afa55bcd8b1407958339f00", 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x538143, 0x0) syz_open_pts(r4, 0x501000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xd, 0x13, "3eccd8000000000000000010000000040100"}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x2, 0x80000000}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) 4.635885498s ago: executing program 1 (id=2978): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r3, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, 0x0, 0x0) 4.632004233s ago: executing program 5 (id=2979): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) sendmsg$tipc(r1, 0x0, 0x80) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg(r2, &(0x7f00000002c0)={0x1, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptp0(0xffffff9c, 0x0, 0x40, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="090000001400000008000000baab000042000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00o\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', '', [{0x20, ')'}]}, 0x6) writev(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 4.612449439s ago: executing program 4 (id=2980): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) shutdown(r4, 0x1) sendfile(r4, r3, 0x0, 0x20000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_usb_connect$uac1(0x6, 0xca, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="918ca6cdfcb783ba08a0b3b023d6eb51", @ANYRESDEC=r4, @ANYRES32=0x0], 0x0) 4.396318106s ago: executing program 0 (id=2981): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x2400c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) r4 = socket(0x10, 0x3, 0x0) futex_waitv(&(0x7f0000000500)=[{0x8000, &(0x7f0000000100)=0x2, 0x82}, {0xc46, &(0x7f0000000180)=0xf, 0x82}, {0x5, &(0x7f0000000240)=0x4, 0x2}, {0x444, &(0x7f0000000300)=0x1ff, 0x82}, {0x80, &(0x7f0000000340)=0x3a35, 0x80}, {0x7, &(0x7f00000003c0)=0x1, 0x2}, {0x62, &(0x7f0000000400)=0x7f, 0x2}, {0xc1, &(0x7f0000000440)=0x80, 0x2}, {0x9, &(0x7f0000000480)=0x100000000, 0x2}], 0x9, 0x0, &(0x7f0000000600)={0x77359400}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) 3.83529984s ago: executing program 0 (id=2982): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$media(0x0, 0x30000000000000a, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) 2.939236202s ago: executing program 5 (id=2983): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110f0010000201020001090219000101008032090400"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d240600000308", @ANYRES64=r3], 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x78800, 0xffffff2d, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x4d, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@random="171f970671af", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "098f00", 0x19, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x19, 0x0, @gue={{0x1, 0x0, 0x1, 0x2, 0x0, @void}, "dc893d3917b06e9c147f3d31fe"}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.122248739s ago: executing program 2 (id=2984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r2) setgroups(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cd"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 1.294658991s ago: executing program 1 (id=2986): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) socket$inet_udp(0x2, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 1.293604589s ago: executing program 0 (id=2987): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cd"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 672.197774ms ago: executing program 5 (id=2988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec83502"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 520.702281ms ago: executing program 1 (id=2989): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r0, 0x4, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2531000000080001000200000008000300", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r1, @ANYBLOB="0c009900080000005900000008000300", @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) write(r4, &(0x7f0000000480)='usbip-vudc.0', 0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @private0={0xfc, 0x0, '\x00', 0xff}, @private0, 0x9, 0x40, 0x0, 0x100, 0x0, 0xd0010b}) 385.287482ms ago: executing program 0 (id=2990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='schedstat\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace(0x10, 0x0) r5 = syz_clone3(&(0x7f0000001d00)={0x20000000, 0x0, &(0x7f00000002c0), &(0x7f0000000300), {0x25}, 0x0, 0x0, 0x0, &(0x7f0000001cc0), 0x0, {r4}}, 0x58) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001d80)={'\x00', 0x1ff, 0x8, 0x9, 0x270b, 0x1e9e00000000, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) write$tun(r7, 0x0, 0xfffffd68) sendmsg$NFT_MSG_GETSET(r6, 0x0, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r8) 0s ago: executing program 4 (id=2991): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec835"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) kernel console output (not intermixed with test programs): _1: entered promiscuous mode [ 607.048969][T13769] veth0_to_batadv: entered promiscuous mode [ 607.058292][T13769] batadv_slave_0: entered promiscuous mode [ 607.064412][T13769] veth1_to_batadv: entered promiscuous mode [ 607.073455][T13769] batadv_slave_1: entered promiscuous mode [ 607.083838][T13769] xfrm0: entered promiscuous mode [ 607.090562][T13769] veth0_to_hsr: entered promiscuous mode [ 607.101751][T13769] veth1_to_hsr: entered promiscuous mode [ 607.177958][T13769] veth1_virt_wifi: entered promiscuous mode [ 607.196866][T13769] veth0_virt_wifi: entered promiscuous mode [ 607.220384][T13769] virt_wifi0: entered promiscuous mode [ 607.233089][T13769] vlan0: entered promiscuous mode [ 607.250712][T13769] macvlan0: entered promiscuous mode [ 607.336846][T13793] random: crng reseeded on system resumption [ 607.387238][ T31] audit: type=1400 audit(1788169953.636:943): avc: denied { write } for pid=13789 comm="syz.1.2529" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 607.387336][ T31] audit: type=1400 audit(1788169953.636:944): avc: denied { open } for pid=13789 comm="syz.1.2529" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 607.508039][T13769] macvlan1: entered promiscuous mode [ 607.694473][T13769] ipvlan1: entered promiscuous mode [ 607.729630][T13769] macvtap0: entered promiscuous mode [ 607.739668][T13769] macsec0: entered promiscuous mode [ 607.746293][T13769] geneve0: entered promiscuous mode [ 607.750833][T13769] geneve1: entered promiscuous mode [ 607.758852][T13769] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 607.784509][T13769] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 607.786837][T13796] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13796 comm=syz.3.2530 [ 607.811900][T13769] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 607.823951][T13769] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 607.845955][T13769] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 607.849041][T13769] syztnl0: entered promiscuous mode [ 607.851469][T13769] ip6tnl1: entered promiscuous mode [ 607.854687][T13769] mac80211_hwsim hwsim28 wlan2: entered promiscuous mode [ 607.854816][T13769] mac80211_hwsim hwsim29 wlan3: entered promiscuous mode [ 607.871503][T13769] bond1: entered promiscuous mode [ 607.873208][T13769] mac80211_hwsim hwsim30 wlan4: entered promiscuous mode [ 607.873417][T13769] ipvlan2: entered promiscuous mode [ 607.875798][T13769] mac80211_hwsim hwsim36 wlan5: entered promiscuous mode [ 607.875919][T13769] veth2: entered promiscuous mode [ 607.876036][T13769] veth3: entered promiscuous mode [ 607.876496][T13769] mac80211_hwsim hwsim44 wlan6: entered promiscuous mode [ 607.876617][T13769] mac80211_hwsim hwsim48 wlan7: entered promiscuous mode [ 607.876738][T13769] mac80211_hwsim hwsim49 wlan8: entered promiscuous mode [ 607.876851][T13769] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 607.878669][T13769] mac80211_hwsim hwsim52 wlan9: entered promiscuous mode [ 607.878802][T13769] mac80211_hwsim hwsim53 wlan10: entered promiscuous mode [ 607.879349][T13769] mac80211_hwsim hwsim54 wlan11: entered promiscuous mode [ 607.883990][ T5715] lo speed is unknown, defaulting to 1000 [ 607.884009][ T5715] syz2: Port: 1 Link DOWN [ 607.887089][ T6408] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.887296][ T6408] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.887373][ T6408] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.887432][ T6408] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.907104][ T6408] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 607.915384][ T6408] (NULL device *): queue 0 connect admin queue failed (-111). [ 607.915405][ T6408] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 607.915420][ T6408] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 608.387917][T13803] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.581317][T13809] overlayfs: failed to clone lowerpath [ 608.609157][T13809] overlayfs: failed to clone lowerpath [ 608.618995][ T5695] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 608.620701][ T5695] usb 5-1: USB disconnect, device number 31 [ 610.184185][T10022] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 610.189377][T10022] (NULL device *): queue 0 connect admin queue failed (-111). [ 610.189396][T10022] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 610.189410][T10022] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 612.108308][T13836] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 612.227060][T10022] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 612.227635][T10022] (NULL device *): queue 0 connect admin queue failed (-111). [ 612.227654][T10022] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 612.227667][T10022] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 612.752252][T13841] jffs2: notice: (13841) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 613.110351][ T31] audit: type=1400 audit(1788169959.396:945): avc: denied { write } for pid=13837 comm="syz.2.2543" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 614.319432][ T6408] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 614.322966][ T6408] (NULL device *): queue 0 connect admin queue failed (-111). [ 614.323033][ T6408] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 614.323052][ T6408] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 615.168008][ T31] audit: type=1400 audit(1788169961.456:946): avc: denied { write } for pid=13854 comm="syz.2.2546" name="kcm" dev="proc" ino=4026533034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 616.387683][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 616.387821][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 616.387838][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 616.387851][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 617.594457][ T31] audit: type=1400 audit(1788169963.896:947): avc: denied { open } for pid=13876 comm="syz.4.2548" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 617.738011][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 618.468448][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 618.483033][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 618.483105][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 618.483121][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 618.974672][ T983] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 619.752146][ T983] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 619.825360][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.825395][ T983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.825438][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.109713][ T983] usb 2-1: config 0 descriptor?? [ 620.557365][ T3279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 620.571298][ T3279] (NULL device *): queue 0 connect admin queue failed (-111). [ 620.579772][ T3279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 620.579840][ T3279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 620.594092][ T983] usb 2-1: USB disconnect, device number 27 [ 620.628180][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.628234][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 621.968025][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2559'. [ 622.633346][T13926] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 622.840993][T10044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 622.845423][T10044] (NULL device *): queue 0 connect admin queue failed (-111). [ 622.845461][T10044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 622.845480][T10044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 622.909919][ T6408] IPVS: starting estimator thread 0... [ 623.387760][T13928] IPVS: using max 39 ests per chain, 93600 per kthread [ 623.614646][ T31] audit: type=1400 audit(1788169969.916:948): avc: denied { read write } for pid=13934 comm="syz.2.2566" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 623.638452][ T31] audit: type=1400 audit(1788169969.916:949): avc: denied { open } for pid=13934 comm="syz.2.2566" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 624.158032][T13948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.869800][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 624.883406][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 624.883440][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 624.883469][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 625.042693][T13960] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 625.360082][T13964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2573'. [ 625.360139][T13964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2573'. [ 625.948738][ T31] audit: type=1400 audit(1788169972.256:950): avc: denied { write } for pid=13973 comm="syz.2.2575" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 627.029542][T10022] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 627.032430][T10022] (NULL device *): queue 0 connect admin queue failed (-111). [ 627.032449][T10022] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 627.032462][T10022] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 629.298571][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 629.299510][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 629.302066][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 629.302087][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 629.302101][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 629.811193][ T31] audit: type=1400 audit(1788169976.116:951): avc: denied { read } for pid=13995 comm="iou-wrk-13996" dev="sockfs" ino=56388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 631.794330][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 631.810937][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 631.810972][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 631.810990][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 633.827173][ T3279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 633.839669][ T3279] (NULL device *): queue 0 connect admin queue failed (-111). [ 633.839705][ T3279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 633.839729][ T3279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 634.345591][T14056] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 634.347806][T14056] CIFS: Attempting to mount //127.0.0.1/share [ 634.662430][T14064] kvm: pic: non byte read [ 634.662650][T14064] kvm: pic: non byte read [ 634.662841][T14064] kvm: pic: non byte read [ 634.663011][T14064] kvm: pic: non byte read [ 634.663180][T14064] kvm: pic: non byte read [ 634.663348][T14064] kvm: pic: non byte read [ 634.663997][T14064] kvm: pic: non byte read [ 634.664169][T14064] kvm: pic: non byte read [ 634.668542][T14064] kvm: pic: non byte read [ 634.668727][T14064] kvm: pic: non byte read [ 634.819986][T14056] CIFS: VFS: Error connecting to socket. Aborting operation. [ 634.820161][T14056] CIFS: VFS: cifs_mount failed w/return code = -4 [ 635.335387][T14073] Bluetooth: MGMT ver 1.23 [ 635.347064][ T5695] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 635.907620][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 635.923989][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 635.933289][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 635.942381][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 635.961977][ T5695] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 635.964110][ T5695] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 635.964134][ T5695] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 635.964153][ T5695] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 635.964172][ T5695] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 635.964200][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.968963][T14060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 635.969039][T14060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 635.972801][ T5695] pl2303 3-1:1.0: pl2303 converter detected [ 635.975319][ T5695] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 636.347218][ T5695] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 636.507229][ T5695] usb 2-1: Using ep0 maxpacket: 8 [ 636.517765][ T5695] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.539837][ T5695] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 636.548730][ T5695] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 636.548776][ T5695] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 636.548828][ T5695] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 636.548879][ T5695] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 636.548931][ T5695] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.549051][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.835404][ T5695] usb 2-1: GET_CAPABILITIES returned 0 [ 636.841487][ T5695] usbtmc 2-1:16.0: can't read capabilities [ 637.303864][T14086] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 637.304179][T14086] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 637.304438][T14086] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 637.305638][T14086] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 637.305679][T14086] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 637.450293][T14098] tipc: Enabling of bearer rejected, failed to enable media [ 637.742810][ T5695] usb 2-1: USB disconnect, device number 29 [ 638.021717][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 638.030139][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 638.030216][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 638.030271][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 638.031493][T10022] IPVS: starting estimator thread 0... [ 638.158063][T14107] IPVS: using max 38 ests per chain, 91200 per kthread [ 638.882787][ T5695] usb 3-1: USB disconnect, device number 20 [ 638.896887][ T5695] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 638.897237][ T5695] pl2303 3-1:1.0: device disconnected [ 640.223571][ T3279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 640.223897][ T3279] (NULL device *): queue 0 connect admin queue failed (-111). [ 640.223914][ T3279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 640.223928][ T3279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 640.252899][T14124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.925290][ T31] audit: type=1400 audit(1788169987.226:952): avc: denied { getattr } for pid=14130 comm="syz.3.2611" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 641.489663][T14141] futex_wake_op: syz.4.2609 tries to shift op by 144; fix this program [ 641.609985][T14147] jffs2: notice: (14147) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 641.673775][ T31] audit: type=1400 audit(1788169987.966:953): avc: denied { write } for pid=14144 comm="syz.1.2612" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 642.233554][ T6472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 642.252098][ T6472] (NULL device *): queue 0 connect admin queue failed (-111). [ 642.260654][ T6472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 642.260712][ T6472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 642.648796][ T31] audit: type=1400 audit(1788169988.946:954): avc: denied { load_policy } for pid=14142 comm="syz.2.2613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 642.668500][T14149] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 642.668726][T14149] SELinux: failed to load policy [ 643.811846][ T5815] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 644.307521][T10014] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 644.321630][T10014] (NULL device *): queue 0 connect admin queue failed (-111). [ 644.334852][T10014] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 644.345414][T10014] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 645.179270][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 645.317564][ T5815] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 645.811876][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 645.820087][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.841212][ T5815] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 645.849610][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 645.849650][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 645.849700][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 645.849738][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 645.849774][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.849871][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.416922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 646.476930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 646.526929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 646.889400][T10044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 646.902046][T10044] (NULL device *): queue 0 connect admin queue failed (-111). [ 646.963357][T10044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 646.963413][T10044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 646.979705][ T5815] usb 5-1: GET_CAPABILITIES returned 0 [ 646.979753][ T5815] usbtmc 5-1:16.0: can't read capabilities [ 647.309306][ T31] audit: type=1400 audit(1788169993.606:955): avc: denied { listen } for pid=14174 comm="syz.3.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 647.463424][ T5815] usb 5-1: USB disconnect, device number 32 [ 648.743016][T14190] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2625'. [ 649.027219][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 649.039881][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 649.048583][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 649.048630][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 650.726039][ T31] audit: type=1400 audit(1788169997.026:956): avc: denied { read write } for pid=14208 comm="syz.4.2630" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 650.726095][ T31] audit: type=1400 audit(1788169997.026:957): avc: denied { open } for pid=14208 comm="syz.4.2630" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 651.117245][T10014] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 651.131436][T10014] (NULL device *): queue 0 connect admin queue failed (-111). [ 651.140495][T10014] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 651.140565][T10014] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 651.844873][ T31] audit: type=1400 audit(1788169998.146:958): avc: denied { map } for pid=14222 comm="syz.3.2633" path="socket:[56124]" dev="sockfs" ino=56124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 651.891834][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 651.904146][T14216] random: crng reseeded on system resumption [ 653.189108][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 653.227815][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 653.236111][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 653.247705][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 655.341876][T10014] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 655.656076][T10014] (NULL device *): queue 0 connect admin queue failed (-111). [ 655.656114][T10014] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 655.656140][T10014] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 655.708059][ T5715] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 655.867149][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 655.872790][ T5715] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 655.884561][ T5715] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 655.884626][ T5715] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 655.884655][ T5715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 655.884680][ T5715] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 655.884706][ T5715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 655.884730][ T5715] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.884766][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.020841][T14250] netlink: zone id is out of range [ 656.020945][T14250] netlink: zone id is out of range [ 656.021112][T14250] netlink: zone id is out of range [ 656.021228][T14250] netlink: zone id is out of range [ 656.021719][T14250] netlink: zone id is out of range [ 656.021819][T14250] netlink: zone id is out of range [ 656.021836][T14250] netlink: zone id is out of range [ 656.021953][T14250] netlink: zone id is out of range [ 656.021997][T14250] netlink: zone id is out of range [ 656.022088][T14250] netlink: zone id is out of range [ 656.231156][ T5715] usb 4-1: GET_CAPABILITIES returned 0 [ 656.231220][ T5715] usbtmc 4-1:16.0: can't read capabilities [ 656.262519][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 656.376844][T14237] team0 (unregistering): Port device team_slave_0 removed [ 656.428114][T14237] team0 (unregistering): Port device team_slave_1 removed [ 656.578803][T14269] sit0: entered promiscuous mode [ 656.610095][T14269] netlink: 'syz.2.2642': attribute type 1 has an invalid length. [ 656.610115][T14269] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2642'. [ 657.017944][ T5815] usb 4-1: USB disconnect, device number 24 [ 657.387437][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'. [ 657.667145][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 657.680078][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 657.690408][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 657.690472][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 659.201279][T14282] binder: 14280:14282 ioctl c00c6211 0 returned -14 [ 659.758893][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 659.784269][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 659.784365][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 659.785519][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 661.832892][T10014] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 661.838900][T10014] (NULL device *): queue 0 connect admin queue failed (-111). [ 661.838921][T10014] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 661.838935][T10014] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 662.171782][T14296] netlink: 'syz.0.2649': attribute type 9 has an invalid length. [ 662.933154][T14302] net_ratelimit: 9 callbacks suppressed [ 662.940460][T14302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.817184][T14309] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 663.920094][ T6472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 663.939245][ T6472] (NULL device *): queue 0 connect admin queue failed (-111). [ 663.939350][ T6472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 663.939448][ T6472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 666.094403][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 666.096554][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 666.096573][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 666.096587][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 667.326167][T14343] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 667.347667][T14343] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 667.365189][T14343] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 667.474724][T14343] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 667.762855][ T31] audit: type=1400 audit(1788170014.066:959): avc: denied { write } for pid=14350 comm="syz.1.2661" name="configs" dev="configfs" ino=7962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 667.791917][ T31] audit: type=1400 audit(1788170014.096:960): avc: denied { write } for pid=14350 comm="syz.1.2661" name="functions" dev="configfs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 668.720896][ T6472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 668.745733][ T6472] (NULL device *): queue 0 connect admin queue failed (-111). [ 668.745758][ T6472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 668.745771][ T6472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 669.500595][ T31] audit: type=1400 audit(1788170015.066:961): avc: denied { write } for pid=14354 comm="syz.3.2663" name="functions" dev="configfs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 669.500650][ T31] audit: type=1400 audit(1788170015.246:962): avc: denied { write } for pid=14354 comm="syz.3.2663" name="color_matching" dev="configfs" ino=57044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 669.742734][ T5612] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 670.889759][T14372] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 670.918573][T10044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 670.950774][T10044] (NULL device *): queue 0 connect admin queue failed (-111). [ 670.958672][T10044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 670.958737][T10044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 671.006943][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 671.016273][T14372] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.410983][ T31] audit: type=1400 audit(1788170017.716:963): avc: denied { write } for pid=14376 comm="syz.3.2668" name="strings" dev="configfs" ino=7963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 671.470784][ T31] audit: type=1400 audit(1788170017.776:964): avc: denied { write } for pid=14376 comm="syz.3.2668" name="functions" dev="configfs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 671.518269][ T31] audit: type=1400 audit(1788170017.826:965): avc: denied { write } for pid=14376 comm="syz.3.2668" name="strings" dev="configfs" ino=53458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 671.523861][ T31] audit: type=1400 audit(1788170017.826:966): avc: denied { write } for pid=14376 comm="syz.3.2668" name="c.1" dev="configfs" ino=53457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 671.530726][ T31] audit: type=1400 audit(1788170017.836:967): avc: denied { write } for pid=14376 comm="syz.3.2668" name="c.1" dev="configfs" ino=53457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 671.585721][T14378] udc dummy_udc.0: failed to start g1: -19 [ 671.851755][T14381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.874083][T14378] UDC core: g1: couldn't find an available UDC or it's busy [ 672.699606][T14394] openvswitch: netlink: Flow key attr not present in new flow. [ 673.027044][ T6408] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 673.027099][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 673.028506][ T6408] (NULL device *): queue 0 connect admin queue failed (-111). [ 673.028527][ T6408] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 673.028541][ T6408] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 674.227169][ T5695] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 674.518344][ T5695] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 674.529028][ T5695] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 674.529061][ T5695] usb 5-1: config 1 has no interface number 0 [ 674.544794][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.544827][ T5695] usb 5-1: Product: syz [ 674.544851][ T5695] usb 5-1: Manufacturer: syz [ 674.544868][ T5695] usb 5-1: SerialNumber: syz [ 674.586707][ T5695] usb 5-1: cannot find UAC_HEADER [ 675.115593][T10044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 675.129352][T10044] (NULL device *): queue 0 connect admin queue failed (-111). [ 675.137135][T10044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 675.141392][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 675.145276][T10044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 675.251749][T14428] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 675.649133][ T5695] snd-usb-audio 5-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 675.666252][ T5695] usb 5-1: USB disconnect, device number 33 [ 675.755699][T14430] : entered allmulticast mode [ 675.794916][T14430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2680'. [ 675.893088][T14429] : left allmulticast mode [ 675.957892][ T6472] Bluetooth: hci5: Frame reassembly failed (-84) [ 675.974252][T14438] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 676.059882][T14161] udevd[14161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.182192][ T31] audit: type=1400 audit(1788170022.486:968): avc: denied { watch_reads } for pid=14440 comm="syz.0.2684" path="/594" dev="tmpfs" ino=3180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 677.216586][ T6472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 677.258444][ T6472] (NULL device *): queue 0 connect admin queue failed (-111). [ 677.258472][ T6472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 677.258492][ T6472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 678.003011][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 678.012667][T13349] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 679.267170][ T6472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 679.268836][ T6472] (NULL device *): queue 0 connect admin queue failed (-111). [ 679.268853][ T6472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 679.268867][ T6472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 679.595987][ T31] audit: type=1400 audit(1788170025.876:969): avc: denied { accept } for pid=14464 comm="syz.1.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 679.596146][ T31] audit: type=1400 audit(1788170025.886:970): avc: denied { write } for pid=14464 comm="syz.1.2689" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 679.928841][ T31] audit: type=1804 audit(1788170026.226:971): pid=14465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2679" name="/newroot/527/file0" dev="fuse" ino=1 res=1 errno=0 [ 680.232208][ T31] audit: type=1400 audit(1788170026.536:972): avc: denied { listen } for pid=14471 comm="syz.4.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 680.260482][T14474] 9p: Bad value for 'rfdno' [ 681.464673][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2691'. [ 681.468848][T14479] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 681.500453][T10022] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 681.512769][T10022] (NULL device *): queue 0 connect admin queue failed (-111). [ 681.512799][T10022] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 681.512817][T10022] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 682.068668][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 682.068746][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.507072][T13349] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 682.634836][T14487] xt_CT: No such helper "netbios-ns" [ 683.976988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 684.088057][ T31] audit: type=1400 audit(1788170029.976:973): avc: denied { setopt } for pid=14496 comm="syz.1.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 684.202770][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 684.206286][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 684.206306][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 684.206320][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 686.227707][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 686.227864][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 686.227881][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 686.227894][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 687.847106][ T983] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 688.167013][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 688.173841][ T983] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 688.187738][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.242063][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.242095][ T983] usb 2-1: Product: syz [ 688.242122][ T983] usb 2-1: Manufacturer: syz [ 688.250453][ T983] usb 2-1: SerialNumber: syz [ 688.282502][ T983] usb 2-1: config 0 descriptor?? [ 688.298915][ T983] f81534 2-1:0.0: required endpoints missing [ 688.307703][T10044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 688.320796][T10044] (NULL device *): queue 0 connect admin queue failed (-111). [ 688.320830][T10044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 688.320845][T10044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 688.324333][T14535] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2702'. [ 688.324350][T14535] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2702'. [ 688.324379][T14535] netlink: 'syz.2.2702': attribute type 6 has an invalid length. [ 688.324390][T14535] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2702'. [ 689.944627][T14544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14544 comm=syz.3.2706 [ 689.989974][T14546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2707'. [ 690.401282][ T6472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 690.402492][ T6472] (NULL device *): queue 0 connect admin queue failed (-111). [ 690.402549][ T6472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 690.402569][ T6472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 691.183306][ T5815] usb 2-1: USB disconnect, device number 30 [ 692.683938][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 692.685573][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 692.685609][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 692.685628][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 693.340466][T14560] lo speed is unknown, defaulting to 1000 [ 693.554436][T14548] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 694.828409][T10027] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 694.845787][T10027] (NULL device *): queue 0 connect admin queue failed (-111). [ 694.845817][T10027] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 694.845840][T10027] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 695.244112][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'. [ 695.244174][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'. [ 696.017992][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 696.867151][T10022] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 696.867577][T10022] (NULL device *): queue 0 connect admin queue failed (-111). [ 696.867653][T10022] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 696.867720][T10022] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 697.188462][ T5696] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 697.366952][ T5696] usb 2-1: device descriptor read/64, error -71 [ 697.739147][ T5696] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 697.907071][ T5696] usb 2-1: device descriptor read/64, error -71 [ 697.939121][T14601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.496031][T14606] overlayfs: missing 'lowerdir' [ 698.561086][T14608] overlayfs: overlapping lowerdir path [ 698.874034][ T5696] usb usb2-port1: attempt power cycle [ 698.948333][ T6408] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 698.965529][ T6408] (NULL device *): queue 0 connect admin queue failed (-111). [ 698.973385][ T6408] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 698.981998][ T6408] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 699.376956][ T5696] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 699.492021][ T5696] usb 2-1: device descriptor read/8, error -71 [ 701.033131][ T6408] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 701.160679][ T6408] (NULL device *): queue 0 connect admin queue failed (-111). [ 701.168487][ T6408] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 701.178851][ T6408] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 701.291786][ T31] audit: type=1400 audit(1788170047.596:974): avc: denied { create } for pid=14624 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 701.313593][ T31] audit: type=1400 audit(1788170047.616:975): avc: denied { setopt } for pid=14624 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 701.333266][ T31] audit: type=1400 audit(1788170047.636:976): avc: denied { write } for pid=14624 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 701.491689][T14629] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 702.573346][T14637] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 702.578901][ T31] audit: type=1400 audit(1788170048.876:977): avc: denied { write } for pid=14636 comm="syz.0.2730" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=58619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 702.578953][ T31] audit: type=1400 audit(1788170048.876:978): avc: denied { create } for pid=14636 comm="syz.0.2730" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 702.744936][ T31] audit: type=1400 audit(1788170049.046:979): avc: denied { read } for pid=14624 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 703.194768][T10027] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 703.223858][T10027] (NULL device *): queue 0 connect admin queue failed (-111). [ 703.233208][T10027] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 703.233258][T10027] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 704.971335][ T31] audit: type=1400 audit(1788170051.286:980): avc: denied { getopt } for pid=14665 comm="syz.3.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 705.281025][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 705.281621][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 705.283215][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 705.283861][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 707.303529][T14673] ceph: No mds server is up or the cluster is laggy [ 707.366330][T10040] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 707.370159][T10040] (NULL device *): queue 0 connect admin queue failed (-111). [ 707.370178][T10040] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 707.370191][T10040] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 707.437141][ T10] libceph: connect (1)[c::]:6789 error -101 [ 707.448330][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 708.181532][T14688] IPVS: sh: FWM 3 0x00000003 - no destination available [ 709.467190][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 709.481848][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 709.481879][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 709.481899][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 709.787387][T14715] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input210 [ 709.840662][T14716] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2745'. [ 709.840711][T14716] tc_dump_action: action bad kind [ 709.938763][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2740'. [ 709.941512][T14717] xfrm1: entered promiscuous mode [ 709.941538][T14717] xfrm1: entered allmulticast mode [ 709.941889][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2740'. [ 710.321119][T14721] fuse: fd is not a fuse device [ 710.500465][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 710.672813][ T5815] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 710.897462][ T5815] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 710.908222][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.908253][ T5815] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 711.338337][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.338387][ T5815] usb 5-1: Product: syz [ 711.338411][ T5815] usb 5-1: Manufacturer: syz [ 711.338426][ T5815] usb 5-1: SerialNumber: syz [ 711.341041][ T5815] usb 5-1: config 0 descriptor?? [ 711.509547][T10044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 711.511005][T10044] (NULL device *): queue 0 connect admin queue failed (-111). [ 711.511022][T10044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 711.511036][T10044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 712.140131][T13349] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 712.152202][ T31] audit: type=1400 audit(1788170058.466:981): avc: denied { write } for pid=14732 comm="syz.2.2751" name="functions" dev="configfs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 712.154822][ T31] audit: type=1400 audit(1788170058.466:982): avc: denied { append } for pid=14732 comm="syz.2.2751" name="id" dev="configfs" ino=58818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 712.883230][ T31] audit: type=1400 audit(1788170059.186:983): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 713.169985][T14745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14745 comm=syz.0.2753 [ 713.629432][ T3279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 713.650340][ T3279] (NULL device *): queue 0 connect admin queue failed (-111). [ 713.658594][ T3279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 713.666509][ T3279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 714.377282][ T5815] usb 5-1: USB disconnect, device number 34 [ 715.747046][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 715.759418][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 715.759440][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 715.759455][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 715.914018][T14772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.404614][T14794] syz.4.2764 (14794) used greatest stack depth: 18248 bytes left [ 719.417296][T14787] block2mtd: erasesize must be a divisor of device size [ 719.425406][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 719.429340][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 719.429362][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 719.429377][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 719.471926][T14791] MTDSB: Device #1 doesn't appear to exist [ 719.471926][T14791] [ 719.699807][T14799] kAFS: unable to lookup cell '/,c¾ûL' [ 719.719969][ T5815] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 719.843174][ T4967] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 719.843281][ T4967] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 719.843485][ T4967] loop0: [ 719.978305][ T5815] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 719.994003][ T5815] usb 5-1: config 6 has an invalid interface number: 198 but max is 0 [ 719.994036][ T5815] usb 5-1: config 6 has no interface number 0 [ 719.995058][ T5815] usb 5-1: config 6 interface 198 has no altsetting 0 [ 720.024019][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.032662][ T5815] usb 5-1: Product: syz [ 720.032728][ T5815] usb 5-1: Manufacturer: syz [ 720.043852][ T5815] usb 5-1: SerialNumber: syz [ 720.483429][ T5815] go7007 5-1:6.198: probe with driver go7007 failed with error -12 [ 720.580077][ T5815] usb 5-1: USB disconnect, device number 35 [ 721.661830][ T3279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 721.663364][ T3279] (NULL device *): queue 0 connect admin queue failed (-111). [ 721.663383][ T3279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 721.663397][ T3279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 723.013475][ T31] audit: type=1400 audit(1788170068.866:984): avc: denied { connect } for pid=14809 comm="syz.3.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 723.013534][ T31] audit: type=1400 audit(1788170068.876:985): avc: denied { accept } for pid=14809 comm="syz.3.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 723.677039][T10022] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 723.690905][T10022] (NULL device *): queue 0 connect admin queue failed (-111). [ 723.690938][T10022] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 723.690978][T10022] nvme nvme0: NVME-FC{0}: Max reconnect attempts (300) reached. [ 723.691397][T10044] nvme nvme0: Removing ctrl: NQN "n" [ 723.787008][ T5815] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 723.948619][ T5815] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 723.961490][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.961544][ T5815] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 723.961647][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.026625][ T5815] usb 4-1: config 0 descriptor?? [ 724.320892][T14831] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 724.344886][ T31] audit: type=1400 audit(1788170070.656:986): avc: denied { mounton } for pid=14828 comm="syz.2.2776" path="/545/debug/tracing/trace_pipe" dev="tracefs" ino=1367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 724.592047][ T5815] usb 4-1: USB disconnect, device number 25 [ 725.286240][T14831] 9p: Could not find request transport: fd0x0000000000000008 [ 725.449408][ T31] audit: type=1400 audit(1788170071.756:987): avc: denied { map } for pid=14834 comm="syz.3.2777" path="socket:[59172]" dev="sockfs" ino=59172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 726.653811][T14843] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 730.465166][T14305] syz.4.2652 (14305) used greatest stack depth: 17520 bytes left [ 730.497206][ T5815] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 730.690327][ T5815] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 730.691205][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.691225][ T5815] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 730.691251][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.695144][ T5815] usb 5-1: config 0 descriptor?? [ 730.717115][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 730.867007][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 730.888719][ T10] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 731.000767][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.000806][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 731.072435][ T5696] usb 5-1: USB disconnect, device number 36 [ 731.359001][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e6dc00: rx timeout, send abort [ 731.388419][ T31] audit: type=1400 audit(1788170077.686:988): avc: denied { read } for pid=4949 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 731.388473][ T31] audit: type=1400 audit(1788170077.686:989): avc: denied { search } for pid=4949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.475995][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.476031][ T10] usb 4-1: Product: syz [ 731.476056][ T10] usb 4-1: Manufacturer: syz [ 731.476073][ T10] usb 4-1: SerialNumber: syz [ 731.512932][ T31] audit: type=1400 audit(1788170077.776:990): avc: denied { write search } for pid=4949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.513103][ T31] audit: type=1400 audit(1788170077.776:991): avc: denied { add_name } for pid=4949 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.513185][ T31] audit: type=1400 audit(1788170077.776:992): avc: denied { create } for pid=4949 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 731.552354][ T31] audit: type=1400 audit(1788170077.856:993): avc: denied { append open } for pid=4949 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 731.554604][ T31] audit: type=1400 audit(1788170077.856:994): avc: denied { getattr } for pid=4949 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 731.789092][ T10] usb 4-1: config 0 descriptor?? [ 731.860969][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e6dc00: abort rx timeout. Force session deactivation [ 732.445256][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.445630][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.605665][ T5696] usb 4-1: USB disconnect, device number 26 [ 733.322782][T14895] hpfs: Bad magic ... probably not HPFS [ 736.140465][ T983] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 736.297263][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 736.307952][ T983] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 736.328089][ T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.338414][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.349492][ T983] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 97 [ 736.359334][ T983] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.458896][ T983] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 736.458933][ T983] usb 3-1: Manufacturer: syz [ 736.475486][ T983] usb 3-1: config 0 descriptor?? [ 736.659261][ T31] audit: type=1400 audit(1788170082.956:995): avc: denied { write } for pid=14933 comm="syz.4.2799" name="functions" dev="configfs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 736.835467][T14922] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5597] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14922] [ 736.861312][ T31] audit: type=1400 audit(1788170083.166:996): avc: denied { write } for pid=14933 comm="syz.4.2799" name="c.1" dev="configfs" ino=53457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 736.890778][ T31] audit: type=1400 audit(1788170083.196:997): avc: denied { write } for pid=14933 comm="syz.4.2799" name="c.1" dev="configfs" ino=53457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 736.967121][ T983] rc_core: IR keymap rc-hauppauge not found [ 736.973236][ T983] Registered IR keymap rc-empty [ 736.979104][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 737.107195][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 737.329571][ T983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 737.661274][ T983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input211 [ 737.675734][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 737.687207][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 737.707191][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 737.729221][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 737.747613][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 737.750518][T14952] cgroup: noprefix used incorrectly [ 738.629340][ T31] audit: type=1400 audit(1788170084.496:998): avc: denied { create } for pid=14950 comm="syz.4.2802" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 738.650403][ T31] audit: type=1400 audit(1788170084.506:999): avc: denied { write } for pid=14950 comm="syz.4.2802" name="file2" dev="tmpfs" ino=2962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 738.650461][ T31] audit: type=1400 audit(1788170084.516:1000): avc: denied { open } for pid=14950 comm="syz.4.2802" path="/547/file2" dev="tmpfs" ino=2962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 738.650499][ T31] audit: type=1400 audit(1788170084.526:1001): avc: denied { ioctl } for pid=14950 comm="syz.4.2802" path="/547/file2" dev="tmpfs" ino=2962 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 738.650540][ T31] audit: type=1400 audit(1788170084.936:1002): avc: denied { unlink } for pid=5601 comm="syz-executor" name="file2" dev="tmpfs" ino=2962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 738.658608][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 738.678708][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 738.698910][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 738.727893][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 738.758244][ T983] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 738.775496][ T31] audit: type=1400 audit(1788170085.066:1003): avc: denied { execstack } for pid=14955 comm="syz.4.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 738.782849][ T983] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 738.782867][ T983] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 738.803000][ T983] usb 3-1: USB disconnect, device number 21 [ 739.134543][T14962] netlink: 'syz.3.2806': attribute type 1 has an invalid length. [ 739.153630][T14962] bond1: entered promiscuous mode [ 739.153849][T14962] bond1: entered allmulticast mode [ 739.155336][T14962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 739.241832][T14962] erspan1: entered allmulticast mode [ 739.266386][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2806'. [ 739.295107][T14962] bond1: (slave erspan1): making interface the new active one [ 739.302924][T14962] erspan1: entered promiscuous mode [ 739.317911][T14962] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 739.337526][ T983] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 739.388331][T14966] bond1 (unregistering): (slave erspan1): Releasing active interface [ 739.388399][T14966] erspan1: left promiscuous mode [ 739.460197][T14966] bond1 (unregistering): Released all slaves [ 739.499545][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 739.516199][ T983] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 739.537885][ T983] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 739.546490][ T983] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 739.546546][ T983] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 739.573858][ T983] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 739.573914][ T983] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 739.573946][ T983] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.587545][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.114259][ T983] usb 3-1: GET_CAPABILITIES returned 0 [ 740.114400][ T983] usbtmc 3-1:16.0: can't read capabilities [ 740.675363][ T983] usb 3-1: USB disconnect, device number 22 [ 740.997703][T14970] tipc: Started in network mode [ 740.997725][T14970] tipc: Node identity 4, cluster identity 4711 [ 740.997738][T14970] tipc: Node number set to 4 [ 742.233805][T14983] erspan0: left allmulticast mode [ 742.233874][T14983] erspan0: left promiscuous mode [ 742.234022][T14983] bridge1: port 1(erspan0) entered disabled state [ 742.360990][T14983] bridge_slave_0: left allmulticast mode [ 742.361039][T14983] bridge_slave_0: left promiscuous mode [ 742.361190][T14983] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.416815][T14988] netlink: 'syz.1.2810': attribute type 10 has an invalid length. [ 742.449407][T14983] bridge_slave_1: left allmulticast mode [ 742.459851][T14983] bridge_slave_1: left promiscuous mode [ 742.460017][T14983] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.238301][T14983] bond0: (slave bond_slave_0): Releasing backup interface [ 743.253496][T14983] bond0: (slave bond_slave_1): Releasing backup interface [ 743.329809][T14983] team0: Port device team_slave_0 removed [ 743.362890][T14983] team0: Port device team_slave_1 removed [ 743.369287][T14983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 743.374398][T14984] team0: Device xfrm0 is of different type [ 743.440328][T14988] : entered promiscuous mode [ 743.488945][T14988] bond0: (slave ): Enslaving as an active interface with an up link [ 743.509061][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.509109][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 743.857340][ T31] audit: type=1400 audit(1788170090.076:1004): avc: denied { accept } for pid=15002 comm="syz.0.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 744.267097][ T9] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 744.417499][ T9] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 744.418322][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 744.418341][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.418374][ T9] usb 2-1: config 0 has no interface number 0 [ 744.418401][ T9] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 744.418422][ T9] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 744.420108][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.420127][ T9] usb 2-1: Product: syz [ 744.420140][ T9] usb 2-1: Manufacturer: syz [ 744.420151][ T9] usb 2-1: SerialNumber: syz [ 744.446982][ T9] usb 2-1: config 0 descriptor?? [ 744.450165][T15003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 744.450259][T15003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 744.523019][ T9] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 745.155372][T15015] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 745.289861][ T9] usb 2-1: USB disconnect, device number 35 [ 746.474655][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2817'. [ 747.012349][T13349] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 747.022480][T15034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2821'. [ 747.155746][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'. [ 747.696326][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 747.946942][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 747.947871][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 747.949103][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 747.949148][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 747.949427][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 747.949587][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 747.949731][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 747.949870][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.950023][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.486977][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 748.487017][ T9] usbtmc 3-1:16.0: can't read capabilities [ 748.680942][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 748.690726][T15036] usbtmc 3-1:16.0: Unable to send data, error -71 [ 748.713736][ T9] usb 3-1: USB disconnect, device number 23 [ 748.810800][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 748.992691][T15055] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 749.117150][T15055] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 750.016415][ T31] audit: type=1400 audit(1788170096.286:1005): avc: denied { accept } for pid=15058 comm="syz.0.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 751.241057][T15077] tipc: Enabled bearer , priority 10 [ 751.350038][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 751.446789][T15075] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 751.456853][T15075] block device autoloading is deprecated and will be removed. [ 753.646949][ T5715] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 753.797407][ T5715] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 753.808736][ T5715] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 753.821397][ T5715] usb 5-1: config 0 interface 0 has no altsetting 0 [ 753.829846][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 753.838146][ T5715] usb 5-1: Product: syz [ 753.842384][ T5715] usb 5-1: Manufacturer: syz [ 753.847063][ T5715] usb 5-1: SerialNumber: syz [ 753.854225][ T5715] usb 5-1: config 0 descriptor?? [ 753.929450][ T5715] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 754.012979][T14863] udevd[14863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 754.087176][ T5724] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 754.088658][ T30] usb 5-1: USB disconnect, device number 37 [ 754.242914][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 754.242975][ T5724] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 754.243781][ T5724] usb 3-1: config 110 has an invalid interface number: 99 but max is 0 [ 754.243800][ T5724] usb 3-1: config 110 has no interface number 0 [ 754.243830][ T5724] usb 3-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 754.243849][ T5724] usb 3-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 754.243869][ T5724] usb 3-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 754.243888][ T5724] usb 3-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 754.243914][ T5724] usb 3-1: config 110 interface 99 has no altsetting 0 [ 754.245540][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.245557][ T5724] usb 3-1: Product: syz [ 754.245569][ T5724] usb 3-1: Manufacturer: syz [ 754.245581][ T5724] usb 3-1: SerialNumber: syz [ 754.248465][T15094] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 754.248542][T15094] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 754.529945][T15094] netlink: 'syz.2.2838': attribute type 13 has an invalid length. [ 754.959261][T15102] binder: 15093:15102 ioctl 4018620d 0 returned -22 [ 755.087274][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 755.168926][ T5724] rndis_host 3-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 755.169319][ T5724] cdc_acm 3-1:110.99: Zero length descriptor references [ 755.169337][ T5724] cdc_acm 3-1:110.99: probe with driver cdc_acm failed with error -22 [ 755.195454][ T5724] usb 3-1: USB disconnect, device number 24 [ 755.375485][ T31] audit: type=1400 audit(1788170101.676:1006): avc: denied { setopt } for pid=15108 comm="syz.1.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 755.427528][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 755.643738][T10022] IPVS: starting estimator thread 0... [ 755.737261][T15116] IPVS: using max 38 ests per chain, 91200 per kthread [ 757.816014][ T31] audit: type=1400 audit(1788170104.116:1007): avc: denied { write } for pid=15134 comm="syz.4.2848" name="header" dev="configfs" ino=57040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.844212][ T31] audit: type=1400 audit(1788170104.156:1008): avc: denied { write } for pid=15134 comm="syz.4.2848" name="h" dev="configfs" ino=59757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.853422][ T31] audit: type=1400 audit(1788170104.156:1009): avc: denied { write } for pid=15134 comm="syz.4.2848" name="fs" dev="configfs" ino=57047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.876746][ T31] audit: type=1400 audit(1788170104.176:1010): avc: denied { write } for pid=15134 comm="syz.4.2848" name="fs" dev="configfs" ino=57047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.904903][ T31] audit: type=1400 audit(1788170104.206:1011): avc: denied { write } for pid=15134 comm="syz.4.2848" name="hs" dev="configfs" ino=57048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.905115][ T31] audit: type=1400 audit(1788170104.206:1012): avc: denied { write } for pid=15134 comm="syz.4.2848" name="hs" dev="configfs" ino=57048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.933969][T15140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.943667][ T31] audit: type=1400 audit(1788170104.256:1013): avc: denied { write } for pid=15134 comm="syz.4.2848" name="ss" dev="configfs" ino=57049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.948794][ T31] audit: type=1400 audit(1788170104.256:1014): avc: denied { write } for pid=15134 comm="syz.4.2848" name="ss" dev="configfs" ino=57049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.960491][ T31] audit: type=1400 audit(1788170104.256:1015): avc: denied { write } for pid=15134 comm="syz.4.2848" name="header" dev="configfs" ino=57027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 760.444348][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 760.461136][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 760.477358][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 760.478101][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 760.478699][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 760.741895][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 761.930912][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 761.930967][ T31] audit: type=1400 audit(1788170108.126:1022): avc: denied { ioctl } for pid=15171 comm="syz.2.2855" path="socket:[59785]" dev="sockfs" ino=59785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 762.053666][ T5940] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.070946][T15172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.110275][T15177] lo: Caught tx_queue_len zero misconfig [ 762.110492][T15177] sch_fq: defrate 0 ignored. [ 762.441583][ T5940] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.547393][ T5612] Bluetooth: hci3: command tx timeout [ 762.604809][ T5940] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.689181][T15190] netlink: get zone limit has 4 unknown bytes [ 762.708213][T15190] jffs2: notice: (15190) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 762.729313][ T31] audit: type=1400 audit(1788170109.046:1023): avc: denied { write } for pid=15188 comm="syz.4.2859" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 762.931693][T15196] block device autoloading is deprecated and will be removed. [ 762.949610][ T5940] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.386575][T15166] lo speed is unknown, defaulting to 1000 [ 763.919337][T15203] affs: No valid root block on device nullb0 [ 763.941789][ T31] audit: type=1400 audit(1788170110.246:1024): avc: denied { ioctl } for pid=15209 comm="syz.4.2861" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 764.060100][ T31] audit: type=1400 audit(1788170110.366:1025): avc: denied { search } for pid=5262 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.060632][ T31] audit: type=1400 audit(1788170110.366:1026): avc: denied { search } for pid=5262 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.061719][ T31] audit: type=1400 audit(1788170110.366:1027): avc: denied { search } for pid=5262 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.571917][ T31] audit: type=1400 audit(1788170110.886:1028): avc: denied { read } for pid=15222 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.597266][ T31] audit: type=1400 audit(1788170110.906:1029): avc: denied { read open } for pid=15222 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.628922][ T31] audit: type=1400 audit(1788170110.936:1030): avc: denied { getattr } for pid=15222 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.715013][ T5612] Bluetooth: hci3: command tx timeout [ 765.065257][T15229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.066995][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.447481][ T31] audit: type=1400 audit(1788170112.756:1031): avc: denied { ioctl } for pid=15225 comm="syz.1.2863" path="socket:[60003]" dev="sockfs" ino=60003 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.764932][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2866'. [ 767.249957][ T5612] Bluetooth: hci3: command tx timeout [ 767.305263][ T5940] bond0 (unregistering): Released all slaves [ 767.320477][ T31] audit: type=1400 audit(1788170113.626:1032): avc: denied { write } for pid=15218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.340383][ T31] audit: type=1400 audit(1788170113.626:1033): avc: denied { add_name } for pid=15218 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.387845][T15247] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 767.660824][ T5940] tipc: Left network mode [ 767.786588][ T31] audit: type=1400 audit(1788170114.086:1034): avc: denied { write } for pid=15256 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.812458][ T31] audit: type=1400 audit(1788170114.116:1035): avc: denied { remove_name } for pid=15256 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=10320 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.002787][T15166] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.002880][T15166] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.003003][T15166] bridge_slave_0: entered allmulticast mode [ 768.009260][T15166] bridge_slave_0: entered promiscuous mode [ 768.017290][T15166] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.017362][T15166] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.017448][T15166] bridge_slave_1: entered allmulticast mode [ 768.022415][T15166] bridge_slave_1: entered promiscuous mode [ 768.095396][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 768.221666][T15166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.235535][T15166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.419755][T15166] team0: Port device team_slave_0 added [ 768.453011][T15166] team0: Port device team_slave_1 added [ 768.875784][T15166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.876044][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.878924][T15166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.026982][ T5940] hsr_slave_0: left promiscuous mode [ 769.032399][ T5940] hsr_slave_1: left promiscuous mode [ 769.104779][ T5940] veth1_macvtap: left promiscuous mode [ 769.104827][ T5940] veth0_macvtap: left promiscuous mode [ 769.104956][ T5940] veth1_vlan: left promiscuous mode [ 769.105005][ T5940] veth0_vlan: left promiscuous mode [ 770.094511][ T5612] Bluetooth: hci3: command tx timeout [ 770.390385][ T31] audit: type=1400 audit(1788170116.696:1036): avc: denied { write } for pid=15265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.563628][ T31] audit: type=1400 audit(1788170117.866:1037): avc: denied { write } for pid=15293 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.494087][T15166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.494111][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.494132][T15166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.622674][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 772.634242][T15306] sit0: left promiscuous mode [ 772.643377][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.645382][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.710958][T15166] hsr_slave_0: entered promiscuous mode [ 772.719286][T15166] hsr_slave_1: entered promiscuous mode [ 772.778211][T15317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.850455][T15326] lo: left promiscuous mode [ 773.852031][T15326] tunl0: left promiscuous mode [ 773.853012][T15326] gre0: left promiscuous mode [ 773.855551][T15326] gretap0: left promiscuous mode [ 773.856809][T15326] erspan0: left promiscuous mode [ 773.862166][T15326] ip_vti0: left promiscuous mode [ 773.863105][T15326] ip6_vti0: left promiscuous mode [ 773.864185][T15326] sit0: left promiscuous mode [ 773.868433][T15326] ip6tnl0: left promiscuous mode [ 773.869550][T15326] ip6gre0: left promiscuous mode [ 773.870948][T15326] syz_tun: left promiscuous mode [ 773.872051][T15326] ip6gretap0: left promiscuous mode [ 773.872855][T15326] vcan0: left promiscuous mode [ 773.873296][T15326] bond0: left promiscuous mode [ 773.873650][T15326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.873913][T15326] team0: left promiscuous mode [ 773.874271][T15326] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.874628][T15326] dummy0: left promiscuous mode [ 773.875278][T15326] nlmon0: left promiscuous mode [ 773.875717][T15326] batadv0: left promiscuous mode [ 773.876302][T15326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.876577][T15326] vxcan0: left promiscuous mode [ 773.877079][T15326] vxcan1: left promiscuous mode [ 773.877474][T15326] veth0: left promiscuous mode [ 773.877895][T15326] veth1: left promiscuous mode [ 774.033257][T15326] wg0: left promiscuous mode [ 774.088836][T15326] wg1: left promiscuous mode [ 774.090072][T15336] netlink: 'syz.1.2880': attribute type 1 has an invalid length. [ 774.371561][T15326] wg2: left promiscuous mode [ 774.377760][T15326] veth0_to_bridge: left promiscuous mode [ 774.381247][T15326] bridge_slave_0: left promiscuous mode [ 774.383225][T15326] veth1_to_bridge: left promiscuous mode [ 774.386438][T15326] bridge_slave_1: left promiscuous mode [ 774.388342][T15326] veth0_to_bond: left promiscuous mode [ 774.391553][T15326] bond_slave_0: left promiscuous mode [ 774.393503][T15326] veth1_to_bond: left promiscuous mode [ 774.396686][T15326] bond_slave_1: left promiscuous mode [ 774.398600][T15326] veth0_to_team: left promiscuous mode [ 774.401861][T15326] team_slave_0: left promiscuous mode [ 774.403806][T15326] veth1_to_team: left promiscuous mode [ 774.406765][T15326] team_slave_1: left promiscuous mode [ 774.407243][T15326] veth0_to_batadv: left promiscuous mode [ 774.407940][T15326] batadv_slave_0: left promiscuous mode [ 774.408588][T15326] veth1_to_batadv: left promiscuous mode [ 774.409318][T15326] batadv_slave_1: left promiscuous mode [ 774.409978][T15326] xfrm0: left promiscuous mode [ 774.411040][T15326] veth0_to_hsr: left promiscuous mode [ 774.412153][T15326] veth1_to_hsr: left promiscuous mode [ 774.413237][T15326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 774.413261][T15326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 774.414643][T15326] veth1_virt_wifi: left promiscuous mode [ 774.415477][T15326] veth0_virt_wifi: left promiscuous mode [ 774.416175][T15326] virt_wifi0: left promiscuous mode [ 774.416928][T15326] veth1_vlan: left promiscuous mode [ 774.685959][T15326] vlan0: left promiscuous mode [ 774.686734][T15326] veth1_vlan: entered promiscuous mode [ 774.711505][T15326] macvlan0: left promiscuous mode [ 774.712677][T15326] macvlan1: left promiscuous mode [ 774.713761][T15326] ipvlan1: left promiscuous mode [ 774.714538][T15326] veth1_macvtap: left promiscuous mode [ 774.715381][T15326] veth0_macvtap: left promiscuous mode [ 774.716510][T15326] veth0_macvtap: entered promiscuous mode [ 774.716641][T15326] macvtap0: left promiscuous mode [ 774.717611][T15326] veth1_macvtap: entered promiscuous mode [ 774.717763][T15326] macsec0: left promiscuous mode [ 774.718768][T15326] geneve0: left promiscuous mode [ 774.720081][T15326] geneve1: left promiscuous mode [ 774.721604][T15326] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 774.722122][T15326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 774.722608][T15326] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 774.722808][T15326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 774.723311][T15326] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 774.723514][T15326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 774.723992][T15326] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 774.724187][T15326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.724718][T15326] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 774.724734][T15326] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 774.725180][T15326] syztnl0: left promiscuous mode [ 774.725976][T15326] ip6tnl1: left promiscuous mode [ 774.726842][T15326] mac80211_hwsim hwsim28 wlan2: left promiscuous mode [ 774.727523][T15326] mac80211_hwsim hwsim29 wlan3: left promiscuous mode [ 774.728096][T15326] vlan1: left promiscuous mode [ 774.728108][T15326] hsr0: left promiscuous mode [ 774.728294][T15326] vlan1: left allmulticast mode [ 774.728304][T15326] hsr0: left allmulticast mode [ 774.728313][T15326] hsr_slave_0: left allmulticast mode [ 774.728325][T15326] hsr_slave_1: left allmulticast mode [ 774.729000][T15326] bond1: left promiscuous mode [ 774.729202][T15326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 774.729905][T15326] mac80211_hwsim hwsim30 wlan4: left promiscuous mode [ 774.730367][T15326] ipvlan2: left promiscuous mode [ 774.731010][T15326] mac80211_hwsim hwsim36 wlan5: left promiscuous mode [ 774.731513][T15326] veth2: left promiscuous mode [ 774.732027][T15326] veth3: left promiscuous mode [ 774.732609][T15326] mac80211_hwsim hwsim44 wlan6: left promiscuous mode [ 774.733320][T15326] mac80211_hwsim hwsim48 wlan7: left promiscuous mode [ 774.733986][T15326] mac80211_hwsim hwsim49 wlan8: left promiscuous mode [ 774.734613][T15326] mac80211_hwsim hwsim51 wlan1: left promiscuous mode [ 774.735223][T15326] mac80211_hwsim hwsim52 wlan9: left promiscuous mode [ 774.735864][T15326] mac80211_hwsim hwsim53 wlan10: left promiscuous mode [ 774.736473][T15326] mac80211_hwsim hwsim54 wlan11: left promiscuous mode [ 774.817273][ T6408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.817444][ T6408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.817703][ T6408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.817750][ T6408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.911787][ T30] lo speed is unknown, defaulting to 1000 [ 774.911805][ T30] syz2: Port: 1 Link ACTIVE [ 775.331424][T15333] : left promiscuous mode [ 775.350934][T15333] xfrm1: left promiscuous mode [ 775.767161][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.812661][T10044] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.813415][T10044] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 776.040705][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 776.707757][ T5715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 776.890637][ T5940] IPVS: stop unused estimator thread 0... [ 776.906665][ T31] audit: type=1400 audit(1788170123.216:1038): avc: denied { write } for pid=15362 comm="syz.2.2886" name="c.1" dev="configfs" ino=53457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 778.037051][ T30] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 778.186992][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 778.192649][ T30] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 778.192683][ T30] usb 2-1: no configurations [ 778.192696][ T30] usb 2-1: can't read configurations, error -22 [ 778.297892][T15382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15382 comm=syz.0.2888 [ 778.316976][ T30] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 778.329663][T15386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 778.441068][ T31] audit: type=1400 audit(1788170124.746:1039): avc: denied { write } for pid=15342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.546939][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 779.182775][ T30] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 779.192771][ T30] usb 2-1: no configurations [ 779.197562][ T30] usb 2-1: can't read configurations, error -22 [ 779.205969][ T30] usb usb2-port1: attempt power cycle [ 779.446892][ T31] audit: type=1400 audit(1788170125.746:1040): avc: denied { write } for pid=15397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.526953][ T5695] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 779.898677][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 779.937212][ T30] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 779.942765][T15166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 779.955596][T15166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.956281][T15166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 779.957547][ T5695] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 779.958840][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.958857][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 779.958891][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.961034][ T5695] usb 5-1: config 0 descriptor?? [ 779.963556][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 779.964046][ T30] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 779.964072][ T30] usb 2-1: no configurations [ 779.964081][ T30] usb 2-1: can't read configurations, error -22 [ 779.966385][ T5695] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 779.966664][ T5695] dvb-usb: bulk message failed: -22 (3/0) [ 780.067026][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 780.071426][T15166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.072020][T15166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 780.081662][ T5695] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 780.083575][ T5695] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 780.083614][ T5695] usb 5-1: media controller created [ 780.095528][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.121909][T15166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 780.135439][T15402] ip6gre1: entered allmulticast mode [ 780.137097][T15166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 780.148924][ T5695] dvb-usb: bulk message failed: -22 (6/0) [ 780.149169][ T5695] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 780.190080][T15389] dvb-usb: bulk message failed: -22 (2/0) [ 780.213021][T15166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.215329][ T5695] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input212 [ 780.236681][ T5695] dvb-usb: schedule remote query interval to 150 msecs. [ 780.236695][ T5695] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 780.284742][ T31] audit: type=1400 audit(1788170126.586:1041): avc: denied { validate_trans } for pid=15411 comm="syz.1.2893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 780.367342][ T5695] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 780.400910][ T5724] dvb-usb: bulk message failed: -22 (1/0) [ 780.400964][ T5724] dvb-usb: error while querying for an remote control event. [ 780.517900][ T5695] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 780.523858][ T5695] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 780.523879][ T5695] usb 3-1: config 0 has no interface number 0 [ 780.523906][ T5695] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 780.523927][ T5695] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 780.525185][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 780.525203][ T5695] usb 3-1: Manufacturer: syz [ 780.525216][ T5695] usb 3-1: SerialNumber: syz [ 780.532946][ T5695] usb 3-1: config 0 descriptor?? [ 780.559393][ T983] dvb-usb: bulk message failed: -22 (1/0) [ 780.559431][ T983] dvb-usb: error while querying for an remote control event. [ 780.570812][T15166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.618160][T15166] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.629543][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.629634][T10027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.653975][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.654080][T10044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.717303][ T983] dvb-usb: bulk message failed: -22 (1/0) [ 780.717342][ T983] dvb-usb: error while querying for an remote control event. [ 780.764217][ T31] audit: type=1400 audit(1788170127.066:1042): avc: denied { write } for pid=15418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.784558][ T5695] usbtouchscreen 3-1:0.214: Failed to read FW rev: -32 [ 780.784745][ T5695] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 780.879872][ T5695] dvb-usb: bulk message failed: -22 (1/0) [ 780.880512][ T5695] dvb-usb: error while querying for an remote control event. [ 780.949744][ T31] audit: type=1400 audit(1788170127.256:1043): avc: denied { write } for pid=15433 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.004798][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 781.039531][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 781.053826][ T30] dvb-usb: error while querying for an remote control event. [ 781.223585][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 781.223889][ T30] dvb-usb: error while querying for an remote control event. [ 781.444438][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 781.444583][ T30] dvb-usb: error while querying for an remote control event. [ 781.511355][ T30] usb 5-1: USB disconnect, device number 38 [ 782.491171][ T30] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 784.291781][T15470] ip6gre1: entered allmulticast mode [ 784.325390][ T6472] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 785.487233][ T30] usb 3-1: USB disconnect, device number 25 [ 785.530269][T15166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.831027][T15488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 786.613962][T15490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 788.707113][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.897738][ T5724] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 788.947421][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 789.305506][T15166] veth0_vlan: entered promiscuous mode [ 789.331448][T15166] veth1_vlan: entered promiscuous mode [ 789.406726][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2908'. [ 789.432141][T15166] veth0_macvtap: entered promiscuous mode [ 789.449784][T15166] veth1_macvtap: entered promiscuous mode [ 789.470576][T15166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.479801][T15166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.537185][ T5940] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.579366][T10044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.579769][T10044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.580045][T10044] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.703043][T10027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.703061][T10027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.749818][ T5695] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 790.179238][T15526] 9p: Bad value for 'version' [ 790.197695][T10027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.205597][T10027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.231878][ T31] audit: type=1400 audit(1788170136.536:1044): avc: denied { mounton } for pid=15166 comm="syz-executor" path="/root/syzkaller.lmmZel/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 790.539555][T15533] hpfs: Bad magic ... probably not HPFS [ 791.031054][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2852'. [ 791.052333][T15540] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.448226][T15540] bridge_slave_1 (unregistering): left allmulticast mode [ 791.448274][T15540] bridge_slave_1 (unregistering): left promiscuous mode [ 791.448339][T15540] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.612850][ T31] audit: type=1400 audit(1788170137.916:1045): avc: denied { bind } for pid=15542 comm="syz.2.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 793.343771][T15550] ubi0: attaching mtd0 [ 793.344711][T15550] ubi0: scanning is finished [ 793.344744][T15550] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 793.470768][T15553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2918'. [ 793.484889][ T31] audit: type=1326 audit(1788170139.766:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2059e159 code=0x7ffc0000 [ 793.484949][ T31] audit: type=1326 audit(1788170139.766:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2059e159 code=0x7ffc0000 [ 793.485002][ T31] audit: type=1326 audit(1788170139.776:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a2059e159 code=0x7ffc0000 [ 793.485041][ T31] audit: type=1326 audit(1788170139.776:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2059e159 code=0x7ffc0000 [ 793.485081][ T31] audit: type=1326 audit(1788170139.776:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2059e159 code=0x7ffc0000 [ 793.485128][ T31] audit: type=1326 audit(1788170139.776:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a2059e159 code=0x7ffc0000 [ 793.485169][ T31] audit: type=1326 audit(1788170139.776:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2059e159 code=0x7ffc0000 [ 793.485210][ T31] audit: type=1326 audit(1788170139.776:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2059e159 code=0x7ffc0000 [ 793.708524][T15550] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 794.347060][T15571] NILFS (nullb0): couldn't find nilfs on the device [ 794.709038][T15564] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 794.727579][T15564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 794.730438][T15564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 794.730553][T15564] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 794.730599][T15564] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 794.849903][T15564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 794.849977][T15564] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 794.874966][T15564] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 795.477517][ T31] kauditd_printk_skb: 100 callbacks suppressed [ 795.478535][ T31] audit: type=1400 audit(1788170141.736:1154): avc: denied { bind } for pid=15582 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 795.482700][ T31] audit: type=1400 audit(1788170141.736:1155): avc: denied { name_bind } for pid=15582 comm="syz.1.2921" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 795.482747][ T31] audit: type=1400 audit(1788170141.736:1156): avc: denied { node_bind } for pid=15582 comm="syz.1.2921" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 795.482784][ T31] audit: type=1400 audit(1788170141.746:1157): avc: denied { map_create } for pid=15587 comm="syz.4.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 795.482822][ T31] audit: type=1400 audit(1788170141.746:1158): avc: denied { perfmon } for pid=15587 comm="syz.4.2923" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 795.482858][ T31] audit: type=1400 audit(1788170141.746:1159): avc: denied { map_read map_write } for pid=15587 comm="syz.4.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 795.484745][ T31] audit: type=1400 audit(1788170141.746:1160): avc: denied { write } for pid=15582 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 795.517965][ T31] audit: type=1400 audit(1788170141.746:1161): avc: denied { connect } for pid=15582 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 795.521068][ T31] audit: type=1400 audit(1788170141.746:1162): avc: denied { name_connect } for pid=15582 comm="syz.1.2921" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 795.523139][ T31] audit: type=1400 audit(1788170141.776:1163): avc: denied { prog_run } for pid=15587 comm="syz.4.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 796.746678][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 796.786943][T13349] Bluetooth: hci1: command 0x0406 tx timeout [ 796.793075][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 796.802211][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 796.876965][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 797.916996][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 798.684645][T15606] tipc: Started in network mode [ 798.684669][T15606] tipc: Node identity 7f000001, cluster identity 4711 [ 798.684979][T15606] tipc: New replicast peer: 127.0.0.0 [ 798.686317][T15606] tipc: Enabled bearer , priority 10 [ 798.801547][T15640] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 798.847700][T15640] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 798.867078][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 798.947295][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 799.898930][ T9] tipc: Node number set to 2130706433 [ 801.082770][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 801.083058][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 801.083086][ T31] audit: type=1400 audit(1788170146.936:1210): avc: denied { create } for pid=15651 comm="syz.5.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.083121][ T31] audit: type=1400 audit(1788170147.186:1211): avc: denied { write } for pid=15651 comm="syz.5.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.178605][ T31] audit: type=1400 audit(1788170147.486:1212): avc: denied { allowed } for pid=15649 comm="syz.2.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 801.233555][ T983] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 801.253521][ T31] audit: type=1400 audit(1788170147.556:1213): avc: denied { create } for pid=15649 comm="syz.2.2934" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 801.277126][ T31] audit: type=1400 audit(1788170147.586:1214): avc: denied { map } for pid=15649 comm="syz.2.2934" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 801.277611][ T31] audit: type=1400 audit(1788170147.586:1215): avc: denied { read write } for pid=15649 comm="syz.2.2934" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 801.742185][ T983] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 801.823088][ T983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.823151][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.928991][ T31] audit: type=1400 audit(1788170148.236:1216): avc: denied { read } for pid=15649 comm="syz.2.2934" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 801.952891][ T31] audit: type=1400 audit(1788170148.266:1217): avc: denied { open } for pid=15649 comm="syz.2.2934" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 801.968356][ T983] usb 5-1: config 0 descriptor?? [ 801.979851][ T31] audit: type=1400 audit(1788170148.296:1218): avc: denied { create } for pid=15649 comm="syz.2.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 802.182725][ T983] pwc: Askey VC010 type 2 USB webcam detected. [ 802.314143][ T31] audit: type=1400 audit(1788170148.616:1219): avc: denied { write } for pid=15636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.475115][ T983] pwc: recv_control_msg error -32 req 02 val 2b00 [ 802.854578][ T983] pwc: recv_control_msg error -32 req 02 val 2700 [ 802.880619][ T983] pwc: recv_control_msg error -32 req 02 val 2c00 [ 803.056037][ T983] pwc: recv_control_msg error -32 req 04 val 1000 [ 803.085021][ T983] pwc: recv_control_msg error -32 req 04 val 1300 [ 803.112526][ T983] pwc: recv_control_msg error -32 req 04 val 1400 [ 803.432991][ T983] pwc: recv_control_msg error -32 req 02 val 2100 [ 803.437159][ T983] pwc: recv_control_msg error -32 req 04 val 1500 [ 803.437793][ T983] pwc: recv_control_msg error -32 req 02 val 2500 [ 803.444570][ T983] pwc: recv_control_msg error -32 req 02 val 2400 [ 803.568952][T15673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.776019][ T983] pwc: recv_control_msg error -71 req 02 val 2900 [ 803.776410][ T983] pwc: recv_control_msg error -71 req 02 val 2800 [ 803.777239][ T983] pwc: recv_control_msg error -71 req 04 val 1100 [ 803.777601][ T983] pwc: recv_control_msg error -71 req 04 val 1200 [ 803.810098][ T983] pwc: Registered as video103. [ 803.813298][ T983] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input214 [ 803.837081][ T983] usb 5-1: USB disconnect, device number 39 [ 804.948675][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.948737][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.586986][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 806.148575][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 806.149603][ T31] audit: type=1400 audit(1788170152.416:1241): avc: denied { create } for pid=15702 comm="syz.2.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 807.133152][ T31] audit: type=1400 audit(1788170153.436:1242): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 807.250979][ T31] audit: type=1400 audit(1788170153.556:1243): avc: denied { create } for pid=15703 comm="syz.0.2943" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 807.315945][ T31] audit: type=1400 audit(1788170153.626:1244): avc: denied { mount } for pid=15703 comm="syz.0.2943" name="/" dev="autofs" ino=62631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 807.316021][ T31] audit: type=1400 audit(1788170153.626:1245): avc: denied { write } for pid=15717 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.500380][ T31] audit: type=1400 audit(1788170153.806:1246): avc: denied { connect } for pid=15718 comm="syz.2.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 807.502537][ T31] audit: type=1400 audit(1788170153.806:1247): avc: denied { ioctl } for pid=15718 comm="syz.2.2944" path="socket:[62640]" dev="sockfs" ino=62640 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 807.555118][ T31] audit: type=1400 audit(1788170153.856:1248): avc: denied { unmount } for pid=15166 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 808.013970][ T31] audit: type=1400 audit(1788170154.296:1249): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 809.004864][ T31] audit: type=1400 audit(1788170155.306:1250): avc: denied { unlink } for pid=5598 comm="syz-executor" name="file0" dev="tmpfs" ino=3509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 809.091521][T15734] udc dummy_udc.0: failed to start g1: -19 [ 809.673539][T15740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 810.064317][T15734] UDC core: g1: couldn't find an available UDC or it's busy [ 810.427351][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2948'. [ 810.427428][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2948'. [ 812.453258][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 812.462299][ T31] audit: type=1400 audit(1788170158.756:1258): avc: denied { write } for pid=15743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.609407][ T31] audit: type=1400 audit(1788170158.916:1259): avc: denied { write } for pid=15779 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.824593][ T31] audit: type=1400 audit(1788170159.126:1260): avc: denied { nlmsg_write } for pid=15774 comm="syz.5.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 812.915786][ T31] audit: type=1400 audit(1788170159.206:1261): avc: denied { watch } for pid=15782 comm="syz.0.2954" path="/655/file0" dev="tmpfs" ino=3520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 812.939718][ T31] audit: type=1400 audit(1788170159.206:1262): avc: denied { watch_sb watch_reads } for pid=15782 comm="syz.0.2954" path="/655/file0" dev="tmpfs" ino=3520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 813.240031][ T31] audit: type=1400 audit(1788170159.546:1263): avc: denied { create } for pid=15774 comm="syz.5.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 813.303704][ T5262] veth0_vlan: left promiscuous mode [ 813.356520][ T10] veth0_vlan: entered promiscuous mode [ 813.644193][ T31] audit: type=1400 audit(1788170159.946:1264): avc: denied { mmap_zero } for pid=15792 comm="syz.0.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 813.689620][ T31] audit: type=1400 audit(1788170159.986:1265): avc: denied { bind } for pid=15792 comm="syz.0.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 813.722643][ T31] audit: type=1400 audit(1788170160.026:1266): avc: denied { write } for pid=15792 comm="syz.0.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 814.403711][ T31] audit: type=1400 audit(1788170160.366:1267): avc: denied { ioctl } for pid=15794 comm="//(" path="socket:[62687]" dev="sockfs" ino=62687 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 814.557015][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 815.066424][T15813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 817.770379][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 817.770416][ T31] audit: type=1400 audit(1788170164.076:1274): avc: denied { create } for pid=15827 comm="syz.0.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 818.507896][ T31] audit: type=1400 audit(1788170164.806:1275): avc: denied { write } for pid=15845 comm="syz.2.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 818.910155][ T31] audit: type=1400 audit(1788170165.216:1276): avc: denied { read } for pid=15859 comm="syz.0.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 821.211078][ T31] audit: type=1326 audit(1788170167.516:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.5.2968" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9133d9e159 code=0x0 [ 821.814522][T15892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 821.884848][ T31] audit: type=1400 audit(1788170168.116:1278): avc: denied { create } for pid=15879 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 821.904663][ T31] audit: type=1400 audit(1788170168.126:1279): avc: denied { connect } for pid=15879 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 822.369500][ T5715] fq: likely mono tstamp with tstamp_type 0 [ 822.376400][ T31] audit: type=1400 audit(1788170168.676:1280): avc: denied { write } for pid=15868 comm="syz.5.2968" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 822.441753][ T5715] fq: likely mono tstamp with tstamp_type 0 [ 822.504170][T15901] netlink: 'syz.1.2974': attribute type 19 has an invalid length. [ 823.122909][ T5815] fq: likely mono tstamp with tstamp_type 0 [ 823.126205][ T5815] fq: likely mono tstamp with tstamp_type 0 [ 823.362007][ T31] audit: type=1400 audit(1788170169.636:1281): avc: denied { write } for pid=15895 comm="syz.4.2973" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 823.362183][ T31] audit: type=1400 audit(1788170169.636:1282): avc: denied { open } for pid=15895 comm="syz.4.2973" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 823.848098][ T31] audit: type=1400 audit(1788170170.146:1283): avc: denied { read } for pid=15911 comm="syz.5.2979" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 823.848624][ T31] audit: type=1400 audit(1788170170.146:1284): avc: denied { open } for pid=15911 comm="syz.5.2979" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 823.848671][ T31] audit: type=1400 audit(1788170170.146:1285): avc: denied { read } for pid=15911 comm="syz.5.2979" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 823.848707][ T31] audit: type=1400 audit(1788170170.146:1286): avc: denied { open } for pid=15911 comm="syz.5.2979" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 824.097940][ T5815] fq: likely mono tstamp with tstamp_type 0 [ 824.446136][ T31] audit: type=1400 audit(1788170170.746:1287): avc: denied { mount } for pid=15915 comm="syz.0.2981" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 825.608257][T15926] ip6t_hbh: too many supported opts specified [ 825.726975][ T31] audit: type=1400 audit(1788170171.836:1288): avc: denied { mount } for pid=15922 comm="syz.4.2980" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 825.750812][ T10] fq: likely mono tstamp with tstamp_type 0 [ 825.759189][ T31] audit: type=1400 audit(1788170171.926:1289): avc: denied { read write } for pid=15922 comm="syz.4.2980" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 825.783748][ T31] audit: type=1400 audit(1788170171.926:1290): avc: denied { open } for pid=15922 comm="syz.4.2980" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 826.266464][T15935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15935 comm=syz.1.2978 [ 828.417120][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 828.417159][ T31] audit: type=1400 audit(1788170174.716:1296): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 828.668784][T15968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 829.065042][T15970] ================================================================== [ 829.065057][T15970] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 829.065086][T15970] Read of size 64 at addr ffffffff9bcacc60 by task syz.1.2989/15970 [ 829.065101][T15970] [ 829.065113][T15970] CPU: 1 UID: 0 PID: 15970 Comm: syz.1.2989 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.065139][T15970] Tainted: [L]=SOFTLOCKUP [ 829.065145][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 829.065156][T15970] Call Trace: [ 829.065162][T15970] [ 829.065169][T15970] dump_stack_lvl+0x100/0x190 [ 829.065196][T15970] print_report+0x13d/0x4b0 [ 829.065223][T15970] ? __virt_addr_valid+0x239/0x430 [ 829.065243][T15970] ? usb_copy_descriptors+0x18d/0x320 [ 829.065264][T15970] kasan_report+0xdf/0x1c0 [ 829.065345][T15970] ? usb_copy_descriptors+0x18d/0x320 [ 829.065369][T15970] kasan_check_range+0x10f/0x1e0 [ 829.065394][T15970] __asan_memcpy+0x23/0x60 [ 829.065435][T15970] usb_copy_descriptors+0x18d/0x320 [ 829.065456][T15970] usb_assign_descriptors+0xd2/0x470 [ 829.065476][T15970] f_audio_bind+0x243a/0x3950 [ 829.065505][T15970] ? __pfx_f_audio_bind+0x10/0x10 [ 829.065529][T15970] usb_add_function+0x219/0x890 [ 829.065551][T15970] configfs_composite_bind+0xd83/0x1960 [ 829.065576][T15970] gadget_bind_driver+0x28c/0xbf0 [ 829.065604][T15970] ? __pfx_gadget_bind_driver+0x10/0x10 [ 829.065632][T15970] really_probe+0x241/0xa60 [ 829.065689][T15970] __driver_probe_device+0x210/0x460 [ 829.065717][T15970] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 829.065750][T15970] driver_probe_device+0x4a/0x140 [ 829.065778][T15970] __driver_attach+0x21f/0x5b0 [ 829.065794][T15970] ? __pfx___driver_attach+0x10/0x10 [ 829.065811][T15970] bus_for_each_dev+0x13e/0x1d0 [ 829.065886][T15970] ? __pfx_bus_for_each_dev+0x10/0x10 [ 829.065910][T15970] ? bus_add_driver+0x2b5/0x5b0 [ 829.065939][T15970] bus_add_driver+0x305/0x5b0 [ 829.065967][T15970] driver_register+0x1e2/0x360 [ 829.065988][T15970] usb_gadget_register_driver_owner+0x132/0x210 [ 829.066017][T15970] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 829.066039][T15970] configfs_write_iter+0x302/0x4e0 [ 829.066114][T15970] vfs_write+0x6af/0x1050 [ 829.066167][T15970] ? __pfx_configfs_write_iter+0x10/0x10 [ 829.066195][T15970] ? __pfx_vfs_write+0x10/0x10 [ 829.066221][T15970] ? find_held_lock+0x2b/0x80 [ 829.066254][T15970] ksys_write+0x12a/0x250 [ 829.066270][T15970] ? __pfx_ksys_write+0x10/0x10 [ 829.066289][T15970] do_syscall_64+0x123/0x790 [ 829.066310][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.066337][T15970] RIP: 0033:0x7f2a2059e159 [ 829.066352][T15970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.066371][T15970] RSP: 002b:00007f2a1e7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 829.066389][T15970] RAX: ffffffffffffffda RBX: 00007f2a20826180 RCX: 00007f2a2059e159 [ 829.066403][T15970] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000006 [ 829.066415][T15970] RBP: 00007f2a20635024 R08: 0000000000000000 R09: 0000000000000000 [ 829.066426][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.066437][T15970] R13: 00007f2a20826218 R14: 00007f2a20826180 R15: 00007ffcf4bb98c8 [ 829.066455][T15970] [ 829.066462][T15970] [ 829.066467][T15970] The buggy address belongs to the variable: [ 829.066473][T15970] ac_header_desc+0x0/0x40 [ 829.066489][T15970] [ 829.066493][T15970] The buggy address belongs to the physical page: [ 829.066500][T15970] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bcac [ 829.066516][T15970] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 829.066539][T15970] raw: 00fff00000002000 ffffea00006f2b08 ffffea00006f2b08 0000000000000000 [ 829.066555][T15970] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 829.066566][T15970] page dumped because: kasan: bad access detected [ 829.066574][T15970] page_owner info is not present (never set?) [ 829.066581][T15970] [ 829.066584][T15970] Memory state around the buggy address: [ 829.066594][T15970] ffffffff9bcacb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 829.066606][T15970] ffffffff9bcacb80: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 829.066619][T15970] >ffffffff9bcacc00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 829.066629][T15970] ^ [ 829.066641][T15970] ffffffff9bcacc80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 829.066653][T15970] ffffffff9bcacd00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 829.066664][T15970] ================================================================== [ 829.066674][T15970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 829.527731][T15970] CPU: 1 UID: 0 PID: 15970 Comm: syz.1.2989 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.538648][T15970] Tainted: [L]=SOFTLOCKUP [ 829.542949][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 829.552983][T15970] Call Trace: [ 829.556244][T15970] [ 829.559156][T15970] dump_stack_lvl+0x100/0x190 [ 829.563824][T15970] vpanic+0x553/0x970 [ 829.567788][T15970] ? __pfx_vpanic+0x10/0x10 [ 829.572277][T15970] ? __pfx_vprintk_emit+0x10/0x10 [ 829.577302][T15970] ? usb_copy_descriptors+0x18d/0x320 [ 829.582664][T15970] panic+0xd1/0xe0 [ 829.586368][T15970] ? __pfx_panic+0x10/0x10 [ 829.590771][T15970] ? usb_copy_descriptors+0x18d/0x320 [ 829.596132][T15970] check_panic_on_warn.cold+0x19/0x34 [ 829.601491][T15970] end_report.part.0+0x3a/0x90 [ 829.606248][T15970] kasan_report.cold+0xe/0x18 [ 829.610918][T15970] ? usb_copy_descriptors+0x18d/0x320 [ 829.616276][T15970] kasan_check_range+0x10f/0x1e0 [ 829.621232][T15970] __asan_memcpy+0x23/0x60 [ 829.625640][T15970] usb_copy_descriptors+0x18d/0x320 [ 829.630823][T15970] usb_assign_descriptors+0xd2/0x470 [ 829.636093][T15970] f_audio_bind+0x243a/0x3950 [ 829.640763][T15970] ? __pfx_f_audio_bind+0x10/0x10 [ 829.645775][T15970] usb_add_function+0x219/0x890 [ 829.650616][T15970] configfs_composite_bind+0xd83/0x1960 [ 829.656147][T15970] gadget_bind_driver+0x28c/0xbf0 [ 829.661157][T15970] ? __pfx_gadget_bind_driver+0x10/0x10 [ 829.666690][T15970] really_probe+0x241/0xa60 [ 829.671183][T15970] __driver_probe_device+0x210/0x460 [ 829.676456][T15970] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 829.682252][T15970] driver_probe_device+0x4a/0x140 [ 829.687266][T15970] __driver_attach+0x21f/0x5b0 [ 829.692015][T15970] ? __pfx___driver_attach+0x10/0x10 [ 829.697278][T15970] bus_for_each_dev+0x13e/0x1d0 [ 829.702119][T15970] ? __pfx_bus_for_each_dev+0x10/0x10 [ 829.707473][T15970] ? bus_add_driver+0x2b5/0x5b0 [ 829.712312][T15970] bus_add_driver+0x305/0x5b0 [ 829.716980][T15970] driver_register+0x1e2/0x360 [ 829.721725][T15970] usb_gadget_register_driver_owner+0x132/0x210 [ 829.727952][T15970] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 829.733571][T15970] configfs_write_iter+0x302/0x4e0 [ 829.738670][T15970] vfs_write+0x6af/0x1050 [ 829.742989][T15970] ? __pfx_configfs_write_iter+0x10/0x10 [ 829.748607][T15970] ? __pfx_vfs_write+0x10/0x10 [ 829.753355][T15970] ? find_held_lock+0x2b/0x80 [ 829.758021][T15970] ksys_write+0x12a/0x250 [ 829.762331][T15970] ? __pfx_ksys_write+0x10/0x10 [ 829.767162][T15970] do_syscall_64+0x123/0x790 [ 829.771736][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.777611][T15970] RIP: 0033:0x7f2a2059e159 [ 829.782005][T15970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.801594][T15970] RSP: 002b:00007f2a1e7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 829.810003][T15970] RAX: ffffffffffffffda RBX: 00007f2a20826180 RCX: 00007f2a2059e159 [ 829.817954][T15970] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000006 [ 829.825902][T15970] RBP: 00007f2a20635024 R08: 0000000000000000 R09: 0000000000000000 [ 829.833851][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.841801][T15970] R13: 00007f2a20826218 R14: 00007f2a20826180 R15: 00007ffcf4bb98c8 [ 829.849756][T15970] [ 829.852936][T15970] Kernel Offset: disabled [ 829.857233][T15970] Rebooting in 86400 seconds..